last executing test programs: 11m29.343034145s ago: executing program 32 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 11m23.938188775s ago: executing program 33 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f20c035000000400f22c00f01c2b8010000000f01c18fe97c806e00450f3566470f38829370b50000440fc773ee0f3066b817018ee8c4817576ad0c000000", 0x3f}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m54.645554079s ago: executing program 34 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10m52.759640865s ago: executing program 1 (id=446): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000b00)={0x0, 0x200f36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 10m52.563388444s ago: executing program 1 (id=448): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 10m52.189711256s ago: executing program 1 (id=449): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000043c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efe0200000022d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6b70baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34ca6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2000552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d646200", 0x2000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xffeffffd, 0x5, 0xaca, 0x1, "e31500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 10m51.213156055s ago: executing program 1 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 10m50.714921203s ago: executing program 1 (id=455): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x1c2a, 0x10100, 0x1, 0x17c, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) io_uring_enter(r2, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f0000001380)=""/229, 0xe5) 10m49.898952149s ago: executing program 1 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m49.684805044s ago: executing program 35 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m38.81550883s ago: executing program 7 (id=530): bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000280)={0x18, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xbb2, 0x3) 10m37.101256406s ago: executing program 7 (id=542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffff6d5) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/108, 0x6c}], 0x1}, 0x20) shutdown(r0, 0x0) 10m36.881342675s ago: executing program 7 (id=543): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044855}, 0x4048804) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 10m36.73279606s ago: executing program 7 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 10m36.541558589s ago: executing program 7 (id=548): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0400000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f90", 0x81}], 0x1}}], 0x2, 0x44088) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) 10m36.239766314s ago: executing program 7 (id=552): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0xb7, 0x2}}, @val={0x3e, 0x1, 0x1}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x5]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m35.869384373s ago: executing program 36 (id=552): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0xb7, 0x2}}, @val={0x3e, 0x1, 0x1}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x5]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m35.230828662s ago: executing program 9 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0xfffffe5d) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x8000, 0xa1c4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000200)=@known='system.advise\x00') 9m34.328753897s ago: executing program 9 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 9m34.0778683s ago: executing program 9 (id=1067): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6(0xa, 0x80002, 0x88) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) 9m32.960137956s ago: executing program 9 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 9m32.713923711s ago: executing program 9 (id=1074): r0 = io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58, 0x4000}}], 0x1, 0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m32.393643769s ago: executing program 9 (id=1077): inotify_init() r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 9m32.025822473s ago: executing program 37 (id=1077): inotify_init() r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 9m16.491574232s ago: executing program 5 (id=1203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0xfff}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000002c0)='`', 0x1}], 0x1}}], 0x1, 0x24008041) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 9m16.458456617s ago: executing program 5 (id=1204): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 9m16.415087591s ago: executing program 5 (id=1205): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 9m15.544339564s ago: executing program 5 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m15.491280677s ago: executing program 5 (id=1211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) sendmsg$sock(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x10) 9m15.19553394s ago: executing program 5 (id=1212): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 9m14.845070363s ago: executing program 38 (id=1212): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 8m42.142844017s ago: executing program 8 (id=1436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8m41.927598789s ago: executing program 8 (id=1438): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000011c0)=""/171, 0xab) poll(&(0x7f0000000000), 0x35, 0x0) close(r1) r2 = socket(0x2, 0x4001, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) close(r3) socket(0x2, 0x2, 0x0) poll(0x0, 0x0, 0x1400) poll(&(0x7f0000000000), 0x35, 0x0) 8m41.007948823s ago: executing program 8 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) io_setup(0x2004, &(0x7f0000000680)) 8m40.373613208s ago: executing program 8 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x23) 8m40.107536744s ago: executing program 8 (id=1452): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 8m39.075650675s ago: executing program 8 (id=1463): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x6c2) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) 8m38.683728816s ago: executing program 39 (id=1463): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x6c2) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) 12.572828013s ago: executing program 6 (id=3492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000180)) shmget(0x1, 0x3000, 0x78000a04, &(0x7f0000768000/0x3000)=nil) 11.78799975s ago: executing program 3 (id=3494): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) dup(r1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) 11.104467846s ago: executing program 3 (id=3496): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd2894000000000000010902"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x80002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 10.674557523s ago: executing program 0 (id=3498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x8000000000001de, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) 10.010864287s ago: executing program 4 (id=3499): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 8.289142295s ago: executing program 4 (id=3511): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgget$private(0x0, 0x2b5) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 8.278123911s ago: executing program 0 (id=3512): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.431519642s ago: executing program 4 (id=3502): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x430301, 0x78) 7.431350076s ago: executing program 6 (id=3503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r5, 0x303, 0x0, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 7.431223923s ago: executing program 3 (id=3504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0100001900010029bd700000000000fc020000000000000000000000000000fe80000000000000000000000000001700000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd0200000000000000000000000000000001000200000000c4000500ac141439000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000000000000320000000000000000000000000000000000000000000000ffffff00000000ff020000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa000000"], 0x17c}}, 0x20000004) 7.431082559s ago: executing program 0 (id=3505): socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="2001987c5ccf58f5f75061", 0xb}, {&(0x7f00000003c0)="8b120728c9", 0x5}], 0x2}}], 0x1, 0x8810) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 5.772230906s ago: executing program 6 (id=3506): socket$inet6(0xa, 0x3, 0x4) socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5.771548013s ago: executing program 3 (id=3507): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05337bcb64c648bf510562b5d1881afdf8f34baae40c922a422811fc9d686e3e3cb42103163f1cc61a197700eb25da22f783b85ad1bec8", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c000b8008000900fdffffff"], 0x3c}}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) 5.759054736s ago: executing program 4 (id=3508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5.592645875s ago: executing program 2 (id=3510): io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x80, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 5.510387926s ago: executing program 6 (id=3513): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.44963395s ago: executing program 2 (id=3514): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 4.743628001s ago: executing program 6 (id=3515): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r3 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.331029683s ago: executing program 4 (id=3516): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x288200, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x400003, 0x800004, 0x7) lseek(0xffffffffffffffff, 0xe, 0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c) 3.976722467s ago: executing program 2 (id=3517): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x42, 0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.403683914s ago: executing program 2 (id=3518): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 3.389646325s ago: executing program 0 (id=3519): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x1fc}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.672062503s ago: executing program 3 (id=3520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460002f9bbff7f000000000000020003"], 0x189) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) 2.599663323s ago: executing program 4 (id=3521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 2.05700146s ago: executing program 0 (id=3522): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x430301, 0x78) 2.056349224s ago: executing program 2 (id=3532): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1.81179873s ago: executing program 2 (id=3523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000037, 0x7fffffffffffffff, 0x0, 0x40180, 0x5, 0x14, 0xf1, 0x3, 0x7fffffffffffe, 0x5, 0x5, 0x7, 0x4000000000, 0x45, 0x4, 0xbdb], 0x1, 0xc5213}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1.275495021s ago: executing program 3 (id=3524): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.054932561s ago: executing program 0 (id=3525): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x38}, 0x5) sendmsg(r3, 0x0, 0x8000) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) syz_clone3(&(0x7f00000003c0)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 6 (id=3526): openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) kernel console output (not intermixed with test programs): 34b98eec9 code=0x7ffc0000 [ 244.954450][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.966676][ T30] audit: type=1326 audit(1758618813.808:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.8.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b98eec9 code=0x7ffc0000 [ 244.997402][ T30] audit: type=1326 audit(1758618813.808:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.8.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b98eec9 code=0x7ffc0000 [ 245.033909][ T30] audit: type=1326 audit(1758618813.808:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.8.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f234b98eec9 code=0x7ffc0000 [ 246.955661][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 248.272574][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 249.412057][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 249.412078][ T30] audit: type=1400 audit(1758618818.498:570): avc: denied { getopt } for pid=10223 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.874969][T10230] sd 0:0:1:0: PR command failed: 1026 [ 249.880402][T10230] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 249.887682][T10230] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 249.959685][T10241] binder: 10240:10241 unknown command 0 [ 249.979044][T10241] binder: 10240:10241 ioctl c0306201 200000000080 returned -22 [ 250.141306][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1406'. [ 250.189645][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1406'. [ 251.046498][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'. [ 251.190838][ T912] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 251.430500][ T912] usb 9-1: Using ep0 maxpacket: 16 [ 251.456806][ T912] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 251.679641][ T912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.736025][ T912] usb 9-1: Product: syz [ 251.749400][ T912] usb 9-1: Manufacturer: syz [ 251.774484][ T912] usb 9-1: SerialNumber: syz [ 251.779169][ T30] audit: type=1400 audit(1758618820.878:571): avc: denied { watch watch_reads } for pid=10276 comm="syz.2.1416" path="/30/file1" dev="autofs" ino=38120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 251.841168][ T912] r8152-cfgselector 9-1: Unknown version 0x0000 [ 251.857718][ T912] r8152-cfgselector 9-1: config 0 descriptor?? [ 251.874828][T10280] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 252.145427][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1423'. [ 252.212054][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 252.353815][ T6010] r8152-cfgselector 9-1: USB disconnect, device number 9 [ 252.559083][T10304] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 253.001386][ T6010] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 253.110824][ T5919] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 253.182428][ T6010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.199712][ T6010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 253.219657][ T6010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.230003][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.239624][ T6010] usb 4-1: Product: syz [ 253.244559][ T6010] usb 4-1: Manufacturer: syz [ 253.249231][ T6010] usb 4-1: SerialNumber: syz [ 253.271934][ T5864] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 253.279177][T10314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.290602][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 253.319127][ T5919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.341214][ T5919] usb 3-1: config 0 has no interface number 0 [ 253.349618][ T5919] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 253.366418][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.376657][ T5919] usb 3-1: Product: syz [ 253.381355][ T5919] usb 3-1: Manufacturer: syz [ 253.385970][ T5919] usb 3-1: SerialNumber: syz [ 253.401091][ T5919] usb 3-1: config 0 descriptor?? [ 253.411342][ T5919] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 254.323208][ T6010] cdc_ncm 4-1:1.0: failed to get mac address [ 254.344651][ T6010] cdc_ncm 4-1:1.0: bind() failure [ 254.374368][ T6010] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 254.393346][ T6010] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 254.403734][ T6010] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 254.417789][ T6010] usb 4-1: USB disconnect, device number 13 [ 254.533478][T10352] overlayfs: failed to clone upperpath [ 255.239082][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.246790][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.354830][ T30] audit: type=1400 audit(1758618824.448:572): avc: denied { create } for pid=10370 comm="syz.3.1451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 255.455385][ T5919] gspca_spca1528: reg_r err -71 [ 255.460313][ T5919] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 255.481936][ T5919] usb 3-1: USB disconnect, device number 4 [ 255.657765][ T30] audit: type=1804 audit(1758618824.758:573): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1455" name="file0" dev="ramfs" ino=37567 res=1 errno=0 [ 255.937862][T10381] 9pnet: Found fid 0 not clunked [ 257.682543][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 257.756209][ T8183] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.768541][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 257.809211][ T8183] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.840887][ T8183] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.851117][ T8187] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.859699][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 257.913277][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 257.999062][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.009865][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.023189][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.034655][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.047525][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.207692][ T30] audit: type=1400 audit(1758618827.308:574): avc: denied { ioctl } for pid=10429 comm="syz.0.1476" path="socket:[37671]" dev="sockfs" ino=37671 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 258.299570][ T30] audit: type=1400 audit(1758618827.338:575): avc: denied { getopt } for pid=10429 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 258.310818][ T5919] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 258.491040][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 258.507706][ T5919] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 258.525896][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.539796][T10422] chnl_net:caif_netlink_parms(): no params data found [ 258.546861][ T5919] usb 4-1: Product: syz [ 258.554536][ T5919] usb 4-1: Manufacturer: syz [ 258.569029][ T5919] usb 4-1: SerialNumber: syz [ 258.579351][ T5919] usb 4-1: config 0 descriptor?? [ 258.820085][ T5919] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 258.876089][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.909747][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.963958][T10422] bridge_slave_0: entered allmulticast mode [ 258.984150][T10422] bridge_slave_0: entered promiscuous mode [ 259.007431][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.023543][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.052562][T10422] bridge_slave_1: entered allmulticast mode [ 259.065848][T10422] bridge_slave_1: entered promiscuous mode [ 259.124065][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.137652][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.324275][T10422] team0: Port device team_slave_0 added [ 259.365436][T10422] team0: Port device team_slave_1 added [ 259.498228][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.526250][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.620532][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.649245][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.677742][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.723668][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.776618][ T5919] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 259.792811][ T5919] usb 4-1: USB disconnect, device number 14 [ 259.829401][T10422] hsr_slave_0: entered promiscuous mode [ 259.855977][T10422] hsr_slave_1: entered promiscuous mode [ 259.865566][T10422] debugfs: 'hsr0' already exists in 'hsr' [ 259.872209][T10422] Cannot create hsr debugfs directory [ 260.110734][ T5864] Bluetooth: hci1: command tx timeout [ 260.356638][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ca3e400: rx timeout, send abort [ 260.367319][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ca3e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 260.383331][ T30] audit: type=1400 audit(1758618829.488:576): avc: denied { read } for pid=5205 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 260.431253][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 260.485528][ T30] audit: type=1400 audit(1758618829.488:577): avc: denied { search } for pid=5205 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.556326][ T30] audit: type=1400 audit(1758618829.488:578): avc: denied { search } for pid=5205 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.602739][ T30] audit: type=1400 audit(1758618829.488:579): avc: denied { add_name } for pid=5205 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.663413][ T30] audit: type=1400 audit(1758618829.488:580): avc: denied { create } for pid=5205 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.770668][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.820497][ T30] audit: type=1400 audit(1758618829.488:581): avc: denied { append open } for pid=5205 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.891381][ T30] audit: type=1400 audit(1758618829.488:582): avc: denied { getattr } for pid=5205 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.970919][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 260.993363][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.006406][ T24] usb 4-1: config 0 has no interface number 0 [ 261.033084][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.042626][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.058069][ T24] usb 4-1: Product: syz [ 261.068200][ T24] usb 4-1: Manufacturer: syz [ 261.080442][ T24] usb 4-1: SerialNumber: syz [ 261.097135][ T24] usb 4-1: config 0 descriptor?? [ 261.111908][ T24] smsc95xx v2.0.0 [ 261.169581][T10422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.229945][T10422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.264479][T10422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.390099][T10422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.544308][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 261.575147][T10422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.626024][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.648611][T10422] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.677476][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.684572][ T8184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.760113][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.767293][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.185564][T10422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.196366][ T5850] Bluetooth: hci1: command tx timeout [ 262.274225][ T5850] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 262.284099][ T5850] Bluetooth: hci4: Injecting HCI hardware error event [ 262.293301][ T5864] Bluetooth: hci4: hardware error 0x00 [ 262.672384][T10422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.756901][ T5919] IPVS: starting estimator thread 0... [ 262.851930][T10511] IPVS: using max 53 ests per chain, 127200 per kthread [ 262.893410][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1500'. [ 263.133434][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 263.151455][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 263.152639][T10422] veth0_vlan: entered promiscuous mode [ 263.202221][T10422] veth1_vlan: entered promiscuous mode [ 263.233321][T10422] veth0_macvtap: entered promiscuous mode [ 263.241272][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 263.255000][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 263.271038][T10422] veth1_macvtap: entered promiscuous mode [ 263.277098][ T24] usb 4-1: USB disconnect, device number 15 [ 263.316056][T10422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.327855][T10422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.356195][ T8184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.402271][ T8184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.418866][ T8184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.435158][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 263.435730][ T8184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.479153][T10542] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.494837][T10542] bridge0: port 3(syz_tun) entered disabled state [ 263.502384][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.511365][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.529027][ T912] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.547576][T10541] vlan2: entered allmulticast mode [ 263.557408][T10541] bridge0: entered allmulticast mode [ 263.564496][T10541] bridge1: port 1(vlan2) entered blocking state [ 263.570974][T10541] bridge1: port 1(vlan2) entered disabled state [ 263.579413][T10541] vlan2: entered promiscuous mode [ 263.586657][T10541] bridge0: entered promiscuous mode [ 263.643399][ T8180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.659590][ T8180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.699005][ T8184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.709636][ T8184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.718340][ T912] usb 3-1: Using ep0 maxpacket: 8 [ 263.736185][ T912] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 263.753542][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.779170][ T912] usb 3-1: Product: syz [ 263.789012][ T912] usb 3-1: Manufacturer: syz [ 263.800445][ T912] usb 3-1: SerialNumber: syz [ 263.813772][ T912] usb 3-1: config 0 descriptor?? [ 263.829562][ T24] Process accounting resumed [ 263.871098][T10551] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 263.895847][T10551] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1464'. [ 263.939491][ T30] audit: type=1400 audit(1758618833.038:583): avc: denied { mounton } for pid=10554 comm="syz.0.1514" path="/84/file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 263.980597][ T30] audit: type=1400 audit(1758618833.038:584): avc: denied { read write } for pid=10554 comm="syz.0.1514" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.040340][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 264.049717][ T30] audit: type=1400 audit(1758618833.048:585): avc: denied { open } for pid=10554 comm="syz.0.1514" path="/84/file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.079029][ T912] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.276520][ T5850] Bluetooth: hci1: command tx timeout [ 264.480609][ T5864] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 264.790823][T10582] tipc: Started in network mode [ 264.800227][T10582] tipc: Node identity e2780d5a8e72, cluster identity 4711 [ 264.839546][T10582] tipc: Enabled bearer , priority 0 [ 264.882558][T10578] tipc: Resetting bearer [ 265.485811][ T912] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 265.499516][ T912] usb 3-1: USB disconnect, device number 5 [ 265.884903][ T5912] tipc: Node number set to 1812598106 [ 266.077173][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 266.077188][ T30] audit: type=1400 audit(1758618835.178:589): avc: denied { append } for pid=10596 comm="syz.2.1528" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.350591][ T5864] Bluetooth: hci1: command tx timeout [ 267.370850][T10578] tipc: Disabling bearer [ 267.386491][T10606] tipc: Enabling of bearer rejected, failed to enable media [ 267.504625][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 267.739840][T10637] syz_tun: entered allmulticast mode [ 267.757353][T10637] dvmrp1: entered allmulticast mode [ 267.803864][T10636] syz_tun: left allmulticast mode [ 267.905497][ T30] audit: type=1800 audit(1758618837.008:590): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1539" name="/" dev="fuse" ino=5 res=0 errno=0 [ 270.020695][T10699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 271.768224][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 271.876185][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1571'. [ 271.970665][T10720] team0: Port device team_slave_0 removed [ 271.980164][ T30] audit: type=1326 audit(1758618841.078:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.4.1572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x0 [ 273.027407][T10744] binder: 10743:10744 ioctl 4018620d 0 returned -22 [ 273.058949][T10744] binder: 10743:10744 ioctl c0306201 0 returned -14 [ 273.207998][T10744] binder: 10743:10744 ioctl c018620b 0 returned -14 [ 275.917375][T10774] team0 (unregistering): Port device team_slave_0 removed [ 275.935307][ T30] audit: type=1326 audit(1758618845.038:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.1593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdebad8eec9 code=0x0 [ 275.963786][T10774] team0 (unregistering): Port device team_slave_1 removed [ 276.694691][T10814] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.959315][T10823] delete_channel: no stack [ 277.248555][ T30] audit: type=1400 audit(1758618846.348:593): avc: denied { write } for pid=10827 comm="syz.2.1607" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 277.276478][T10828] Error: Device magic number does not match. [ 277.941506][ T30] audit: type=1400 audit(1758618847.038:594): avc: denied { connect } for pid=10851 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.108571][ T30] audit: type=1400 audit(1758618847.078:595): avc: denied { read } for pid=10851 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.030741][ T30] audit: type=1326 audit(1758618847.978:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 279.167481][ T30] audit: type=1326 audit(1758618847.978:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 279.241266][ T30] audit: type=1326 audit(1758618847.978:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 279.310238][ T30] audit: type=1326 audit(1758618847.978:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 279.374367][ T30] audit: type=1326 audit(1758618847.978:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 279.479925][ T30] audit: type=1326 audit(1758618847.978:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 279.568923][ T30] audit: type=1326 audit(1758618847.978:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7ffc0000 [ 280.379111][T10907] __vm_enough_memory: pid: 10907, comm: syz.4.1633, bytes: 21199988527104 not enough memory for the allocation [ 281.414463][T10929] openvswitch: netlink: Tunnel attr 12806 out of range max 16 [ 281.656193][T10938] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 282.284834][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 282.284852][ T30] audit: type=1326 audit(1758618851.318:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 282.424949][ T30] audit: type=1326 audit(1758618851.318:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 282.452851][ T30] audit: type=1326 audit(1758618851.318:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 282.522733][ T30] audit: type=1326 audit(1758618851.318:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 282.590847][ T30] audit: type=1326 audit(1758618851.318:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 282.760528][ T6010] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 283.014295][ T30] audit: type=1326 audit(1758618851.318:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 283.050614][ T30] audit: type=1326 audit(1758618851.318:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 283.090296][ T30] audit: type=1326 audit(1758618851.318:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 283.129982][ T30] audit: type=1326 audit(1758618851.318:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 283.229623][ T6010] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.270718][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.280570][ T30] audit: type=1326 audit(1758618851.318:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 283.325722][ T6010] usb 5-1: config 0 descriptor?? [ 283.549275][ T5919] usb 5-1: USB disconnect, device number 5 [ 285.144966][T11047] overlayfs: failed to clone upperpath [ 286.584683][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059249c00: rx timeout, send abort [ 286.593304][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059249c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.607982][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059249400: rx timeout, send abort [ 286.617323][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059249400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.656388][T11077] bridge_slave_0: left allmulticast mode [ 286.680947][T11077] bridge_slave_0: left promiscuous mode [ 286.700892][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.861214][T11077] bridge_slave_1: left allmulticast mode [ 286.881984][T11077] bridge_slave_1: left promiscuous mode [ 286.918741][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.955649][T11077] bond0: (slave bond_slave_0): Releasing backup interface [ 286.989208][T11077] bond0: (slave bond_slave_1): Releasing backup interface [ 287.013083][T11077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.043838][T11077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.068717][T11077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.081836][T11077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.129677][T11077] batman_adv: batadv0: Removing interface: gretap1 [ 287.237393][T11077] bond1: (slave bridge1): Releasing backup interface [ 287.445737][T11077] bridge1: left promiscuous mode [ 287.629223][T11080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.747039][T11099] syzkaller1: entered promiscuous mode [ 287.766897][T11099] syzkaller1: entered allmulticast mode [ 288.897737][T11122] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000011 [ 289.583739][T11136] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1699'. [ 289.596490][T11136] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1699'. [ 289.605717][T11136] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1699'. [ 290.094591][T11143] overlayfs: failed to clone upperpath [ 290.596714][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 290.596729][ T30] audit: type=1326 audit(1758618859.698:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7fc00000 [ 290.693262][T11147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.141930][ T30] audit: type=1326 audit(1758618860.248:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11154 comm="syz.6.1707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x0 [ 291.290014][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1702'. [ 294.697887][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 296.490985][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 296.691512][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.711758][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.722692][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.745588][ T24] usb 5-1: config 0 descriptor?? [ 296.759931][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 296.954350][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1743'. [ 296.995420][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 297.172989][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.221882][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.272571][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.290467][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 297.306282][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 297.331214][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 297.343103][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 297.557487][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 297.597516][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 297.615692][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 297.623475][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 297.645277][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 297.655998][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 297.662919][ T30] audit: type=1400 audit(1758618866.768:637): avc: denied { open } for pid=11273 comm="syz.0.1747" path="/150/file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.666755][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 297.722750][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 297.742743][ T24] pwc: Registered as video103. [ 297.748935][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 297.753401][ T30] audit: type=1400 audit(1758618866.798:638): avc: denied { ioctl } for pid=11273 comm="syz.0.1747" path="/150/file0" dev="tmpfs" ino=816 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.787451][T11279] overlayfs: failed to clone upperpath [ 297.808593][ T24] usb 5-1: USB disconnect, device number 6 [ 299.127982][ T30] audit: type=1804 audit(1758618868.228:639): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1760" name="/newroot/94/file0" dev="tmpfs" ino=524 res=1 errno=0 [ 300.318818][T11340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1772'. [ 300.442554][T11344] netlink: 'syz.3.1772': attribute type 10 has an invalid length. [ 300.471541][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 301.046089][T11360] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 301.086750][T11360] overlayfs: failed to set xattr on upper [ 301.104572][T11361] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 301.114648][T11360] overlayfs: ...falling back to redirect_dir=nofollow. [ 301.144096][T11360] overlayfs: ...falling back to index=off. [ 301.155877][T11360] overlayfs: ...falling back to uuid=null. [ 302.134307][ T30] audit: type=1400 audit(1758618871.238:640): avc: denied { read } for pid=11392 comm="syz.6.1792" path="socket:[41557]" dev="sockfs" ino=41557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 302.416869][T11400] tipc: Failed to remove unknown binding: 66,1,1/0:4189329508/4189329510 [ 302.425848][T11400] tipc: Failed to remove unknown binding: 66,1,1/0:4189329508/4189329510 [ 302.958785][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 302.994337][T11414] delete_channel: no stack [ 302.995627][ T30] audit: type=1400 audit(1758618872.098:641): avc: denied { bind } for pid=11414 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.225445][ T30] audit: type=1400 audit(1758618872.328:642): avc: denied { append } for pid=11422 comm="syz.4.1805" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 303.877162][ T30] audit: type=1326 audit(1758618872.978:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11431 comm="syz.6.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x0 [ 304.110639][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 304.293537][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 304.311062][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.337579][ T24] usb 5-1: Product: syz [ 304.348630][ T24] usb 5-1: Manufacturer: syz [ 304.413336][ T24] usb 5-1: SerialNumber: syz [ 304.658665][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 305.164079][T11463] rdma_rxe: rxe_newlink: failed to add syz_tun [ 305.365902][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 305.877812][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 305.911960][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 305.936634][T11487] syzkaller0 (uninitialized): option downdelay: invalid value (18446744073709551609) [ 305.946208][T11487] syzkaller0 (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 306.129767][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 306.145705][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 306.159510][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 306.178368][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 306.207401][ T24] usb 5-1: USB disconnect, device number 7 [ 307.010261][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 307.128314][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.142586][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.234021][T11521] veth1_macvtap: left allmulticast mode [ 307.498784][T11541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1849'. [ 307.537411][ T7469] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.547686][ T7469] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.570668][T11538] tipc: Enabling of bearer rejected, failed to enable media [ 307.583155][ T5912] syz1: Port: 1 Link DOWN [ 307.588232][ T7469] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.597663][ T7469] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.819381][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1854'. [ 307.840691][T11552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.858718][T11552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.525601][ T30] audit: type=1400 audit(1758618878.618:644): avc: denied { kexec_image_load } for pid=11572 comm="syz.2.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 311.011558][T11591] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 311.031981][T11591] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1867'. [ 311.132638][T11595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11595 comm=syz.6.1870 [ 311.203077][T11575] kexec: Could not allocate control_code_buffer [ 311.346894][T11602] overlayfs: failed to clone upperpath [ 312.174703][ T30] audit: type=1400 audit(1758618881.278:645): avc: denied { bind } for pid=11606 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.886951][T11625] binder: 11620:11625 unknown command 0 [ 312.960018][T11625] binder: 11620:11625 ioctl c0306201 200000000080 returned -22 [ 313.487240][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 313.877428][T11634] team0: Port device team_slave_0 removed [ 314.402184][ T30] audit: type=1804 audit(1758618883.498:646): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1886" name="file0" dev="ramfs" ino=44199 res=1 errno=0 [ 314.564038][ T30] audit: type=1400 audit(1758618883.668:647): avc: denied { write } for pid=11650 comm="syz.6.1888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 314.675061][ T30] audit: type=1400 audit(1758618883.778:648): avc: denied { checkpoint_restore } for pid=11635 comm="syz.2.1892" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 314.702021][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1890'. [ 315.194414][ T30] audit: type=1400 audit(1758618884.288:649): avc: denied { associate } for pid=11675 comm="syz.6.1895" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 315.246625][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 315.304426][ T30] audit: type=1400 audit(1758618884.408:650): avc: denied { getopt } for pid=11670 comm="syz.6.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 315.391264][ T5981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 315.444675][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1899'. [ 315.570546][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 315.580637][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.592276][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.627615][ T5981] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.648504][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.668792][T11681] team0: Port device team_slave_0 removed [ 315.684734][ T5981] usb 5-1: Product: syz [ 315.703761][ T5981] usb 5-1: Manufacturer: syz [ 315.724929][ T5981] usb 5-1: SerialNumber: syz [ 315.760161][ T5981] usb 5-1: config 0 descriptor?? [ 316.171490][ T5981] usb 5-1: USB disconnect, device number 8 [ 316.679163][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.685568][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.739178][ T30] audit: type=1400 audit(1758618886.838:651): avc: denied { listen } for pid=11722 comm="syz.2.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 317.849079][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 319.400631][ T912] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 319.470050][ T30] audit: type=1804 audit(1758618888.568:652): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1924" name="file0" dev="tmpfs" ino=994 res=1 errno=0 [ 319.504239][ T30] audit: type=1800 audit(1758618888.568:653): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1924" name="file0" dev="tmpfs" ino=994 res=0 errno=0 [ 319.583296][ T912] usb 5-1: Using ep0 maxpacket: 16 [ 319.600654][ T912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.608669][ T912] usb 5-1: config 0 has no interface number 0 [ 319.653967][ T912] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 319.670157][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.702164][ T912] usb 5-1: Product: syz [ 319.718334][ T912] usb 5-1: Manufacturer: syz [ 319.735605][ T912] usb 5-1: SerialNumber: syz [ 319.761118][ T912] usb 5-1: config 0 descriptor?? [ 319.803622][ T912] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 321.813388][T11804] netlink: 'syz.6.1936': attribute type 4 has an invalid length. [ 321.935283][ T912] gspca_spca1528: reg_r err -71 [ 321.940368][ T912] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 321.960519][ T912] usb 5-1: USB disconnect, device number 9 [ 322.905085][T11824] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 323.253410][T11829] bond2: (slave veth9): Enslaving as an active interface with a down link [ 323.308245][T11824] bond2: entered promiscuous mode [ 323.385024][T11824] bond2: entered allmulticast mode [ 323.390733][T11824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.920907][T11851] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1950'. [ 324.946696][T11851] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 326.103007][T11878] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 326.107430][ T30] audit: type=1400 audit(1758618895.208:654): avc: denied { transfer } for pid=11879 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 327.477013][ T30] audit: type=1400 audit(1758618896.578:655): avc: denied { watch } for pid=11905 comm="syz.3.1970" path="/373/bus/file1" dev="overlay" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.005640][ T30] audit: type=1400 audit(1758618898.108:656): avc: denied { mount } for pid=11923 comm="syz.3.1975" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.057692][ T30] audit: type=1400 audit(1758618898.138:657): avc: denied { setattr } for pid=11923 comm="syz.3.1975" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.185897][ T30] audit: type=1400 audit(1758618898.288:658): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.046397][ T5864] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 330.084986][T11952] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 330.266606][T11946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 330.543451][ T30] audit: type=1400 audit(1758618899.648:659): avc: denied { read } for pid=11954 comm="syz.2.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.673462][T11978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1991'. [ 332.005936][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1991'. [ 332.865962][ T30] audit: type=1326 audit(1758618901.968:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11987 comm="syz.3.1995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x0 [ 333.923256][T12009] overlayfs: failed to clone upperpath [ 333.961787][T12011] input: syz1 as /devices/virtual/input/input23 [ 334.210877][ T30] audit: type=1400 audit(1758618903.318:661): avc: denied { accept } for pid=12017 comm="syz.2.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 334.290769][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 334.454157][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 334.488139][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.518438][ T10] usb 5-1: Product: syz [ 334.529306][ T10] usb 5-1: Manufacturer: syz [ 334.575643][ T10] usb 5-1: SerialNumber: syz [ 334.953184][ T30] audit: type=1326 audit(1758618904.058:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.016648][ T30] audit: type=1326 audit(1758618904.058:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.054276][ T30] audit: type=1326 audit(1758618904.088:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.092267][ T30] audit: type=1326 audit(1758618904.088:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.171383][ T30] audit: type=1326 audit(1758618904.088:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.200714][ T30] audit: type=1326 audit(1758618904.088:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.249761][ T30] audit: type=1326 audit(1758618904.088:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 335.276344][ T30] audit: type=1326 audit(1758618904.088:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 336.747561][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 336.861946][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 336.903148][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 336.943482][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 336.972557][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.176311][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 337.196564][ T10] usb 5-1: USB disconnect, device number 10 [ 338.805388][T12080] syzkaller0: entered promiscuous mode [ 338.814443][T12080] syzkaller0: entered allmulticast mode [ 344.358606][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 344.358621][ T30] audit: type=1326 audit(1758618913.458:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12172 comm="syz.2.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7fc00000 [ 344.364727][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 345.047021][ T30] audit: type=1326 audit(1758618914.138:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12172 comm="syz.2.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdebad8eec9 code=0x7fc00000 [ 345.197544][T12189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.697454][ T30] audit: type=1400 audit(1758618914.648:676): avc: denied { shutdown } for pid=12193 comm="syz.6.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 350.084439][T12274] netlink: 'syz.6.2079': attribute type 1 has an invalid length. [ 350.109977][T12274] netlink: 'syz.6.2079': attribute type 4 has an invalid length. [ 350.134335][T12274] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2079'. [ 353.413805][T12318] bridge0: entered allmulticast mode [ 353.449890][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2095'. [ 353.500480][T12318] syz_tun: left allmulticast mode [ 353.510517][T12318] syz_tun: left promiscuous mode [ 353.515725][T12318] bridge0: port 3(syz_tun) entered disabled state [ 353.552082][T12318] bridge_slave_1: left allmulticast mode [ 353.568211][T12318] bridge_slave_1: left promiscuous mode [ 353.588278][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.610064][T12318] bridge_slave_0: left allmulticast mode [ 353.628527][T12318] bridge_slave_0: left promiscuous mode [ 353.638793][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.681104][T12318] bridge0 (unregistering): left allmulticast mode [ 353.720459][ T5985] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 353.747328][T12332] netlink: 'syz.0.2101': attribute type 10 has an invalid length. [ 353.806998][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 353.817991][T12324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 353.837716][T12332] team0: Port device dummy0 added [ 353.874282][ T5985] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 353.904070][ T5985] usb 4-1: config 160 has no interface number 0 [ 353.924321][ T5985] usb 4-1: config 160 interface 200 has no altsetting 0 [ 353.958746][T12339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.960794][ T5985] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 353.968343][T12339] bond1: (slave bond2): Enslaving as an active interface with an up link [ 354.019436][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.027924][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 354.053920][ T5985] usb 4-1: Product: syz [ 354.065736][ T5985] usb 4-1: Manufacturer: syz [ 354.070358][ T5985] usb 4-1: SerialNumber: syz [ 354.070943][T12336] bond1 (unregistering): (slave bond2): Releasing backup interface [ 354.100203][T12336] bond1 (unregistering): Released all slaves [ 354.214403][ T30] audit: type=1400 audit(1758618923.318:677): avc: denied { unmount } for pid=12349 comm="syz.0.2106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 354.306282][ T5985] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.318503][ T5985] usb 4-1: MIDIStreaming interface descriptor not found [ 354.468978][ T5985] usb 4-1: USB disconnect, device number 16 [ 355.956495][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2112'. [ 356.113117][T12375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12375 comm=syz.3.2112 [ 357.080818][ T5981] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 357.286443][ T5981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.302744][ T5981] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 357.336050][ T5981] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.362569][ T5981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 357.379364][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 357.388581][ T5981] usb 5-1: Product: syz [ 357.393914][ T5981] usb 5-1: Manufacturer: syz [ 357.398599][ T5981] usb 5-1: SerialNumber: syz [ 358.550674][ T5981] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 358.638721][ T912] usb 5-1: USB disconnect, device number 11 [ 358.713155][ T912] usblp0: removed [ 359.402715][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2120'. [ 359.411626][ T30] audit: type=1400 audit(1758618928.438:678): avc: denied { ioctl } for pid=12407 comm="syz.4.2120" path="socket:[45439]" dev="sockfs" ino=45439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 359.495420][T12409] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 359.505364][T12409] macvlan2: entered allmulticast mode [ 359.512495][T12409] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 360.477674][ T30] audit: type=1400 audit(1758618929.578:679): avc: denied { cmd } for pid=12425 comm="syz.0.2126" path="/220/file0" dev="tmpfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 360.859410][ T30] audit: type=1326 audit(1758618929.958:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7fc00000 [ 360.919662][ T30] audit: type=1326 audit(1758618929.958:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f127a58eec9 code=0x7fc00000 [ 360.949002][ T30] audit: type=1326 audit(1758618929.958:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x7fc00000 [ 361.012125][T12443] Set syz0 is full, maxelem 0 reached [ 361.221382][ T30] audit: type=1400 audit(1758618930.048:683): avc: denied { create } for pid=12442 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 361.383537][ T30] audit: type=1400 audit(1758618930.078:684): avc: denied { listen } for pid=12442 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 361.507137][ T30] audit: type=1400 audit(1758618930.078:685): avc: denied { ioctl } for pid=12442 comm="syz.3.2134" path="socket:[46589]" dev="sockfs" ino=46589 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 361.972762][T12458] binder: 12457:12458 ioctl c0306201 200000000740 returned -14 [ 363.333126][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2148'. [ 363.488176][T12487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12487 comm=syz.4.2148 [ 363.658957][ T30] audit: type=1400 audit(1758618932.748:686): avc: denied { connect } for pid=12491 comm="syz.3.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 363.950512][ T30] audit: type=1400 audit(1758618932.758:687): avc: denied { getopt } for pid=12491 comm="syz.3.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 365.034128][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 365.241460][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 365.248106][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 365.267692][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.284220][ T10] usb 4-1: config 0 descriptor?? [ 365.331940][T12526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12526 comm=syz.0.2166 [ 365.344965][T12526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12526 comm=syz.0.2166 [ 365.359390][T12526] netlink: 'syz.0.2166': attribute type 27 has an invalid length. [ 365.372905][T12526] netlink: 'syz.0.2166': attribute type 4 has an invalid length. [ 365.381516][T12526] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2166'. [ 365.545181][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 365.545197][ T30] audit: type=1326 audit(1758618934.648:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 365.843330][ T30] audit: type=1326 audit(1758618934.648:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 365.905534][ T30] audit: type=1326 audit(1758618934.658:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 365.910714][ T10] isku 0003:1E7D:3264.000C: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 365.961313][T12539] netlink: 'syz.2.2170': attribute type 1 has an invalid length. [ 365.986535][ T30] audit: type=1326 audit(1758618934.658:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 366.032097][ T30] audit: type=1326 audit(1758618934.658:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 366.137367][ T30] audit: type=1326 audit(1758618934.658:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 366.802587][ T5981] usb 4-1: USB disconnect, device number 17 [ 366.840613][ T30] audit: type=1326 audit(1758618934.658:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 366.866210][ T30] audit: type=1326 audit(1758618934.658:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 367.201384][ T30] audit: type=1326 audit(1758618934.658:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 367.272992][ T30] audit: type=1326 audit(1758618934.658:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdebad8eec9 code=0x7ffc0000 [ 371.660600][ T6010] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 371.882326][ T6010] usb 5-1: Using ep0 maxpacket: 8 [ 371.958251][ T6010] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 371.970930][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.073462][ T6010] usb 5-1: Product: syz [ 372.175123][ T6010] usb 5-1: Manufacturer: syz [ 372.179746][ T6010] usb 5-1: SerialNumber: syz [ 372.338834][ T6010] usb 5-1: config 0 descriptor?? [ 372.568929][ T6010] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 372.909251][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 372.909268][ T30] audit: type=1326 audit(1758618942.008:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 373.001028][ T30] audit: type=1326 audit(1758618942.008:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 373.057850][ T30] audit: type=1326 audit(1758618942.048:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 373.160888][ T30] audit: type=1326 audit(1758618942.048:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 373.249717][ T30] audit: type=1326 audit(1758618942.078:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 373.453838][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 373.462943][T12658] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2212'. [ 373.582041][ T30] audit: type=1326 audit(1758618942.078:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 374.216294][ T6010] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 374.265637][ T30] audit: type=1326 audit(1758618942.078:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 374.402305][ T30] audit: type=1326 audit(1758618942.078:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 374.429922][ T30] audit: type=1326 audit(1758618942.088:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 374.453468][ T30] audit: type=1326 audit(1758618942.088:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 374.540306][T12669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.676028][ T6010] usb 5-1: USB disconnect, device number 12 [ 374.806157][T12680] overlayfs: failed to clone upperpath [ 375.391333][T12697] tipc: Started in network mode [ 375.419448][T12697] tipc: Node identity 4, cluster identity 4711 [ 375.474767][T12697] tipc: Node number set to 4 [ 376.168294][T12716] lo: entered allmulticast mode [ 376.307677][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 376.499647][T12715] lo: left allmulticast mode [ 376.723791][T12740] overlayfs: failed to clone upperpath [ 378.158280][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.167684][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.463590][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'. [ 380.193117][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 381.058337][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 381.058368][ T30] audit: type=1400 audit(1758619206.046:738): avc: denied { setopt } for pid=12827 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 381.978933][T12840] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2261'. [ 382.012482][T12836] md2: using deprecated bitmap file support [ 382.296616][T12836] md2: error: bitmap file must be a regular file [ 382.947882][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 382.998691][T12848] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 383.117343][T12848] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 383.278034][T12853] macvlan2: entered promiscuous mode [ 383.295425][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 383.303167][T12853] macvlan2: entered allmulticast mode [ 383.642697][T12853] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 383.706090][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 383.746415][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 383.781066][ T24] usb 4-1: config 0 has no interface number 0 [ 383.806414][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 383.850281][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.895204][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 383.916098][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 383.939601][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.953925][ T24] usb 4-1: Product: syz [ 384.019715][ T24] usb 4-1: Manufacturer: syz [ 384.024457][ T24] usb 4-1: SerialNumber: syz [ 384.032089][ T24] usb 4-1: config 0 descriptor?? [ 384.038362][T12850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.056420][T12850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.301676][T12850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.355063][T12850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.055049][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 385.310183][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2275'. [ 386.412864][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 386.446557][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 386.554032][ T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 386.566572][ T24] usb 4-1: USB disconnect, device number 18 [ 387.253952][ T30] audit: type=1400 audit(1758619212.199:739): avc: denied { bind } for pid=12916 comm="syz.3.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 387.561856][ T5850] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 387.570733][ T5850] Bluetooth: hci3: unexpected event for opcode 0x203e [ 389.200345][T12960] overlayfs: failed to clone upperpath [ 389.529642][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 389.536562][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 391.136394][T12964] ceph: No mds server is up or the cluster is laggy [ 391.329327][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 391.340636][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 391.622617][ T5850] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 391.631772][ T5850] Bluetooth: hci3: Injecting HCI hardware error event [ 391.641774][ T5864] Bluetooth: hci3: hardware error 0x00 [ 392.434583][T13010] syz.0.2314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 392.789239][T13012] binder_alloc: 13011: binder_alloc_buf, no vma [ 392.862456][ T30] audit: type=1400 audit(1758619217.962:740): avc: denied { create } for pid=13008 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 393.544298][T13019] delete_channel: no stack [ 393.548775][ T30] audit: type=1400 audit(1758619218.663:741): avc: denied { connect } for pid=13019 comm="syz.2.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 393.703874][ T5864] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 394.087531][T13027] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 394.218364][T13032] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 394.281377][T13032] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 394.321791][T13027] gretap2: entered promiscuous mode [ 394.331211][T13027] bond3: (slave gretap2): making interface the new active one [ 394.341038][T13027] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 395.791347][ T30] audit: type=1326 audit(1758619220.914:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.4.2326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x0 [ 396.717516][T13067] veth0_vlan: left promiscuous mode [ 396.718302][T13067] veth0_vlan: entered promiscuous mode [ 396.748901][T13068] tipc: Enabled bearer , priority 10 [ 397.163557][T13080] team0: Port device dummy0 removed [ 397.166018][T13080] bridge_slave_0: left allmulticast mode [ 397.656680][T13080] bridge_slave_0: left promiscuous mode [ 397.657653][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.687080][T13080] bridge_slave_1: left allmulticast mode [ 397.687101][T13080] bridge_slave_1: left promiscuous mode [ 397.687242][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.722253][T13080] bond0: (slave bond_slave_0): Releasing backup interface [ 397.757690][T13080] bond0: (slave bond_slave_1): Releasing backup interface [ 397.809246][T13080] team0: Port device team_slave_0 removed [ 397.842780][T13080] team0: Port device team_slave_1 removed [ 397.874295][T13080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.882441][T13080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.895362][T13080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.905146][T13080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.924390][T13080] vlan2: left promiscuous mode [ 397.929889][T13080] bridge0: left promiscuous mode [ 397.940193][T13080] bridge1: port 1(vlan2) entered disabled state [ 398.192078][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.201010][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.209876][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.218716][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.227908][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.236743][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.245610][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.254476][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.263325][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 398.272161][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 399.823750][ T30] audit: type=1400 audit(1758619224.926:743): avc: denied { create } for pid=13160 comm="syz.2.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 400.041998][ T30] audit: type=1400 audit(1758619224.926:744): avc: denied { write } for pid=13160 comm="syz.2.2356" path="socket:[47790]" dev="sockfs" ino=47790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 400.124788][ T30] audit: type=1400 audit(1758619225.146:745): avc: denied { create } for pid=13166 comm="syz.4.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.396587][ T30] audit: type=1400 audit(1758619225.146:746): avc: denied { read } for pid=13166 comm="syz.4.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 401.400642][ T30] audit: type=1400 audit(1758619226.386:747): avc: denied { mounton } for pid=13178 comm="syz.6.2361" path="/file0" dev="rootfs" ino=47809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 403.347154][ T30] audit: type=1400 audit(1758619228.377:748): avc: denied { ioctl } for pid=13211 comm="syz.6.2372" path="socket:[47856]" dev="sockfs" ino=47856 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.427055][T13220] __nla_validate_parse: 44 callbacks suppressed [ 405.427072][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 406.312608][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2379'. [ 406.813010][T13239] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2383'. [ 407.677914][ T30] audit: type=1800 audit(1758619232.800:749): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2390" name="nullb0" dev="tmpfs" ino=2683 res=0 errno=0 [ 409.949522][T13299] pim6reg: entered allmulticast mode [ 409.980253][T13299] pim6reg: left allmulticast mode [ 410.591675][ T30] audit: type=1400 audit(1758619235.611:750): avc: denied { shutdown } for pid=13303 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 412.157891][T13334] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 412.158548][T13331] IPVS: stopping backup sync thread 13334 ... [ 414.158212][T13371] netlink: 'syz.0.2428': attribute type 10 has an invalid length. [ 414.308640][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'. [ 414.498089][T13371] bridge0: port 1(dummy0) entered blocking state [ 414.519920][T13371] bridge0: port 1(dummy0) entered disabled state [ 414.531045][T13371] dummy0: entered allmulticast mode [ 414.545261][T13371] bridge0: port 1(dummy0) entered blocking state [ 414.551687][T13371] bridge0: port 1(dummy0) entered forwarding state [ 415.376220][T13381] bridge_slave_0: left allmulticast mode [ 415.404944][T13381] bridge_slave_0: left promiscuous mode [ 415.473767][T13381] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.524766][T13381] bridge_slave_1: left allmulticast mode [ 415.537927][T13381] bridge_slave_1: left promiscuous mode [ 415.546267][T13381] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.567096][T13381] bond0: (slave bond_slave_0): Releasing backup interface [ 415.578222][T13381] bond0: (slave bond_slave_1): Releasing backup interface [ 415.605314][T13381] team0: Port device team_slave_1 removed [ 415.612305][T13381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.620423][T13381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.628557][T13381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.636281][T13381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.869537][T13386] syzkaller0: entered promiscuous mode [ 415.875031][T13386] syzkaller0: entered allmulticast mode [ 416.826972][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2438'. [ 417.007931][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'. [ 418.890862][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 419.096704][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 419.107443][ T912] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 419.148324][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 419.185438][T13437] bond2: (slave veth9): Releasing active interface [ 419.202939][T13437] bond3: (slave gretap2): Releasing active interface [ 419.282520][ T912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.408048][ T912] usb 5-1: config 0 has no interface number 0 [ 419.430018][ T912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.499255][ T912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.527522][ T912] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.548102][ T912] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 419.561501][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.596186][ T912] usb 5-1: config 0 descriptor?? [ 420.261539][ T912] uclogic 0003:28BD:0042.000D: failed retrieving string descriptor #100: -71 [ 420.273789][ T912] uclogic 0003:28BD:0042.000D: failed retrieving pen parameters: -71 [ 420.326659][ T912] uclogic 0003:28BD:0042.000D: pen probing failed: -71 [ 420.344201][ T912] uclogic 0003:28BD:0042.000D: failed probing parameters: -71 [ 420.366141][ T912] uclogic 0003:28BD:0042.000D: probe with driver uclogic failed with error -71 [ 420.437255][ T912] usb 5-1: USB disconnect, device number 13 [ 420.691057][T13462] netlink: 'syz.6.2456': attribute type 4 has an invalid length. [ 420.760319][T13466] netlink: 'syz.6.2456': attribute type 4 has an invalid length. [ 421.733604][T13487] bond0: (slave bond_slave_0): Releasing backup interface [ 421.750638][T13487] bond0: (slave bond_slave_1): Releasing backup interface [ 421.853881][T13487] team0: Port device team_slave_1 removed [ 424.431624][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2470'. [ 425.885196][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 432.899469][T13585] tipc: Started in network mode [ 432.935245][T13585] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 433.096457][T13585] tipc: Enabled bearer , priority 10 [ 434.215153][ T9] tipc: Node number set to 10398378 [ 437.034504][T13610] bridge0: port 1(dummy0) entered disabled state [ 438.942536][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 439.004746][ T7488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.038133][ T7488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.050422][ T7488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.150591][ T7488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.522332][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.529401][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.913049][T13800] veth3: left promiscuous mode [ 450.920087][T13800] bond1: left promiscuous mode [ 450.933607][T13800] bond2: left promiscuous mode [ 450.942253][T13800] gretap2: left promiscuous mode [ 453.567331][ T30] audit: type=1400 audit(1758619278.713:751): avc: denied { setopt } for pid=13816 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 453.964594][ T30] audit: type=1400 audit(1758619279.113:752): avc: denied { append } for pid=13827 comm="syz.4.2547" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 455.991295][T13848] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 456.782685][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 456.804542][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.713047][T13863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.726877][T13894] Bluetooth: MGMT ver 1.23 [ 460.687203][T13907] pim6reg1: entered promiscuous mode [ 460.817793][T13907] pim6reg1: entered allmulticast mode [ 463.091759][T13939] netlink: 'syz.3.2579': attribute type 4 has an invalid length. [ 463.141422][T13939] netlink: 'syz.3.2579': attribute type 4 has an invalid length. [ 463.985568][ T30] audit: type=1400 audit(1758619288.688:753): avc: denied { getopt } for pid=13952 comm="syz.4.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.528327][ T30] audit: type=1400 audit(1758619291.649:754): avc: denied { map } for pid=13984 comm="syz.3.2592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 468.205890][T14012] team0: Mode changed to "loadbalance" [ 468.220454][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2601'. [ 470.489015][T14028] binder: 14025:14028 ioctl c0046209 9999999999999999 returned -22 [ 472.989939][ T30] audit: type=1400 audit(1758619298.142:755): avc: denied { read } for pid=14057 comm="syz.6.2614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 473.063019][ T30] audit: type=1400 audit(1758619298.222:756): avc: denied { bind } for pid=14057 comm="syz.6.2614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 475.907293][ T30] audit: type=1400 audit(1758619301.004:757): avc: denied { write } for pid=14095 comm="syz.4.2627" path="socket:[50052]" dev="sockfs" ino=50052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 476.266448][T14109] overlayfs: failed to clone upperpath [ 476.482589][T14119] netlink: 'syz.6.2634': attribute type 10 has an invalid length. [ 477.458646][ T912] libceph: connect (1)[c::]:6789 error -101 [ 477.464640][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 477.482175][T14137] ceph: No mds server is up or the cluster is laggy [ 477.649664][ T30] audit: type=1400 audit(1758619302.815:758): avc: denied { write } for pid=14135 comm="syz.0.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 478.125041][T14154] netlink: 'syz.3.2645': attribute type 1 has an invalid length. [ 478.200130][T14161] bond4: (slave geneve3): making interface the new active one [ 478.208600][T14161] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 478.342229][ T7488] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.351754][ T7488] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.363639][ T7488] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.373368][ T7488] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.384631][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2645'. [ 478.400370][T14162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 479.655736][ T30] audit: type=1326 audit(1758619304.716:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 480.144175][ T30] audit: type=1326 audit(1758619304.716:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 480.174461][ T30] audit: type=1326 audit(1758619304.716:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 480.219985][ T30] audit: type=1326 audit(1758619304.716:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 480.252068][ T30] audit: type=1326 audit(1758619304.716:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 482.551061][T14216] netlink: 'syz.2.2663': attribute type 10 has an invalid length. [ 483.159175][T14216] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 484.858625][T14237] overlayfs: missing 'lowerdir' [ 484.926187][T14239] netlink: 'syz.6.2672': attribute type 10 has an invalid length. [ 484.948524][T14239] netlink: 'syz.6.2672': attribute type 10 has an invalid length. [ 484.976100][T14239] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 484.996288][T14239] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2672'. [ 485.227717][T14244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2673'. [ 486.044939][ T30] audit: type=1400 audit(1758619311.199:764): avc: denied { name_connect } for pid=14258 comm="syz.6.2678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 487.609726][T14285] syz_tun: entered allmulticast mode [ 487.610993][T14280] 9pnet: Could not find request transport: 0xffffffffffffffff [ 488.019580][T14285] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2685'. [ 488.030061][T14284] syz_tun: left allmulticast mode [ 490.137299][T11539] libceph: connect (1)[c::]:6789 error -101 [ 490.144803][T11539] libceph: mon0 (1)[c::]:6789 connect error [ 490.273046][T14317] ceph: No mds server is up or the cluster is laggy [ 492.304664][ T30] audit: type=1400 audit(1758619317.472:765): avc: denied { getopt } for pid=14357 comm="syz.6.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 493.551416][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 496.077433][T14399] fuse: Unknown parameter '0x0000000000000003' [ 496.094516][ T30] audit: type=1400 audit(1758619321.264:766): avc: denied { bind } for pid=14398 comm="syz.2.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 500.932945][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.939540][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.090879][ T30] audit: type=1326 audit(1758619326.246:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.4.2729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x0 [ 509.953158][T14535] netlink: 'syz.6.2748': attribute type 39 has an invalid length. [ 512.490158][ T30] audit: type=1326 audit(1758619337.662:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 513.018355][ T30] audit: type=1326 audit(1758619337.692:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 513.190633][ T30] audit: type=1326 audit(1758619337.692:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 513.214559][ T30] audit: type=1326 audit(1758619337.692:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 513.680228][ T30] audit: type=1326 audit(1758619337.692:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 513.999977][ T30] audit: type=1326 audit(1758619337.692:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 514.309782][ T30] audit: type=1326 audit(1758619337.692:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 514.340078][ T30] audit: type=1326 audit(1758619337.692:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 514.370019][ T30] audit: type=1326 audit(1758619337.692:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 514.393959][ T30] audit: type=1326 audit(1758619337.692:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ef8eec9 code=0x7ffc0000 [ 514.773917][T14591] netlink: 'syz.0.2765': attribute type 39 has an invalid length. [ 516.476857][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 516.905246][T14611] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 516.924525][T14611] Error validating options; rc = [-22] [ 523.579227][T14679] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 523.653203][T14679] CIFS mount error: No usable UNC path provided in device string! [ 523.653203][T14679] [ 523.689537][T14679] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 524.568715][T14692] netlink: 'syz.6.2793': attribute type 7 has an invalid length. [ 526.076610][T14708] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2798'. [ 530.677281][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 530.677299][ T30] audit: type=1326 audit(1758619355.851:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 531.296534][ T30] audit: type=1326 audit(1758619355.851:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 531.450331][ T30] audit: type=1326 audit(1758619356.492:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 531.481985][ T30] audit: type=1326 audit(1758619356.492:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 531.568587][ T30] audit: type=1326 audit(1758619356.492:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 531.715926][ T30] audit: type=1326 audit(1758619356.492:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 532.223226][ T30] audit: type=1326 audit(1758619356.492:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 532.247199][ T30] audit: type=1326 audit(1758619356.492:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 532.294839][ T30] audit: type=1326 audit(1758619356.492:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 532.521441][ T30] audit: type=1326 audit(1758619356.492:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x7ffc0000 [ 532.889361][T14779] netlink: 'syz.6.2816': attribute type 10 has an invalid length. [ 532.942516][T14780] netlink: 'syz.6.2816': attribute type 10 has an invalid length. [ 532.986299][T14779] bond0: (slave dummy0): Releasing backup interface [ 533.014130][T14784] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2816'. [ 533.106718][T14780] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 537.465803][T14828] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 537.475483][T14826] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 540.330065][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 540.330082][ T30] audit: type=1400 audit(1758619364.836:804): avc: denied { map } for pid=14862 comm="syz.2.2840" path="socket:[53253]" dev="sockfs" ino=53253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 540.556672][ T5981] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 540.958623][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.429249][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.441436][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.456737][ T5981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.470976][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.836651][ T5981] usb 5-1: config 0 descriptor?? [ 542.719374][ T5981] usbhid 5-1:0.0: can't add hid device: -71 [ 542.725377][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 542.799263][ T5981] usb 5-1: USB disconnect, device number 14 [ 544.981804][T14919] netlink: 'syz.0.2856': attribute type 10 has an invalid length. [ 545.117778][T14919] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 548.651946][T14970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 548.673508][T14972] netlink: 'syz.2.2870': attribute type 39 has an invalid length. [ 548.864707][T14970] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 548.872360][T14970] netlink: 'syz.6.2871': attribute type 1 has an invalid length. [ 549.210500][ T5981] IPVS: starting estimator thread 0... [ 549.652165][T14979] IPVS: using max 37 ests per chain, 88800 per kthread [ 550.215852][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 550.231387][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 551.533347][T15010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2882'. [ 558.228802][T15081] netlink: 'syz.3.2901': attribute type 39 has an invalid length. [ 562.346111][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.352420][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.588063][ T30] audit: type=1400 audit(1758619388.788:805): avc: denied { execute_no_trans } for pid=15138 comm="syz.0.2918" path="/file1/file1" dev="ramfs" ino=54659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 564.568981][ T30] audit: type=1400 audit(1758619389.768:806): avc: denied { create } for pid=15156 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 564.617202][ T30] audit: type=1400 audit(1758619389.798:807): avc: denied { write } for pid=15156 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 567.408005][T15193] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2932'. [ 568.207340][ T30] audit: type=1804 audit(1758619393.270:808): pid=15186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2941" name="/newroot/225/bus/file0" dev="overlay" ino=1218 res=1 errno=0 [ 570.924460][T15222] sctp: [Deprecated]: syz.3.2942 (pid 15222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.924460][T15222] Use struct sctp_sack_info instead [ 571.306253][T15225] hub 9-0:1.0: USB hub found [ 571.314377][T15225] hub 9-0:1.0: 1 port detected [ 579.881651][T15332] netlink: 'syz.2.2971': attribute type 1 has an invalid length. [ 580.376752][T11539] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 581.150391][T11539] usb 4-1: Using ep0 maxpacket: 8 [ 581.181497][T11539] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 581.316594][T11539] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 581.328323][T11539] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 581.338256][T11539] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.351306][T11539] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 581.366476][T11539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.888140][T11539] usb 4-1: GET_CAPABILITIES returned 0 [ 582.946059][T11539] usbtmc 4-1:16.0: can't read capabilities [ 584.128406][T15345] geneve2: entered promiscuous mode [ 584.180706][T15345] geneve2: entered allmulticast mode [ 586.563371][T15380] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 587.782225][T11539] usb 4-1: USB disconnect, device number 19 [ 587.861911][T15396] bond4: (slave geneve3): Releasing active interface [ 587.896072][ T3452] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 587.911009][ T3452] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 587.919809][ T3452] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 587.934588][ T3452] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 588.297582][T15397] netlink: 'syz.3.2989': attribute type 10 has an invalid length. [ 588.490054][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 589.821584][T15412] netlink: set zone limit has 4 unknown bytes [ 594.657123][T15463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3005'. [ 595.003620][T15469] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3009'. [ 596.881808][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 596.887859][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 597.048526][T15492] ceph: No mds server is up or the cluster is laggy [ 597.159833][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 597.244197][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 600.097213][ T30] audit: type=1400 audit(1758619425.256:809): avc: denied { write } for pid=15532 comm="syz.4.3027" path="socket:[55362]" dev="sockfs" ino=55362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 600.720116][T15517] veth3: left allmulticast mode [ 601.155186][T15517] bond2: left allmulticast mode [ 604.105009][ T7459] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.114732][ T7459] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.505780][ T7459] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.713260][ T7459] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.683767][ T30] audit: type=1326 audit(1758619431.859:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.0.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f127a58eec9 code=0x0 [ 607.446752][ T30] audit: type=1800 audit(1758619432.660:811): pid=15591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3040" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 608.415884][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'. [ 609.925565][T15633] tc_dump_action: action bad kind [ 610.955978][T15640] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3056'. [ 611.152683][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 611.244550][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3058'. [ 611.939533][ T30] audit: type=1400 audit(1758619437.052:812): avc: denied { setattr } for pid=15649 comm="syz.6.3071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 614.580899][T15689] bond0: (slave netdevsim0): Releasing backup interface [ 614.968691][T15689] team0: Mode changed to "loadbalance" [ 614.968784][T15694] netlink: 'syz.2.3072': attribute type 10 has an invalid length. [ 615.025048][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3072'. [ 615.076324][T15696] gfs2: not a GFS2 filesystem [ 617.489720][T15707] trusted_key: encrypted_key: hex blob is missing [ 618.947974][T15719] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.3080'. [ 620.188464][ T30] audit: type=1400 audit(1758619445.396:813): avc: denied { recv } for pid=15741 comm="syz.4.3088" saddr=10.128.0.169 src=30006 daddr=10.128.0.37 dest=52942 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 621.632781][T15771] netlink: 'syz.4.3097': attribute type 4 has an invalid length. [ 622.589326][T15786] netlink: 'syz.4.3102': attribute type 4 has an invalid length. [ 623.748961][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.756555][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.602384][T15840] bridge0: port 3(syz_tun) entered blocking state [ 627.673278][T15840] bridge0: port 3(syz_tun) entered disabled state [ 627.813951][T15840] syz_tun: entered allmulticast mode [ 627.821905][T15840] syz_tun: entered promiscuous mode [ 627.925839][T15840] bridge0: port 3(syz_tun) entered blocking state [ 627.932375][T15840] bridge0: port 3(syz_tun) entered forwarding state [ 627.949433][T15846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3118'. [ 627.959335][T15846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3118'. [ 628.038377][T15841] bridge0: port 3(syz_tun) entered learning state [ 630.251672][T15870] macvtap1: entered promiscuous mode [ 630.257066][T15870] vlan1: entered promiscuous mode [ 630.619569][T15870] vlan1: left promiscuous mode [ 632.578321][T15897] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 635.049711][ T30] audit: type=1400 audit(1758619460.213:814): avc: denied { mount } for pid=15912 comm="syz.2.3143" name="/" dev="rpc_pipefs" ino=55841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 635.431084][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 635.602523][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 638.691958][T15949] bond2 (unregistering): Released all slaves [ 639.971801][T15968] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 640.876508][ T5985] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 641.146898][ T5985] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.355942][ T5985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.427217][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.522740][ T5985] usb 5-1: Product: syz [ 641.536426][ T5985] usb 5-1: Manufacturer: syz [ 641.543865][ T5985] usb 5-1: SerialNumber: syz [ 642.045602][T15999] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.937430][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 644.498617][ T5985] usb 5-1: bad CDC descriptors [ 644.556112][ T5985] usb 5-1: USB disconnect, device number 15 [ 644.586133][T16015] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3162'. [ 644.618212][T16015] hsr_slave_0: left promiscuous mode [ 644.666907][T16019] block nbd3: Attempted send on invalid socket [ 644.678973][T16019] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.789091][T16015] hsr_slave_1: left promiscuous mode [ 644.824580][T16019] block nbd3: Attempted send on invalid socket [ 644.830759][T16019] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.911738][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 644.950607][T16019] block nbd3: Attempted send on invalid socket [ 644.958159][T16019] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.002788][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 645.023641][T16019] block nbd3: Attempted send on invalid socket [ 645.030811][T16019] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.044493][T16019] block nbd3: Attempted send on invalid socket [ 645.050716][T16019] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.061350][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 645.073049][T16019] block nbd3: Attempted send on invalid socket [ 645.098247][T16019] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.110208][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 645.147807][T16019] block nbd3: Attempted send on invalid socket [ 645.156736][T16019] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.168733][T16019] block nbd3: Attempted send on invalid socket [ 645.175595][T16019] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.187662][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 645.202604][T16019] block nbd3: Attempted send on invalid socket [ 645.210618][T16019] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.222758][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 645.241238][T16019] block nbd3: Attempted send on invalid socket [ 645.247640][T16019] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.260792][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 645.279983][T16019] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 645.348239][T16019] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 645.413794][T13644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=13644 comm=kworker/0:11 [ 645.553504][T16028] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 656.472130][ T30] audit: type=1326 audit(1758619481.594:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.3191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d4e78eec9 code=0x0 [ 660.062782][ T30] audit: type=1400 audit(1758619485.136:816): avc: denied { recv } for pid=16171 comm="syz.4.3202" saddr=10.128.0.169 src=39154 daddr=10.128.0.37 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 660.903382][T16191] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3208'. [ 660.918502][T16191] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3208'. [ 665.624882][ T30] audit: type=1800 audit(1758619490.869:817): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3215" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 665.968367][ T30] audit: type=1400 audit(1758619747.193:818): avc: denied { map } for pid=16244 comm="syz.4.3220" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 669.011223][T16281] nfs4: Deprecated parameter 'intr' [ 669.016458][T16281] nfs4: Unknown parameter 'smackfsroot' [ 672.197218][T16316] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.3237'. [ 676.479026][T16364] lo speed is unknown, defaulting to 1000 [ 676.485422][T16364] lo speed is unknown, defaulting to 1000 [ 676.497945][T16364] lo speed is unknown, defaulting to 1000 [ 676.522002][T16364] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 676.577710][T16364] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 676.742788][T16364] lo speed is unknown, defaulting to 1000 [ 676.758364][T16364] lo speed is unknown, defaulting to 1000 [ 676.774310][T16364] lo speed is unknown, defaulting to 1000 [ 676.781298][T16364] lo speed is unknown, defaulting to 1000 [ 676.788599][T16364] lo speed is unknown, defaulting to 1000 [ 676.795583][T16364] lo speed is unknown, defaulting to 1000 [ 676.958422][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 678.094042][ T912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 678.270170][ T912] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.279608][ T912] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 678.294084][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.334728][ T912] usb 4-1: config 0 descriptor?? [ 679.006201][T16399] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.3261'. [ 681.425481][T13644] usb 4-1: USB disconnect, device number 20 [ 681.474839][T16411] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 681.539191][T16411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.550528][T16415] vlan3: entered promiscuous mode [ 681.559910][T16415] bond5: entered promiscuous mode [ 681.607647][T16415] vlan3: entered allmulticast mode [ 681.666250][T16415] bond5: entered allmulticast mode [ 681.994363][ T30] audit: type=1400 audit(1758619763.253:819): avc: denied { create } for pid=16410 comm="syz.3.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 682.027771][ T30] audit: type=1400 audit(1758619763.273:820): avc: denied { write } for pid=16410 comm="syz.3.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 682.092292][T16411] bond5: (slave gretap3): making interface the new active one [ 682.132430][ T30] audit: type=1400 audit(1758619763.383:821): avc: denied { create } for pid=16420 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 682.133961][T16411] gretap3: entered promiscuous mode [ 682.172452][T16411] gretap3: entered allmulticast mode [ 682.182102][T16411] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 682.916623][ T30] audit: type=1400 audit(1758619764.153:822): avc: denied { create } for pid=16423 comm="syz.2.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 685.038379][T16451] overlay: ./file1 is not a directory [ 685.184364][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.190633][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.054486][ T30] audit: type=1400 audit(1758619771.543:823): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 691.081980][ T30] audit: type=1400 audit(1758619771.543:824): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 691.172129][ T30] audit: type=1800 audit(1758619771.743:825): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3285" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 691.929715][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3295'. [ 694.388824][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3299'. [ 694.593950][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3299'. [ 698.768187][T13644] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 699.503507][T13644] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 699.534246][T13644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.546153][T13644] usb 4-1: Product: syz [ 699.551165][T13644] usb 4-1: Manufacturer: syz [ 699.556480][T13644] usb 4-1: SerialNumber: syz [ 699.563134][T13644] usb 4-1: config 0 descriptor?? [ 699.700703][ T7470] smc: removing ib device syz1 [ 700.454126][T13644] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 700.473742][T13644] airspy 4-1:0.0: Could not detect board [ 700.494005][T13644] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 700.521034][T13644] usb 4-1: USB disconnect, device number 21 [ 706.108490][T16631] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.3326'. [ 706.153198][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3326'. [ 709.854311][T16682] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 712.522775][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 712.934576][T16718] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3342'. [ 712.944173][T16718] netlink: zone id is out of range [ 712.949434][T16718] netlink: get zone limit has 8 unknown bytes [ 714.955826][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 720.614010][ T30] audit: type=1400 audit(1758619801.193:826): avc: denied { setopt } for pid=16781 comm="syz.4.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 721.221788][T16790] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3361'. [ 721.325586][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3361'. [ 721.653252][T13645] libceph: connect (1)[c::]:6789 error -101 [ 721.662669][T16795] ceph: No mds server is up or the cluster is laggy [ 722.197781][T13645] libceph: mon0 (1)[c::]:6789 connect error [ 722.332727][ T30] audit: type=1400 audit(1758619803.583:827): avc: denied { watch watch_reads } for pid=16809 comm="syz.3.3366" path="/" dev="configfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 722.605428][ T30] audit: type=1400 audit(1758619803.773:828): avc: denied { ioctl } for pid=16816 comm="syz.4.3369" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 723.904183][T16835] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 723.911104][T16833] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 729.841389][ T30] audit: type=1400 audit(1758619811.093:829): avc: denied { ioctl } for pid=16889 comm="syz.0.3387" path="socket:[65088]" dev="sockfs" ino=65088 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 730.918826][ T30] audit: type=1400 audit(1758619812.173:830): avc: denied { firmware_load } for pid=16890 comm="syz.3.3386" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 731.429486][T16898] syz.3.3386 (16898) used greatest stack depth: 19528 bytes left [ 734.205492][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 734.226470][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 734.805083][T16938] overlayfs: failed to clone lowerpath [ 735.110731][ T30] audit: type=1400 audit(1758619816.283:831): avc: denied { connect } for pid=16928 comm="syz.0.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 741.199828][T17010] overlayfs: failed to clone upperpath [ 746.626190][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.632496][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.915447][T17112] CIFS mount error: No usable UNC path provided in device string! [ 749.915447][T17112] [ 749.925507][T17112] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 753.063330][ T30] audit: type=1400 audit(1758619834.313:832): avc: denied { bind } for pid=17136 comm="syz.4.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 753.538188][T17151] blk_print_req_error: 2 callbacks suppressed [ 753.538201][T17151] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 753.694132][T17151] EXT4-fs (loop9): unable to read superblock [ 755.179005][T17173] loop7: detected capacity change from 0 to 7 [ 756.683015][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 756.692753][ C1] buffer_io_error: 2841 callbacks suppressed [ 756.692762][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 756.762596][T17195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3470'. [ 756.907034][T17198] /dev/nullb0: Can't lookup blockdev [ 758.520350][T17214] vivid-002: disconnect [ 758.525486][T17213] vivid-002: reconnect [ 759.630310][T17231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.898611][T17245] netlink: 'syz.2.3484': attribute type 4 has an invalid length. [ 759.985589][T17248] netlink: 'syz.2.3484': attribute type 4 has an invalid length. [ 760.082484][ T30] audit: type=1326 audit(1758619841.313:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 760.120240][ T30] audit: type=1326 audit(1758619841.313:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 760.193916][ T30] audit: type=1326 audit(1758619841.313:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 760.233433][ T30] audit: type=1326 audit(1758619841.313:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 760.482555][ T30] audit: type=1326 audit(1758619841.313:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 761.028850][ T30] audit: type=1326 audit(1758619841.313:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 761.078654][ T30] audit: type=1326 audit(1758619841.313:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 761.113861][ T30] audit: type=1326 audit(1758619841.313:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 761.809338][ T30] audit: type=1326 audit(1758619841.313:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 761.861612][ T30] audit: type=1326 audit(1758619841.323:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.6.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf05d8eec9 code=0x7ffc0000 [ 764.439198][T17282] tipc: Resetting bearer [ 764.504047][ T7470] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.606540][ T7470] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.674266][ T7470] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.703479][ T7470] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.744057][ T7470] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.763156][ T7470] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.839754][ T7470] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.851254][ T7470] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.318103][T13645] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 766.420639][T13645] usb 4-1: Using ep0 maxpacket: 32 [ 767.065291][T13645] usb 4-1: config 0 has no interfaces? [ 767.070794][T13645] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 767.081069][T13645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.094995][T13645] usb 4-1: config 0 descriptor?? [ 767.538812][T13645] usb 4-1: USB disconnect, device number 22 [ 768.451954][T17329] trusted_key: encrypted_key: insufficient parameters specified [ 769.611711][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 769.611726][ T30] audit: type=1400 audit(1758619850.863:856): avc: denied { unmount } for pid=10422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 769.804032][ T30] audit: type=1400 audit(1758619851.043:857): avc: denied { ioctl } for pid=17335 comm="syz.3.3507" path="socket:[66755]" dev="sockfs" ino=66755 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 808.048120][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.054486][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.413826][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 880.420822][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8177/1:b..l [ 880.429263][ C0] rcu: (detected by 0, t=10502 jiffies, g=79761, q=465 ncpus=2) [ 880.436967][ C0] task:kworker/u8:53 state:R running task stack:22376 pid:8177 tgid:8177 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 880.451501][ C0] Workqueue: iou_exit io_ring_exit_work [ 880.457153][ C0] Call Trace: [ 880.460434][ C0] [ 880.463366][ C0] __schedule+0x1190/0x5de0 [ 880.467877][ C0] ? psi_group_change+0x471/0xbe0 [ 880.472912][ C0] ? __pfx___schedule+0x10/0x10 [ 880.477755][ C0] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 880.484432][ C0] ? mark_held_locks+0x49/0x80 [ 880.489193][ C0] preempt_schedule_irq+0x51/0x90 [ 880.494208][ C0] irqentry_exit+0x36/0x90 [ 880.498617][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 880.504584][ C0] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 880.509859][ C0] Code: bb 5c 8e e8 a2 1f 77 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 b3 1c 36 12 e8 3e 20 f4 09 48 c7 c3 a8 [ 880.529464][ C0] RSP: 0018:ffffc90002fb7568 EFLAGS: 00000297 [ 880.535530][ C0] RAX: 0000000000000001 RBX: ffffffff8e5c15a0 RCX: 0000000000000002 [ 880.543485][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c15a0 [ 880.551441][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 880.559399][ C0] R10: 0000000000000003 R11: 0000000000011739 R12: 0000000000000000 [ 880.567355][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.575330][ C0] lock_acquire+0x2cd/0x350 [ 880.579829][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 880.585016][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 880.591162][ C0] unwind_next_frame+0xd1/0x20a0 [ 880.596086][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 880.601186][ C0] ? __io_req_caches_free+0x90/0x3d0 [ 880.606468][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 880.612614][ C0] arch_stack_walk+0x94/0x100 [ 880.617286][ C0] ? __io_req_caches_free+0x90/0x3d0 [ 880.622568][ C0] stack_trace_save+0x8e/0xc0 [ 880.627235][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 880.632599][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 880.637536][ C0] kasan_save_stack+0x33/0x60 [ 880.642202][ C0] ? kasan_save_stack+0x33/0x60 [ 880.647036][ C0] ? kasan_save_track+0x14/0x30 [ 880.651872][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 880.656624][ C0] ? kmem_cache_free+0x142/0x4d0 [ 880.661547][ C0] ? __io_req_caches_free+0x90/0x3d0 [ 880.666860][ C0] kasan_save_track+0x14/0x30 [ 880.671523][ C0] __kasan_kmalloc+0xaa/0xb0 [ 880.676099][ C0] kmem_cache_free+0x142/0x4d0 [ 880.680851][ C0] ? __io_req_caches_free+0x90/0x3d0 [ 880.686391][ C0] __io_req_caches_free+0x90/0x3d0 [ 880.691497][ C0] io_ring_exit_work+0x387/0x10f0 [ 880.696511][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 880.701527][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 880.706976][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 880.712785][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 880.718433][ C0] ? rcu_is_watching+0x12/0xc0 [ 880.723202][ C0] process_one_work+0x9cc/0x1b70 [ 880.728140][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 880.734296][ C0] ? __pfx_process_one_work+0x10/0x10 [ 880.739662][ C0] ? assign_work+0x1a0/0x250 [ 880.744241][ C0] worker_thread+0x6c8/0xf10 [ 880.748832][ C0] ? __pfx_worker_thread+0x10/0x10 [ 880.753931][ C0] kthread+0x3c2/0x780 [ 880.757987][ C0] ? __pfx_kthread+0x10/0x10 [ 880.762562][ C0] ? rcu_is_watching+0x12/0xc0 [ 880.767320][ C0] ? __pfx_kthread+0x10/0x10 [ 880.771901][ C0] ret_from_fork+0x56a/0x730 [ 880.776484][ C0] ? __pfx_kthread+0x10/0x10 [ 880.781065][ C0] ret_from_fork_asm+0x1a/0x30 [ 880.785829][ C0] [ 880.788837][ C0] rcu: rcu_preempt kthread starved for 7695 jiffies! g79761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 880.799933][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 880.809887][ C0] rcu: RCU grace-period kthread stack dump: [ 880.815756][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 880.829228][ C0] Call Trace: [ 880.832494][ C0] [ 880.835412][ C0] __schedule+0x1190/0x5de0 [ 880.839922][ C0] ? __pfx___schedule+0x10/0x10 [ 880.844767][ C0] ? find_held_lock+0x2b/0x80 [ 880.849436][ C0] ? schedule+0x2d7/0x3a0 [ 880.853759][ C0] schedule+0xe7/0x3a0 [ 880.857816][ C0] schedule_timeout+0x123/0x290 [ 880.862655][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 880.868012][ C0] ? __pfx_process_timeout+0x10/0x10 [ 880.873296][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 880.879090][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 880.884546][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 880.889298][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 880.894569][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 880.899757][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 880.904688][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 880.909556][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 880.915368][ C0] rcu_gp_kthread+0x270/0x380 [ 880.920042][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 880.925225][ C0] ? rcu_is_watching+0x12/0xc0 [ 880.929980][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 880.935172][ C0] ? __kthread_parkme+0x19e/0x250 [ 880.940193][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 880.945376][ C0] kthread+0x3c2/0x780 [ 880.949435][ C0] ? __pfx_kthread+0x10/0x10 [ 880.954015][ C0] ? rcu_is_watching+0x12/0xc0 [ 880.958768][ C0] ? __pfx_kthread+0x10/0x10 [ 880.963346][ C0] ret_from_fork+0x56a/0x730 [ 880.967926][ C0] ? __pfx_kthread+0x10/0x10 [ 880.972504][ C0] ret_from_fork_asm+0x1a/0x30 [ 880.977275][ C0] [ 880.980284][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 880.986608][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 880.995540][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 881.005581][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 881.011209][ C0] Code: 5d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 36 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 881.030809][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 881.036862][ C0] RAX: 0000000001f3696f RBX: 0000000000000000 RCX: ffffffff8b94db49 [ 881.044820][ C0] RDX: 0000000000000000 RSI: ffffffff8de52d59 RDI: ffffffff8c163400 [ 881.052778][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 881.060734][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 881.068691][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab7690 R15: 0000000000000000 [ 881.076653][ C0] FS: 0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 881.085569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.092140][ C0] CR2: 00007f29d8575d43 CR3: 0000000074bea000 CR4: 00000000003526f0 [ 881.100098][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 881.108059][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 881.116020][ C0] Call Trace: [ 881.119285][ C0] [ 881.122201][ C0] default_idle+0x13/0x20 [ 881.126527][ C0] default_idle_call+0x6d/0xb0 [ 881.131281][ C0] do_idle+0x391/0x510 [ 881.135343][ C0] ? __pfx_do_idle+0x10/0x10 [ 881.139927][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 881.145116][ C0] cpu_startup_entry+0x4f/0x60 [ 881.149874][ C0] rest_init+0x16b/0x2b0 [ 881.154109][ C0] ? acpi_subsystem_init+0x133/0x180 [ 881.159382][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 881.164919][ C0] start_kernel+0x3ee/0x4d0 [ 881.169417][ C0] x86_64_start_reservations+0x18/0x30 [ 881.174866][ C0] x86_64_start_kernel+0x130/0x190 [ 881.179972][ C0] common_startup_64+0x13e/0x148 [ 881.184910][ C0] [ 881.556093][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.562396][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=480 sent=0 n=-1 (errno 32: Broken pipe) [ 883.150648][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 883.160605][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 883.168743][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 883.181871][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 883.263543][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 883.421607][T17386] bridge0: port 3(syz_tun) entered disabled state [ 883.436005][T17386] syz_tun (unregistering): left allmulticast mode [ 883.442420][T17386] syz_tun (unregistering): left promiscuous mode [ 883.448898][T17386] bridge0: port 3(syz_tun) entered disabled state [ 883.497012][T17400] lo speed is unknown, defaulting to 1000 [ 883.738435][T17400] chnl_net:caif_netlink_parms(): no params data found [ 883.820072][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.827800][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.835149][T17400] bridge_slave_0: entered allmulticast mode [ 883.841790][T17400] bridge_slave_0: entered promiscuous mode [ 883.855253][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.862371][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.870600][T17400] bridge_slave_1: entered allmulticast mode [ 883.877562][T17400] bridge_slave_1: entered promiscuous mode [ 883.911595][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.923398][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.968708][T17400] team0: Port device team_slave_0 added [ 883.975919][T17400] team0: Port device team_slave_1 added [ 884.002541][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.009796][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.036149][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.049496][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.056585][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.083157][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.135428][T17400] hsr_slave_0: entered promiscuous mode [ 884.141442][T17400] hsr_slave_1: entered promiscuous mode [ 884.147408][T17400] debugfs: 'hsr0' already exists in 'hsr' [ 884.153107][T17400] Cannot create hsr debugfs directory [ 884.317274][T16382] dummy0: left allmulticast mode [ 884.323854][T16382] bridge0: port 1(dummy0) entered disabled state [ 884.436831][T16382] dvmrp1 (unregistering): left allmulticast mode [ 884.756789][T16382] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 884.770473][T16382] bond0 (unregistering): Released all slaves [ 884.781276][T16382] bond1 (unregistering): Released all slaves [ 884.883309][T16382] dvmrp1 (unregistering): left allmulticast mode [ 885.248556][T16382] bond0 (unregistering): Released all slaves [ 885.326983][ T5864] Bluetooth: hci5: command tx timeout [ 885.340206][T16382] bond2 (unregistering): Released all slaves [ 885.468339][T16382] tipc: Disabling bearer [ 885.483523][T16382] tipc: Left network mode [ 885.598325][T17400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 885.608676][T17400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 885.617910][T17400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 885.627274][T17400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.710610][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.732921][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.744610][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.751702][ T7459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.767756][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.774867][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.896674][T16382] hsr_slave_0: left promiscuous mode [ 885.902585][T16382] hsr_slave_1: left promiscuous mode [ 885.912433][T16382] hsr_slave_0: left promiscuous mode [ 885.919116][T16382] hsr_slave_1: left promiscuous mode [ 887.059054][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.108837][T17400] veth0_vlan: entered promiscuous mode [ 887.121490][T17400] veth1_vlan: entered promiscuous mode [ 887.162658][T17400] veth0_macvtap: entered promiscuous mode [ 887.172268][T17400] veth1_macvtap: entered promiscuous mode [ 887.191987][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.202637][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.218588][ T7459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.227526][ T7459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.244190][ T7459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.259606][ T7459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.350877][ T7470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.360089][ T7470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.382956][ T7470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.391134][ T7470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.405251][ T5864] Bluetooth: hci5: command tx timeout [ 887.413362][ T30] audit: type=1400 audit(1758619968.663:858): avc: denied { mounton } for pid=17400 comm="syz-executor" path="/root/syzkaller.hi4aLm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=67945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 887.465406][T16382] IPVS: stop unused estimator thread 0... [ 887.474845][T16382] IPVS: stop unused estimator thread 0... [ 887.647757][T16382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.721901][T16382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.820273][T16382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.879398][T16382] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 887.906512][T16382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.281856][T16382] bridge_slave_1: left allmulticast mode [ 888.288035][T16382] bridge_slave_1: left promiscuous mode [ 888.293754][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.302714][T16382] bridge_slave_0: left allmulticast mode [ 888.308857][T16382] bridge_slave_0: left promiscuous mode [ 888.314706][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.736064][T16382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.746507][T16382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.756542][T16382] bond0 (unregistering): Released all slaves [ 888.870317][T16382] bond5 (unregistering): (slave gretap3): Releasing active interface [ 888.878786][T16382] gretap3 (unregistering): left promiscuous mode [ 888.887151][T16382] gretap3 (unregistering): left allmulticast mode [ 889.213415][T16382] bond0 (unregistering): Released all slaves [ 889.308690][T16382] bond1 (unregistering): Released all slaves [ 889.393536][T16382] bond2 (unregistering): Released all slaves [ 889.405309][T16382] bond3 (unregistering): Released all slaves [ 889.490812][T16382] bond4 (unregistering): Released all slaves [ 889.583779][T16382] bond5 (unregistering): Released all slaves [ 889.692087][T16382] tipc: Left network mode [ 889.702219][T16382] tipc: Left network mode [ 890.178037][T16382] hsr_slave_0: left promiscuous mode [ 890.183675][T16382] hsr_slave_1: left promiscuous mode [ 890.189347][T16382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.196822][T16382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.222428][T16382] veth1_macvtap: left promiscuous mode [ 890.228084][T16382] veth0_macvtap: left promiscuous mode [ 890.233608][T16382] veth1_vlan: left promiscuous mode [ 890.239505][T16382] veth0_vlan: left promiscuous mode