last executing test programs: 6m0.873079909s ago: executing program 0 (id=2063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cryptd(adiantum(xts-serpent-avx,tea-generic,cryptd(sha256)))'}, 0x24) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r2, 0xfffffffffffffff5, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf7b1caab9a8996d4, 0x0, 0x1, 0x4) read$hiddev(r3, &(0x7f0000000080)=""/102, 0x66) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) 5m58.625885994s ago: executing program 0 (id=2067): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m53.602911084s ago: executing program 0 (id=2077): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$MSR(0x0, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r3, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 5m52.013964792s ago: executing program 0 (id=2080): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioperm(0x0, 0x1fb, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) tkill(r2, 0x1) write$cgroup_int(r1, &(0x7f0000000040)=0x922, 0x12) 5m51.783769158s ago: executing program 0 (id=2082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000100)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6400f95023eed19400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c2994000000", 0x58}], 0x1) 5m51.266555964s ago: executing program 0 (id=2085): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 5m50.976134122s ago: executing program 32 (id=2085): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 54.928851272s ago: executing program 2 (id=2804): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) 54.388916496s ago: executing program 2 (id=2806): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '-lR\x9fG\x85e\xc2jAu*x\x8c-\x91\xa4+\xb0\x1a\x82\xaa\xa66t\x95\x9d\xf2\'\xd3\x00aBL'}]}, 0x2e) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {r3, r4/1000+60000}}, 0x0) getitimer(0x2, &(0x7f0000000000)) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) 54.116452745s ago: executing program 2 (id=2808): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, 0x0, 0x8) 52.528193382s ago: executing program 2 (id=2813): ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x12040, 0x0) connect$pppoe(r3, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880)={0x0, 0x989680}, 0x0) 50.05830552s ago: executing program 2 (id=2818): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x11, 0x6, @local}, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000340)="2d5f269d000c", 0x6}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00"/12], 0x40}, 0x20000000) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="03df3d80bbba29d8b9e418bed9b3d9fa91d74306009a667ad8c4158084c3326e22d2e0e17abbd72d614365ea31edc90e10582f2a90197092851668b12bf14c56a5dd368b93a3f47c5246f06a1fb21cfe7a0ab9406df16128f3fd1a0f708f74c57bbede3402d96abf791a42ec76be8c653ef13f2ff37002c484f5162db31f9e2ebb71ee2e286f36b60542ed317b385374c13e44c135aeaa3ee317275a0fb7d693b935724de895f890331f0c5c5ba821831ec1c3f123a8326bf0348f4d22"], 0xa) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28c202b1dd95c763c13b47fab40bddb1ce46", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480), 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3b, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x80) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan1\x00', 0xffffffff}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 49.411707115s ago: executing program 2 (id=2822): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) rt_sigsuspend(&(0x7f0000000040)={[0x5]}, 0x8) unshare(0x44040000) lseek(0xffffffffffffffff, 0x1003ff, 0x4) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000000)={0x0, 0x3e, ""/62}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 33.787877492s ago: executing program 33 (id=2822): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) rt_sigsuspend(&(0x7f0000000040)={[0x5]}, 0x8) unshare(0x44040000) lseek(0xffffffffffffffff, 0x1003ff, 0x4) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000000)={0x0, 0x3e, ""/62}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 14.3634853s ago: executing program 5 (id=2889): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "0000c0d4"}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x6, "0062ba7d1b0000000002f7ffffff00"}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff060003", 0x13}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000514"], 0x50}}, 0x0) r5 = syz_open_pts(r3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) landlock_restrict_self(r1, 0x0) r6 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001500), 0x40, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000001540)={0x18}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x6d}) 13.49890611s ago: executing program 5 (id=2893): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1e, 0xac00) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES32=0x0], 0x60}}, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB="0500110000000000"], 0x44}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x7, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000210a011d29"], 0x38}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 12.609681875s ago: executing program 6 (id=2845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.009566666s ago: executing program 5 (id=2896): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) iopl(0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) gettid() r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, 0x1c) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 9.918128219s ago: executing program 6 (id=2897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x765d5f19}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}]}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioperm(0x0, 0xab49, 0x7) r3 = fanotify_init(0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x71, 0x40000009, r4, 0x0) fanotify_mark(r3, 0x80, 0x20, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) gettid() 9.763502249s ago: executing program 3 (id=2898): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x4040004, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 9.751456281s ago: executing program 6 (id=2899): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='\x00', 0x0, 0x3000000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 9.181998605s ago: executing program 4 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000120005ff2cbd7000000000200000004a", @ANYRES32=0x0], 0x68}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@generic="31970c5b3f34f99922b1329c3c"]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8.259633561s ago: executing program 3 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) io_uring_setup(0x5286, &(0x7f0000000000)={0x0, 0x493d, 0x0, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 7.581170317s ago: executing program 5 (id=2903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000dc0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000d80)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x1, 0x0, 0xa, "d9"}]}}, 0x0}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x17, 0x24, "3d6d949a5c7ade8c06e3eab1ee84e115fb70d9e79f71ead5147d1581cc2b3a703b60d362"}, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0xf0, 0x600, 0x800, 0xbb8, 0x1, 0x4, 0xf, 0x1, {0x8f, 0xd7}, {0x3, 0x91, 0x1}, {0x2, 0x8, 0x1}, {0x5, 0x7, 0x1}, 0x2, 0x0, 0x1, 0x8, 0x0, 0x21, 0x3, 0xf9cf, 0xff577b4, 0xd25d, 0x5, 0x3, 0x10, 0x0, 0x1, 0x5}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_create1(0x0) 7.57717825s ago: executing program 6 (id=2904): shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000400000100000000000000010000000000000000000000ff"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 5.455238152s ago: executing program 3 (id=2906): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x9759, 0x1000, 0xfffffffe, 0x2a}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x31713}) io_uring_enter(r4, 0x3516, 0x1, 0x0, 0x0, 0x0) sendto$netrom(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40ee2380559ec7de, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 5.452984352s ago: executing program 1 (id=2907): syz_open_dev$vim2m(0x0, 0x4, 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x50000, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmmsg$inet(r1, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000011c0)="330902b33d69deb82f7bb303dd80d91ffe2e53e0c0084a693660487bfec9d57e4fffd449a09d06f8914fe7bec4976ff9ed9329a8feabdf03672417aad78fe5a1000c9945b135d4b55ca6a522dd3ada99ffecf04016d6f87304180b62e526093be770b42bc7bfbbbdbbb684a93e00990b6124fbb56e74279a93dccdfda6bf24ac7822e20c975656534869382b08c99c9f9c5d96fc9f3c5583e5e2881069158222c7336c44d264364f08c9a4548b013a7762d14b24b9ba4a34c0e2eae469e717e9d8dd1336edcc8435b355acab938e9ea717f47c888947895445c7ed10c90febce2507ca012f03445766dda3ea4eee42b7348271abe4b0b84a25e8df5731b7e9014796fc6ca38a3134fb7b169d1b5d65fce0d9732641059c94ad50e6fcf50a49f4c1ac285430ed2cb20ec4cc8573c821191f1a4b719fa7a28ae200377d19781da5e2db9c8a0224cbe10d969b91bfe850870763698ebfc4794e457680820c564b3d82f40dc1cc38f4e147bf1a1bc462750ff90325585e445e099e55aadf5c82391b808cebe4a6e351d24ec5980d017208b6ba863eb6c97d61b0a807282c83a27f00b2775d9f54a276e696928a0214ab0668ac50844f3f1c4d6cc184e8059e0d44924e061723489f9f1e6ad79bc748ac867fcd272b0149d861b62e803ddc1bb90ea7cb09f0cc09e3d4130e0a7440f1db0b581b380027bcebd39dc22f2df7f79ff95dff7b02178d9e3f777c8dd98bba4256ab00c3a662ed9ed0fa75a21cc16511dd5993da67f58f9fc9937f43c3269dfc753ab7d71bde03da008d98f4aaa5b6c197db54c69e505ae2070cd4d4fe67f112dd630502060ba69c7b47228bbfe094a6d384910a16a6f79d7ca9c9f97a5e03e576496cd6d5cec917a22b41903a18e49ae0c50ece4cc6f6643cef5886136f76cb7b26afaa35ea8f86e7b8f7656f709ce61409c253cbefec9e32bd564e2906665d3c7feca2b773764c157bffa1f570291de6edd9607c4b0ffbda0823462d26063819a6b74abb86976f3a32fb37d541876d59ffa2b034c2579f2caa2066ab45a6b858aa0562068f095e67baf5961ade5574fdd38c887dd28cf23bdb676784b8f831175b2e4a9fbcd2d8d2ff5966714273d22b2f8814fa942e72d3834f214eb04f03b8f54e0f63f03c19f30e5a6c538c3688cb9a4281d84be14732666a3cdff894f978cc5dc6728300132d2df4b42b2f1edb1325fa026ea995d7d177c23928da3ef9a2b35d043058ac93322af9b0f56f684cd938f6952a05bbf5c9b0f00d15aee106b300e0593fec6d98ee1ef090032de893715d024b34370e5b67f44e93f72f59ed6e1b6c2be18ab466ec7834d7d0355db19bbe74fa6484ac6a2d5d3a19bdb9d39f2ce0f1ffb9da906d04785dcd258aa83f539933a32e6269e84288f89445d6b490231385e066fe3fb950d4b149932fe726b90a2262015a318045fd4d80992f895cdcaa2410d7bdefd95efc604f6d22c63dc46661466ee85c72f63cd6f42ebaeff952f957b315446c902901048cfe69695eab84fe3edc6cd4112c0119cfac456842e1e6d342a99436b4e5f4969734d6988d56774760de0021408aa9bacd40e672758714e9a0645c4766d24719dffa8deb1b53368ec4fac0f77626b16dbdd7936bdd87900f12732ee0bc8262a59ab3cc6f79e208c77ea999ce74a4c3f3eff7f53fc5f777600957dbd48aa38a7f0d738bd52c71ff2683d2d928310fb671ae35d31bd3fb079449c92d9b4e966eed7532a254b3643bae3ec5af3ecc5d5dfe703d9c5524660343688dbee850a03aee6804e2bdc999e56751d0529c7277a623db4ff98c24a6a6addad677a747fc459f42f0c24d7049b50aa05ce6b8c9e181438d76735adfe47bb01dcc055796a5f274ac35b52748f8f4a98b756de3983a4968afd2a522c109b1e705cde6cb3bcb219834ae02b966166d6f5015358671904c5c1a502d07afe984c2e71cb0d8f33fe3102c10b3b89da40f28e43493ce1bea216867904a91a410a145f1b537d9ea85811dc14a0e1c3678c912e85d54761223ed9e849247c5e8463fce3902aaacfba199771e1f15d153ebf279cfb3edb2a50166c3a8e8b28578dfce0456db7e6d5a5c0967671d9e20f50cf29cbf4e852364fe867c032314a908b44595ee2a32472deb4ded029e252fc682684e78a09c1a5045efcde6975dcf2be4051149dc84b989ebab7df311adab28e21aa0115e82e2d4a5365e5cfbc3617a513bb4c37aec54bd423e4f69171fb3ae79171ede8035ee9a1f9d86b982ea464b5c7dd4108ab526336dec93fbdfbaccdbcb2b13e85fff66113918a13163385e96103a7e460d050fe56ef19cc93d166acb154aca31cf7823cf3016d73ee700ac0b96fbc33e28a123f71deeae67d1f9a83d290fe0225e894805ec9e51ca06b250fd1d4b0cbc7c93095b07b985d25a2ad51c608d9fac3923eb37a45c67b704918a5868d592de2bfb5384ec1b45be36d4cdd8ae6d93fe17d3f5940bc9c63efb897ca7851b040fed2f41a6c6a3202fcf938e8b107bc43f88f8a7ebf0de3de4f8ddeb273de272a6537427bddbc5fd41726d89402a0b89e32304b6c8405d5ab3c72c81a73076636a3ff9d0784392ab91ff5077c6b500797a73b9b8b11a40af8c056d4319b2bd7fac9d69868fd40e058a9b40b3df30c3cfa46327289eda90c7e3f46bde72817805ea6006466256d85b92f4b0a8a84c1bdbda2dc6cff067b17e123c98f64f47c5689736270fc8c1a5c20df40e49a5ff408739ab0c3a5d41869e810df3bbb1ee1014ae0829c5142685d2ffccc019676b8c9c22f203059aa863d4d5ff61dabea12275bc5d12172a1ab589786bbd2e2f6891b9c771f9163da65583d609c878de7af45e4835f0bd7a16298b104c17c0f47198036164634264936528b377957bd4cadeb4c6ea35f3498568fd5cfaca31d619b7b12593061a29239f6de5f3f7e5690f2e616562905e12d1a7c47851e8218d99cd36b2ef635ecfffc095cfa5a8582b0b4aefa3acbae7a4ff08434db23533c58201351f48b7b9cb7fa2f49de86b6b98e5410dab291cb1134a5884d890a094c08d228a636c43dbeb99b4355655552afae301df55c68183112fb71a9631ef46706666a4e8cc25c22e65485e45f83a5aa523d45011efd240a749d4817d3bd9cf87dd02f973ad6e3bfe2dc8b636372b5729a2ead3aa2701e9738b442d11ec6a2def096b53443480e14841f1f3707817c8c52a2ccfe16994f1342c55bd55cfb105a1ed5b16bdd27ef5aa1867f392c39d15dd407e5580f56dbf491e193882dd4cb1db626a8beee9d56c98a5ec2002ed85229aacac95dc20e78b0744695da3b9c1d094d6a22d7938572469dc98e6bf01ce90a7a89ddd23e1300925731fef6562333368a6cf89779b54a6d8823ced3c2b9d5c71a8f4a78994707595907ce3660a72ab96a36f2530afdfe4f170a40c4c051147c537f08cc95d3dbc1f7e454635a7cd1be0fa5c7b520f7f339e52df4320037509f82de513415152b4963c6bd3fa85ab1a8a69f279b33917701a3811b776e91a4c5000e2ec597af4d191d7885aabe6e0d3a3457dc40170f6f150250a5769a9e3b975b572028a6c4448a3ed04ffe87fc1bdc805b2657aeda3f232bacad6ca488a63f3b202091ee797931c2feb67c053dd04816adca04784fa0767acf2ef37e4b70b52fed726e80000ff864e2e658bbf1cb58b2b657406d63724315dc83f666b329f4b8935eb6369f5d13a9367a932d7c1c20140acff418723959d8b9bd366fadd08fe475b9574ad8f9d2b408098e8065d74762959193b90af999934fe62d75df0dbbac505d488c00ef1b699351c5d34269ee0926da37b2cbc0cbbdf1415ecddfff9272be900280cf62332a7952df655373b8bf963055cf90b1e33393108bb65f14400cc769da2cfea2aba73bce947167ddbda728a46589d55e06b450ddfb00011dbb7a424d38b83f407210740a08859f05320dc595acfaf2e73aeec4b49f723d967e09d55c4554c2e4b3c073b4712a4171241f5ab76b68d2295c0e5e6219febaa07a76b3e87c8486d6e92acd903dba212a714be521c5b68e2484178429fdda388e1e0b7fa47dd9bc76b50871a1d0f1871d48da6a0f2bde15fa0eaa286f96dd0ec9f0280952df5ae476db3b6c31eb0b2acb96a69d24a7f491a2843186182856e29f72023bf3539221bb6dd0391a21c982e85b15df27e0cdfe578cd4f7ff51e2bc4ce477e6f9184ab36e280dbce79772011689ff7b5619b7cb3cea66e94d25993b2a9e37fa1ec9acc6ea0afb01d97122d1187e86ff2a64c82b4db9b5e7f09ef595d4212cbfe54a49559755fb08c42867e1cf1d5132076e20ab6935a004b60a4fe63e98005ef9bac2264c5b019bf46cfa33d64d0d21608fd6cbd48834dbfb2302cf1681224e205f0ab5fb36d4940910880bf4e4c243040f7bf3abe949c0343adbe5c875c87c1dc88a0b1863645772a1e9f6051e7921d7534808dfa251b5de5659a7c658690afbfda54757bcfd509474d4ad56d0adf20dcb1efb6ae19a5a5fb0268beffb7418fba4b8048a177727ded41a223b4238598c50c71474d13a543f80e4e38790ee74855e802b1200b35f8b1ccdfeec50ef37eb119a841d46d1cae357455280faffb8c290f2b19de0f26077dd8b60729d33c99dc7c496507d4ad12f4f50309cc4dee437a675a746a74d07bdd3d16f73ed5806e798161a2145473c678208677431dbf134883d92ee93af02d41b6dc39eee3e30b4b94b74098fee1227bacc1e73d30466fb9d8e79777bc403706c8ae07ccda9c6a3aa2468bcaf97a28f092195b76f370f7bcc3ecc75cc6d43d8c9d9d127c63b6e1908cb7135f72818f6e4ef70640ef3c5672c163cbc90261636f8a7dacbd5b3106664cfcea3560b6f7a933f7517cd94866e9251f5e495bf3a9819d1510d3bd095deb232dc88a19b9115b90ca83036c1dcd7561d4dc98d42ec352107f23c620aeda063747a29cc3912f6682b97ff146a42173606015f48a313a5ee7210e927882450c7229545df770a88deb01ae274c9272d3fe9800420b66502e8d2388ba293f6d4f5a4dd342baf3c69a0901e43ebd4412f225b74323ef23ed3d9831ee173ad221afc436a8d458cfc287d568861c6e84d0a6170258f0491b7835a9be49d0ad23edbb3c8cc232d63b49266026f11a97d8f00fd0fbbcea7b85bcaf6fae0b308a13e7dac67980215c1135e28a0087928252518db3f17cc37931c85f128b5bd612054553df7eab4f17c113949b7ce5bee13d37f711acaf577ea047ff29f2459ea00a885ea860ddf2e65e375740f99c6d5a7fe6e68bd4b3fecf91e330faf11c6a968a9202f6eece02b3321329ed8ce4aa56cf6db45bacc27272cdd97cb0572789d06681d263160f2f9a302c3dc7a620c6d4083d908cbbcacbcf755dea2f0fb6d2ade4587f4445e513e84e5e", 0xf08}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000006fc0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000072c0)=[{0x0}, {&(0x7f0000007200)}], 0x2}}], 0x3, 0x5080) 5.45231679s ago: executing program 6 (id=2908): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x100004, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0x1, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080)=0x2, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x1d, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.150354943s ago: executing program 4 (id=2909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) fanotify_init(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 4.47455641s ago: executing program 1 (id=2910): r0 = syz_open_dev$radio(&(0x7f0000000200), 0x0, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x5, 0x100) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x10001, 0x4, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000100)={'system_u:object_r:syslogd_var_run_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x7b7}, 0x4b) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') timerfd_gettime(r8, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x400, 0x0, 0x4420046, r7}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00'}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x111691) 4.426371397s ago: executing program 1 (id=2911): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4004, r4, 0x2}) 4.187228844s ago: executing program 4 (id=2912): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x40002, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) remap_file_pages(&(0x7f00007c0000/0xa000)=nil, 0xa000, 0x0, 0x72, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x6, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040), &(0x7f0000000080), 0x0}) 3.353008297s ago: executing program 1 (id=2913): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2.58240661s ago: executing program 5 (id=2914): r0 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8900) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000680)={0x3, "f9008000290215cbab2f111658df5edc0100000000000000000000000400", 0x1, 0x1, 0x4, 0x200, 0x100, 0x4}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000300)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x2}, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdce09000125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffaf4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2b2f0ed86b00000000fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c7070800000000000000433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf8714d7bb2366fde41f94290c2a5fdecb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1f5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27832b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a540f0c10ec3a11667290b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000007d00000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c6055bb164ab413d5467ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d7ab3753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c8c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf06db539f97580e079175426c088a0208040982a000000000000000000000000001aad0b6d70c42c3131006d9996b4c651ceaaf0159fe6e7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a1914b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c056d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04de1d9f34335d8fcb9205da65b43831c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23d040000000000000033f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8adc67ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c259d3f28b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d74f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000000000000000000000915c2cde78db002a20e370600f56b3803786ffff268fa1782c240a1d3b62bb5c9c5712bc58a0f276f5224b6efaceab36d1468b0800000000000000cbefec08ac7cb62a9f6abcc97daf83edafe4409ecba3050a321a180af12bc59b1b2f1a9cfdf4bf2d26449544d82fae6473443c68e11c33b531896b7b7ebd03ed5620880ac1a33d3a6fa59d77e98a17d594eaea287f095e0593ac101efc3ad591249a4b0f090c0be8866b80f686fb8049c942c93b240c1e13ffba1f5220b5d08456614329cb66f71cbaefaedabdd0e9754f821cf88cfe247b85fea737bb72e759168acbef4cea2e21bb3fb18b8612183b386d3285984b96e22bf82be189395475b18c27437b73a81ff72818cdd291e906a8e2933237473494d4ddea11f7972eeb0fbee7e8aa90818fa847b700b4225ebb3c662c06e33dc5b94df2b35bc1647d87002b6106f7d4866ce7d68194dd00"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) ustat(0x5, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000000c0)=[0x8, 0x6c9], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 2.36276385s ago: executing program 4 (id=2915): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) 2.24921673s ago: executing program 3 (id=2916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) umount2(0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) poll(0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x7fffffffefff) 2.185409803s ago: executing program 4 (id=2917): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delnexthop={0x58, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r3 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c000280f7fd0100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000ff3c000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc000000000000000000000000000000140004"], 0xc8}}, 0x0) fallocate(r3, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x9, 0x3) 2.183780618s ago: executing program 1 (id=2918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x601, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000000c0)=0x8, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r7 = dup(r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) readv(r7, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) 1.161021653s ago: executing program 1 (id=2919): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000300)={0x0, 0x17}, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x2}, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x1, 0xa}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xed, 0x0, 0xfffffffffffffffc, 0x80000000000}, {0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x2, 0x6, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x0) 1.159260403s ago: executing program 3 (id=2920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r3) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000100002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1.108784661s ago: executing program 4 (id=2921): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x5dd073cf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$cgroup_pressure(r1, &(0x7f0000000380)={'full', 0x20, 0xb, 0x20, 0xe7ca}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r8, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 91.279407ms ago: executing program 3 (id=2922): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x22, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000200)='THAWED\x00', 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 42.116744ms ago: executing program 5 (id=2923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r2, 0x7d, 0x9d9, &(0x7f0000000040)=""/29, &(0x7f0000000300)=0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r6, 0x0, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x1}}) 0s ago: executing program 6 (id=2924): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000003c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)=@security={'security\x00', 0xe, 0x4, 0xac8, 0xffffffff, 0x110, 0x1a8, 0x1a8, 0xffffffff, 0xffffffff, 0xa58, 0xa58, 0xa58, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'vlan1\x00', 'dvmrp0\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0x4, 0x5, 0x0, 0x1, 0x7], 0x1, 0x1}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3, 0x1}, {0x2, 0x0, 0x1}, {0xffffffffffffffff, 0x3, 0x7}, 0x8, 0x8}}}, {{@ip={@multicast1, @private=0xa010100, 0xff000000, 0xffffffff, 'vxcan1\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x2, 0xbc}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x3, 0x5}, {0x1, 0x6}}}}, {{@uncond, 0x0, 0x850, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x3}, {0x401, 0x1}, {0x2, 0x2}, {0x1}, {0x74, 0x1}, {0x0, 0x3}, {0x7, 0x1}, {0xec12, 0x3}, {0x800}, {0x0, 0x3}, {0x10}], [{0x2, 0x6}, {0x871d, 0x1ea}, {0x4}, {0x1600, 0x4}, {0x11, 0xfffffff1}, {0x2400000, 0x5b2}, {0x0, 0x1f}, {0xfffffff8, 0xfffffff8}, {0x5, 0x1}, {0x1, 0x3}, {0x40, 0x4}], 0xa, 0x6}, {[{0x76c9, 0x3}, {0x8, 0x3}, {0x6}, {0x8, 0x3}, {0x7}, {0x9, 0x1}, {0x9, 0x2}, {0x81}, {0x31, 0x1}, {0x3ec5, 0x2}, {0x80000001, 0x2}], [{0x1, 0x5}, {0x7, 0x3}, {0x8, 0x744316a7}, {0x8, 0x800}, {0x9, 0x4}, {0x8000, 0x5}, {0x6, 0x984}, {0x3, 0x4}, {0x6, 0x8001}, {0x4, 0x5}, {0xd70e, 0x400}], 0x4, 0x1}, {[{0x9, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x5}, {0x1, 0x3}, {0xafa, 0x3}, {0x8, 0x3}, {0x9, 0x2}, {0x4, 0xa1215d5f3af9d34e}, {0x800, 0x1}, {0x100, 0x2}], [{0xa, 0x3}, {0xffff, 0x7}, {0x1, 0xcd06}, {0x20000000, 0x6}, {0x2, 0x4}, {0x10001, 0x4}, {0x4, 0xda8}, {0x0, 0x2}, {0x2, 0x7fff}, {0xffff0001, 0x5}, {0x7, 0x6}], 0xa, 0x1}, {[{0x755b67c3}, {0x4, 0x3}, {0x4, 0x1}, {0x68, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x2}, {0x10}, {0x5, 0x2}, {0x9361, 0x1}, {0xffff, 0x2}], [{0xa32, 0xffff8000}, {0x3, 0x42694e21}, {0x0, 0x4b}, {0xab640aa, 0xfffffff4}, {0x2, 0x7}, {0x8000, 0xb41}, {0x8, 0x3}, {0x16c}, {0x8, 0x6}, {0x3, 0x80}, {0x2, 0x800}], 0x3, 0x8}, {[{0x4, 0x1}, {0x8, 0x2}, {0x8}, {0x3ff}, {0xfffffffc}, {0x1b250e8f, 0x16b1b6b86bdebed3}, {0x1, 0x1}, {0x3, 0x1}, {0xfffffffe}, {0x6}, {0x632, 0x3}], [{0x3, 0x5e411314}, {0x7, 0x80}, {0x7f, 0x7}, {0x5, 0x10001}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x14bd}, {0x9, 0x5}, {0x1, 0x80}, {0x5, 0x2}, {0xeb0, 0x7f}], 0x3, 0x4}, {[{0x0, 0x2}, {0x2, 0x2}, {0x3ff}, {0x4, 0x2}, {0x5, 0x2}, {0x100, 0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0xfffffffe, 0x1}], [{0x6, 0xc797}, {0xffff, 0xd471}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0xc3}, {0x3ff, 0x8}, {0x0, 0xf6a}, {0x7, 0x3}, {0xfffffffb, 0x100}, {0xf1, 0x9}], 0x9}, {[{0x9, 0x3}, {0x6, 0x3}, {0xa0}, {0x2, 0x3}, {0x4, 0x1}, {0x9ca7, 0x2}, {0x30, 0x3}, {0x5}, {0x6, 0x1}, {0x7fffffff}, {0x3a5, 0x1}], [{0xfffffffa, 0xff}, {0x9, 0x1}, {0xf50f, 0x5}, {0x6, 0x3}, {0x9, 0xffff1f45}, {0x80000001, 0x3ff}, {0x1, 0xffffffff}, {0x9, 0xffff}, {0x10, 0x9}, {0x9, 0x7}, {0x8, 0x9}], 0x5, 0x3}, {[{0x0, 0x1}, {0x6}, {0x915}, {0x80000000, 0x1}, {0x1, 0x2}, {0x371, 0x2}, {0x9, 0x1}, {0x8}, {0x3d9d, 0x3}, {0x5}, {0x8001, 0x3}], [{0xe}, {0x81, 0x3}, {0x8, 0xffffffff}, {0xf, 0x8}, {0x9, 0x9}, {0x8, 0x8}, {0x101, 0x1}, {0x2, 0x4}, {0x2, 0x775}, {0x1}, {0x7, 0x200}], 0x8, 0x7}, {[{0x10f4, 0x3}, {0xf, 0x3}, {0xff, 0x3}, {0x0, 0x2}, {0x3ff, 0x3}, {0x98, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0xdb0, 0x2}, {0x0, 0x3}, {0x8, 0x3}], [{0xb771, 0xffffffff}, {0x0, 0x7}, {0x8, 0x101}, {0xffffffff, 0x20000000}, {0xf32}, {0x8000, 0x1}, {0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x8f75}], 0x5}, {[{0x4, 0x2}, {0x3, 0x2}, {}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x9, 0x1}, {0x4, 0x1}, {0x101}, {0x0, 0x1}], [{0x6489, 0x8}, {0x14, 0x3}, {0x6, 0x3}, {0x3, 0x5}, {0x9, 0x7f244713}, {0x0, 0xb}, {0x0, 0x5}, {0x6, 0x7}, {0x6cc3}, {0x2, 0x558bac78}, {0x8, 0x51}], 0x6}, {[{0x4}, {0x5}, {0x3, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x10001}, {0x9, 0x2}, {0x1, 0x3}, {0x3}, {0xf, 0x2}, {0x429, 0x2}], [{0x7ff, 0x7}, {0x7fff, 0x4}, {0x6ec, 0x914}, {0x6, 0x1}, {0x11e1f9e6, 0x3}, {0xfffffac2, 0xaf8}, {0x200}, {0x40b, 0x9}, {0x6, 0xfffffffe}, {0x1ff, 0x7fffffff}, {0x1090, 0x2}], 0x9, 0xa}], 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x6, 0x9, [0x3, 0x2e, 0x39, 0x26, 0x1e, 0xa, 0x36, 0xf, 0x36, 0x3e, 0x1c, 0x2f, 0x1c, 0x15, 0x21, 0x39], 0x1, 0x81, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) kernel console output (not intermixed with test programs): 43079][T12853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12853 comm=syz.0.1566 [ 452.784081][T12855] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 452.821117][T12855] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 454.036357][T12873] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 454.191855][T12879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.257330][T12873] vlan2: entered promiscuous mode [ 454.295013][T12873] bond3: entered promiscuous mode [ 454.323859][T12873] bond3: left promiscuous mode [ 454.864148][T12887] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1576'. [ 457.586086][ T29] audit: type=1400 audit(2000000059.300:608): avc: denied { accept } for pid=12916 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.414917][ T29] audit: type=1400 audit(2000000061.150:609): avc: denied { append } for pid=12935 comm="syz.3.1591" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 459.478746][T12939] ptrace attach of ""[12942] was attempted by "./syz-executor exec"[12939] [ 459.491637][ T29] audit: type=1400 audit(2000000061.180:610): avc: denied { read } for pid=12935 comm="syz.3.1591" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 459.539460][ T29] audit: type=1400 audit(2000000061.180:611): avc: denied { open } for pid=12935 comm="syz.3.1591" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 461.978041][T12966] SELinux: Context system_u: is not valid (left unmapped). [ 461.987914][ T29] audit: type=1326 audit(2000000062.740:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 462.841040][ T29] audit: type=1326 audit(2000000062.750:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 462.874535][ T29] audit: type=1326 audit(2000000062.750:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 462.898911][ T29] audit: type=1326 audit(2000000062.750:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 462.988399][ T29] audit: type=1326 audit(2000000062.750:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 463.061493][ T29] audit: type=1400 audit(2000000063.480:618): avc: denied { write } for pid=12955 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 463.121974][ T29] audit: type=1400 audit(2000000063.710:619): avc: denied { relabelfrom } for pid=12959 comm="syz.0.1598" name="" dev="pipefs" ino=30329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 463.154862][ T29] audit: type=1326 audit(2000000062.750:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 463.201330][ T29] audit: type=1326 audit(2000000063.730:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 463.225559][ T29] audit: type=1326 audit(2000000063.730:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f985d29 code=0x7ffc0000 [ 463.254944][ T29] audit: type=1400 audit(2000000064.470:622): avc: denied { relabelto } for pid=12959 comm="syz.0.1598" name="" dev="pipefs" ino=30329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 464.333260][T13002] openvswitch: netlink: Flow actions attr not present in new flow. [ 465.162942][T13009] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 465.343867][T13013] overlayfs: failed to clone lowerpath [ 465.537056][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 467.848794][T13033] overlayfs: failed to clone upperpath [ 467.945702][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 469.502249][T13050] vlan2: entered promiscuous mode [ 469.531487][T13050] vlan2: entered allmulticast mode [ 469.556977][T13050] hsr_slave_1: entered allmulticast mode [ 469.720392][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 469.813447][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 469.842542][T13050] hsr_slave_1 (unregistering): left allmulticast mode [ 470.360234][T13062] block device autoloading is deprecated and will be removed. [ 470.371076][T13050] hsr_slave_1 (unregistering): left promiscuous mode [ 470.396524][T13062] syz.3.1627: attempt to access beyond end of device [ 470.396524][T13062] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 470.811279][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 470.971170][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 470.988518][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.005398][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.070534][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.130445][ T9] usb 1-1: SerialNumber: syz [ 471.198357][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 471.250795][ T9] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 471.257546][ T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 471.330493][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 471.474375][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 471.474392][ T29] audit: type=1400 audit(2000000073.210:624): avc: denied { shutdown } for pid=13071 comm="syz.0.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 471.508288][ T9] usb 1-1: USB disconnect, device number 20 [ 471.761335][ T29] audit: type=1400 audit(2000000073.490:625): avc: denied { accept } for pid=13085 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 475.011985][T13109] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 480.020558][T13149] bridge0: port 1(erspan0) entered blocking state [ 480.027116][T13149] bridge0: port 1(erspan0) entered disabled state [ 480.608021][T13149] erspan0: entered allmulticast mode [ 480.631311][T13149] erspan0: entered promiscuous mode [ 480.637490][T13149] bridge0: port 1(erspan0) entered blocking state [ 480.644021][T13149] bridge0: port 1(erspan0) entered forwarding state [ 481.401175][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 481.444395][T13168] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1654'. [ 482.050443][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.119491][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 482.294732][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.847540][ T9] usb 3-1: config 0 descriptor?? [ 482.855289][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 483.094245][T13174] xt_socket: unknown flags 0x50 [ 483.355101][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 483.496138][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 483.561197][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 483.574695][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 484.241159][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 484.291744][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 484.330089][ T29] audit: type=1400 audit(2000000086.050:626): avc: denied { setopt } for pid=13182 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 484.352671][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 484.388199][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 484.409920][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 484.434539][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 484.470886][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 485.878825][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 485.894738][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 485.902558][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 485.911433][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 485.921136][ T9] pwc: Registered as video103. [ 485.928071][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 485.980440][ T9] usb 3-1: USB disconnect, device number 21 [ 491.505791][T13256] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 491.759289][T13258] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 492.141614][T13256] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 492.178590][T13256] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 492.362654][T13256] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 492.646705][ T29] audit: type=1400 audit(2000000094.370:627): avc: denied { accept } for pid=13266 comm="syz.0.1683" path=2F3330362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 492.746236][T13256] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 492.772473][T13256] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 492.929961][ T9] libceph: connect (1)[c::]:6789 error -101 [ 492.936894][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 493.203145][ T9] libceph: connect (1)[c::]:6789 error -101 [ 493.211628][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 493.229346][T13276] ceph: No mds server is up or the cluster is laggy [ 493.444544][T13291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.613238][T13284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.656615][T13284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.809624][ T29] audit: type=1400 audit(2000000095.540:628): avc: denied { getopt } for pid=13296 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 493.991197][ T29] audit: type=1400 audit(2000000095.570:629): avc: denied { append } for pid=13296 comm="syz.3.1693" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 494.741282][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 494.911313][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 494.925000][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 494.956114][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.994038][ T29] audit: type=1400 audit(2000000096.730:630): avc: denied { accept } for pid=13308 comm="syz.4.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 495.542610][ T9] usb 4-1: Product: syz [ 495.554243][ T9] usb 4-1: Manufacturer: syz [ 495.564193][ T9] usb 4-1: SerialNumber: syz [ 495.576019][ T9] usb 4-1: config 0 descriptor?? [ 495.650767][ T29] audit: type=1326 audit(2000000097.380:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722185d29 code=0x7ffc0000 [ 495.756606][ T29] audit: type=1326 audit(2000000097.390:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722185d29 code=0x7ffc0000 [ 495.840206][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 495.853828][ T6522] usb 4-1: Failed to submit usb control message: -71 [ 495.854902][ T9] usb 4-1: USB disconnect, device number 18 [ 495.860853][ T6522] usb 4-1: unable to send the bmi data to the device: -71 [ 495.860904][ T6522] usb 4-1: unable to get target info from device [ 495.898128][ T29] audit: type=1326 audit(2000000097.390:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f1722185d29 code=0x7ffc0000 [ 495.961074][ T6522] usb 4-1: could not get target info (-71) [ 495.991740][ T6522] usb 4-1: could not probe fw (-71) [ 496.035690][ T29] audit: type=1326 audit(2000000097.390:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722185d29 code=0x7ffc0000 [ 497.091350][ T29] audit: type=1326 audit(2000000097.390:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1722185d29 code=0x7ffc0000 [ 497.217516][ T29] audit: type=1326 audit(2000000097.390:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722185d29 code=0x7ffc0000 [ 498.259200][T13344] xt_l2tp: v2 tid > 0xffff: 262144 [ 498.828787][T13351] TCP: out of memory -- consider tuning tcp_mem [ 499.022732][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 499.022750][ T29] audit: type=1326 audit(2000000100.760:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13354 comm="syz.2.1709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x0 [ 499.711100][T12309] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 499.891113][T12309] usb 1-1: Using ep0 maxpacket: 8 [ 499.897787][T12309] usb 1-1: config 2 has an invalid interface number: 241 but max is 0 [ 499.920342][T12309] usb 1-1: config 2 has no interface number 0 [ 499.927799][T12309] usb 1-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.971089][T12309] usb 1-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.988794][T12309] usb 1-1: config 2 interface 241 has no altsetting 0 [ 500.002594][T12309] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 500.011764][T12309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.019756][T12309] usb 1-1: Product: syz [ 500.028695][T12309] usb 1-1: Manufacturer: syz [ 500.033633][T12309] usb 1-1: SerialNumber: syz [ 500.042591][T12309] ti_usb_3410_5052 1-1:2.241: TI USB 3410 1 port adapter converter detected [ 500.063975][T12309] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 500.182527][T13378] syz.3.1714[13378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.182617][T13378] syz.3.1714[13378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.221324][T13378] syz.3.1714[13378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.319834][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.343022][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.454870][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1715'. [ 501.067616][T12309] usb 1-1: USB disconnect, device number 21 [ 501.093646][T12309] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 501.349353][T12309] ti_usb_3410_5052 1-1:2.241: device disconnected [ 501.567293][ T29] audit: type=1400 audit(2000000103.270:663): avc: denied { write } for pid=13383 comm="syz.3.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 501.611643][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.348465][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.286257][ T29] audit: type=1400 audit(2000000110.310:664): avc: denied { getopt } for pid=13452 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 510.681166][ T5814] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 510.861130][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 510.867720][ T5814] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 510.881060][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.961112][ T5814] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 510.970061][ T5814] usb 3-1: config 0 has no interface number 0 [ 510.979760][ T29] audit: type=1400 audit(2000000112.720:665): avc: denied { read write } for pid=13470 comm="syz.3.1743" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 511.026984][ T5814] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 511.033694][ T5912] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 511.072439][ T5814] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 511.088210][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.096478][ T5912] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 511.101155][ T29] audit: type=1400 audit(2000000112.720:666): avc: denied { open } for pid=13470 comm="syz.3.1743" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 511.117017][ T5912] hid-generic 0000:0003:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 511.159016][ T5814] usb 3-1: Product: syz [ 511.181126][ T5814] usb 3-1: Manufacturer: syz [ 511.185760][ T5814] usb 3-1: SerialNumber: syz [ 511.215767][ T5814] usb 3-1: config 0 descriptor?? [ 511.243353][ T5814] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 511.738538][T13480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.746490][T13480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.771543][ T5814] usb 3-1: USB disconnect, device number 22 [ 512.779214][ T5814] pvrusb2: Device being rendered inoperable [ 513.707783][ T29] audit: type=1400 audit(2000000115.440:667): avc: denied { read } for pid=13487 comm="syz.1.1748" path="socket:[32161]" dev="sockfs" ino=32161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 514.918763][ T29] audit: type=1400 audit(2000000116.650:668): avc: denied { append } for pid=13500 comm="syz.2.1753" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 515.161102][ T5814] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 515.341151][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 515.352183][ T5814] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 515.365317][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.375627][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 515.598609][ T5814] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 515.733817][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.752091][ T5814] usb 4-1: config 0 descriptor?? [ 517.509653][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 517.538445][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 517.554274][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 517.581144][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 517.588588][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 517.644296][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 517.656177][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 517.675833][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 517.700578][ T5814] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero RNG initialised [ 517.721669][T13465] Set syz1 is full, maxelem 65536 reached [ 517.741876][ T5814] usb 4-1: USB disconnect, device number 19 [ 517.901763][ T5864] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 518.041032][ T5912] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 518.066254][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.086886][ T5864] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.097540][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.116990][ T5864] usb 3-1: config 0 descriptor?? [ 518.178575][T13533] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[13533] [ 519.084271][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 519.163153][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.186401][ T5912] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 519.200322][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 519.219956][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.250990][ T5912] usb 1-1: Product: syz [ 519.255286][ T5912] usb 1-1: Manufacturer: syz [ 519.259923][ T5912] usb 1-1: SerialNumber: syz [ 519.310302][T13539] dvmrp0: entered allmulticast mode [ 519.321719][T13538] dvmrp0: left allmulticast mode [ 519.390503][T13537] syz.3.1766 (13537) used greatest stack depth: 20672 bytes left [ 519.482277][T13530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.490897][T13530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.503517][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.514009][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 519.521402][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 519.531419][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 519.540242][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 519.551022][ T5864] pwc: recv_control_msg error -32 req 04 val 1400 [ 519.560723][ T5864] pwc: recv_control_msg error -32 req 02 val 2000 [ 519.570288][ T5864] pwc: recv_control_msg error -32 req 02 val 2100 [ 519.585116][ T5864] pwc: recv_control_msg error -32 req 04 val 1500 [ 519.798136][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 520.108885][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 520.123828][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 520.134568][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 520.163452][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 520.178727][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 520.196072][ T5864] pwc: Registered as video103. [ 520.205830][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 520.236982][ T5864] usb 3-1: USB disconnect, device number 23 [ 520.356354][ T5912] cdc_ncm 1-1:1.0: bind() failure [ 520.377246][ T5912] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 520.391190][ T5912] cdc_ncm 1-1:1.1: bind() failure [ 520.407756][ T5912] usb 1-1: USB disconnect, device number 22 [ 520.454095][T13557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.465663][T13557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.688936][T13557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.699420][T13557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.841671][T13557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.852034][T13557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.936741][T13557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.947201][T13557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.073064][T13557] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.082188][T13557] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.100464][T13557] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.108738][T13557] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.124670][T13557] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.132966][T13557] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.146960][T13557] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.155332][T13557] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.432388][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 523.256412][T13601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.360434][T13601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.431338][T13601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.781269][ T5895] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 523.965325][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 524.551758][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 524.571013][ T5895] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 524.590758][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.620167][ T5895] usb 1-1: config 0 descriptor?? [ 526.641731][ T5895] appletouch 1-1:0.0: Geyser mode initialized. [ 526.648940][ T5895] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 527.809377][ T5895] usb 1-1: USB disconnect, device number 23 [ 527.809531][ C1] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -19 [ 527.857405][ T5895] appletouch 1-1:0.0: input: appletouch disconnected [ 528.025752][T13646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13646 comm=syz.2.1794 [ 528.191093][ T29] audit: type=1400 audit(2000000129.920:669): avc: denied { mounton } for pid=13645 comm="syz.3.1795" path="/proc/1465/task" dev="proc" ino=32431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 528.224283][ T29] audit: type=1326 audit(2000000129.940:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.3.1795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f316f985d29 code=0x0 [ 528.820094][T13665] bridge0: port 3(hsr_slave_1) entered blocking state [ 528.878833][ T29] audit: type=1400 audit(2000000130.610:671): avc: denied { mount } for pid=13666 comm="syz.4.1801" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 528.913730][T13665] bridge0: port 3(hsr_slave_1) entered disabled state [ 528.951064][T13665] hsr_slave_1: entered allmulticast mode [ 528.999699][T13665] hsr_slave_1: left allmulticast mode [ 530.931061][T13687] syzkaller0: entered allmulticast mode [ 532.226229][ T29] audit: type=1400 audit(2000000133.960:672): avc: denied { egress } for pid=13688 comm="syz.4.1805" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 532.250340][ T29] audit: type=1400 audit(2000000133.960:673): avc: denied { sendto } for pid=13688 comm="syz.4.1805" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 533.760153][T13709] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 533.861158][ T29] audit: type=1400 audit(2000000135.580:674): avc: denied { create } for pid=13710 comm="syz.0.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 534.640814][T13718] syz.2.1815: attempt to access beyond end of device [ 534.640814][T13718] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 539.152805][T13758] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 539.162054][T13757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13757 comm=syz.4.1827 [ 539.292001][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 541.981246][ T29] audit: type=1400 audit(2000000143.700:675): avc: denied { read } for pid=13771 comm="syz.4.1831" path="socket:[33023]" dev="sockfs" ino=33023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.468410][T13789] vivid-000: ================= START STATUS ================= [ 542.491164][T13789] vivid-000: Test Pattern: 75% Colorbar [ 542.511446][T13789] vivid-000: Fill Percentage of Frame: 100 [ 542.517319][T13789] vivid-000: Horizontal Movement: No Movement [ 542.826069][T13789] vivid-000: Vertical Movement: No Movement [ 542.851104][T13789] vivid-000: OSD Text Mode: All [ 542.857633][T13791] overlayfs: failed to clone upperpath [ 542.865850][T13789] vivid-000: Show Border: false [ 542.870850][T13789] vivid-000: Show Square: false [ 542.891062][T13789] vivid-000: Sensor Flipped Horizontally: false [ 542.901274][T13789] vivid-000: Sensor Flipped Vertically: false [ 542.921301][T13789] vivid-000: Insert SAV Code in Image: false [ 542.927503][T13789] vivid-000: Insert EAV Code in Image: false [ 542.937724][T13789] vivid-000: Insert Video Guard Band: false [ 542.943876][T13789] vivid-000: Reduced Framerate: false [ 542.949301][T13789] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 542.967442][T13789] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 542.981034][T13789] vivid-000: Enable Capture Cropping: true [ 543.012699][T13789] vivid-000: Enable Capture Composing: true [ 543.032966][T13789] vivid-000: Enable Capture Scaler: true [ 543.061096][T13789] vivid-000: Timestamp Source: End of Frame [ 543.081031][T13789] vivid-000: Colorspace: sRGB [ 543.095856][T13789] vivid-000: Transfer Function: Default [ 543.118372][T13789] vivid-000: Y'CbCr Encoding: Default [ 543.145711][T13789] vivid-000: HSV Encoding: Hue 0-179 [ 543.163451][T13789] vivid-000: Quantization: Default [ 543.182805][T13789] vivid-000: Apply Alpha To Red Only: false [ 543.199862][T13789] vivid-000: Standard Aspect Ratio: 4x3 [ 543.360992][T13789] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 543.457987][T13789] vivid-000: DV Timings: 640x480p59 inactive [ 543.681127][T13789] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 543.711931][T13789] vivid-000: Maximum EDID Blocks: 2 [ 543.721002][T13789] vivid-000: Limited RGB Range (16-235): false [ 543.733313][T13789] vivid-000: Rx RGB Quantization Range: Automatic [ 543.739770][T13789] vivid-000: Power Present: 0x00000001 [ 543.773766][T13789] tpg source WxH: 640x360 (Y'CbCr) [ 543.778920][T13789] tpg field: 1 [ 543.791118][T13789] tpg crop: 640x360@0x0 [ 543.851338][T13789] tpg compose: 640x360@0x0 [ 543.863690][T13789] tpg colorspace: 8 [ 543.870676][T13789] tpg transfer function: 0/0 [ 543.875862][T13789] tpg Y'CbCr encoding: 0/0 [ 543.898979][T13789] tpg quantization: 0/0 [ 543.918319][T13789] tpg RGB range: 0/2 [ 543.922338][T13789] vivid-000: ================== END STATUS ================== [ 546.219027][ T29] audit: type=1400 audit(2000000147.840:676): avc: denied { read } for pid=13820 comm="syz.4.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 549.791508][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'. [ 549.821513][ T29] audit: type=1400 audit(2000000151.550:677): avc: denied { ioctl } for pid=13856 comm="syz.0.1854" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 549.823211][T13861] input: syz0 as /devices/virtual/input/input18 [ 553.389014][ T29] audit: type=1400 audit(2000000154.630:678): avc: denied { nlmsg_write } for pid=13895 comm="syz.1.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 553.728327][ T29] audit: type=1400 audit(2000000155.410:679): avc: denied { getopt } for pid=13889 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.792239][T13894] SELinux: failure in sel_netif_sid_slow(), invalid network interface (11) [ 555.754010][T13931] ip6t_REJECT: ECHOREPLY is not supported [ 557.326073][ T29] audit: type=1400 audit(2000000159.060:680): avc: denied { execute } for pid=13939 comm="syz.4.1877" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 559.005356][ T29] audit: type=1400 audit(2000000160.660:681): avc: denied { connect } for pid=13954 comm="syz.4.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 559.427021][ T29] audit: type=1400 audit(2000000160.660:682): avc: denied { write } for pid=13954 comm="syz.4.1881" laddr=fe80::184f:bfff:fec6:af10 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 559.485545][ T29] audit: type=1400 audit(2000000160.660:683): avc: denied { read } for pid=13954 comm="syz.4.1881" laddr=fe80::184f:bfff:fec6:af10 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 562.814764][T14026] block nbd3: Device being setup by another task [ 562.943435][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.950114][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.112841][T14028] block nbd3: shutting down sockets [ 563.366974][T14033] batadv_slave_0: entered promiscuous mode [ 569.601168][ T5855] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 569.801227][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 570.167115][ T5855] usb 3-1: unable to get BOS descriptor or descriptor too short [ 570.194677][ T5855] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 570.202698][ T5855] usb 3-1: can't read configurations, error -71 [ 571.062799][T14110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.134394][ T29] audit: type=1400 audit(2000000172.870:684): avc: denied { bind } for pid=14111 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 571.197898][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.286559][T14120] batadv_slave_0: entered promiscuous mode [ 571.377740][ T29] audit: type=1400 audit(2000000173.100:685): avc: denied { read } for pid=14123 comm="syz.4.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.721376][T14163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.761996][T14163] batadv_slave_0: entered promiscuous mode [ 575.913442][T14177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 577.285122][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 577.687250][ T29] audit: type=1400 audit(2000000179.420:686): avc: denied { read } for pid=14191 comm="syz.3.1934" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 577.788998][ T29] audit: type=1800 audit(2000000179.450:687): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1934" name="/" dev="9p" ino=2 res=0 errno=0 [ 577.850653][ T29] audit: type=1400 audit(2000000179.580:688): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 579.217549][T14204] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[14204] [ 582.185544][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 582.192295][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 582.671471][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 582.921469][T14290] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 585.535141][T14322] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 586.886867][T14331] macsec1: entered promiscuous mode [ 586.906677][T14331] macsec1: entered allmulticast mode [ 586.912521][T14331] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 586.928646][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 586.955232][T14335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1962'. [ 586.987829][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 587.003100][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 594.055763][T14417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.304587][ T29] audit: type=1400 audit(2000000195.990:689): avc: denied { write } for pid=14422 comm="syz.1.1991" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=55038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 594.361055][ T5912] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 594.389462][T14426] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 594.401407][T14426] team0: Port device virt_wifi0 added [ 594.601072][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 595.628815][ T5912] usb 3-1: config 0 has an invalid interface number: 199 but max is 0 [ 595.650997][ T5912] usb 3-1: config 0 has no interface number 0 [ 595.805489][ T5912] usb 3-1: config 0 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.816946][ T5912] usb 3-1: config 0 interface 199 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 595.832568][ T5912] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=15.3d [ 595.851130][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.860613][ T5912] usb 3-1: Product: syz [ 595.868872][ T5912] usb 3-1: Manufacturer: syz [ 595.873663][ T5912] usb 3-1: SerialNumber: syz [ 595.883478][ T5912] usb 3-1: config 0 descriptor?? [ 595.889408][T14417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 596.596600][ T5912] usbhid 3-1:0.199: couldn't find an input interrupt endpoint [ 596.596910][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1997'. [ 597.412641][ T5814] usb 3-1: USB disconnect, device number 26 [ 598.029681][T14458] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 598.580830][T12309] libceph: connect (1)[c::]:6789 error -101 [ 598.695964][T12309] libceph: mon0 (1)[c::]:6789 connect error [ 598.936524][ T29] audit: type=1400 audit(2000000200.420:690): avc: denied { getopt } for pid=14473 comm="syz.2.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 599.010195][T14469] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 599.056168][T14469] kvm: pic: non byte read [ 599.068885][T14469] kvm: pic: level sensitive irq not supported [ 599.068936][T14469] kvm: pic: non byte read [ 599.363262][T12309] libceph: connect (1)[c::]:6789 error -101 [ 599.832581][T14468] ceph: No mds server is up or the cluster is laggy [ 599.857148][T12309] libceph: mon0 (1)[c::]:6789 connect error [ 601.382832][T12309] libceph: connect (1)[c::]:6789 error -101 [ 601.388919][T12309] libceph: mon0 (1)[c::]:6789 connect error [ 602.404525][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 602.410598][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 602.471167][T14495] ubi: mtd0 is already attached to ubi0 [ 603.577044][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 603.605958][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 603.671508][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 603.677662][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 604.921459][ T5855] IPVS: starting estimator thread 0... [ 605.151093][T14516] IPVS: using max 27 ests per chain, 64800 per kthread [ 605.602832][T14506] xt_socket: unknown flags 0x50 [ 606.937736][T14525] hfs: unable to load iocharset "io#harset" [ 607.898478][T14543] bridge0: port 1(erspan0) entered disabled state [ 608.048745][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 608.057916][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 608.217291][T14548] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 608.231316][T14548] nbd: error processing sock list [ 609.896390][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 609.903201][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 611.641125][ T5814] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 611.871269][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 612.503522][ T5814] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 612.505607][T14596] xt_TCPMSS: Only works on TCP SYN packets [ 612.553264][ T5814] usb 3-1: config 0 has no interface number 0 [ 612.654084][ T5814] usb 3-1: config 0 interface 254 has no altsetting 0 [ 612.663762][ T5814] usb 3-1: New USB device found, idVendor=9710, idProduct=7820, bcdDevice=52.18 [ 612.673110][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.691730][ T5814] usb 3-1: Product: syz [ 612.695970][ T5814] usb 3-1: Manufacturer: syz [ 612.700638][ T5814] usb 3-1: SerialNumber: syz [ 612.710520][ T5814] usb 3-1: config 0 descriptor?? [ 613.011965][ T5814] mos7840 3-1:0.254: required endpoints missing [ 613.023531][ T5814] usb 3-1: USB disconnect, device number 27 [ 620.336797][T14644] kvm: kvm [14643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa57c [ 620.398514][T14644] kvm: kvm [14643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc704 [ 620.430515][T14644] kvm: kvm [14643]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x5788 [ 620.561345][T14644] kvm: kvm [14643]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 622.377197][T14675] x_tables: ip_tables: ah match: only valid for protocol 51 [ 624.396175][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.402930][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.634670][T14724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 629.825396][T14779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2075'. [ 631.056034][T14786] block device autoloading is deprecated and will be removed. [ 631.065793][T14786] syz.0.2080: attempt to access beyond end of device [ 631.065793][T14786] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 631.099548][T14786] syz.0.2080: attempt to access beyond end of device [ 631.099548][T14786] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 631.301230][T14789] geneve2: entered promiscuous mode [ 631.306484][T14789] geneve2: entered allmulticast mode [ 631.722613][T14798] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 631.756371][T14799] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2083'. [ 631.765457][T14799] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2083'. [ 631.774651][T14799] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2083'. [ 631.811507][T14798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 631.946568][T14798] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2084'. [ 636.375333][ T29] audit: type=1400 audit(2000000238.090:691): avc: denied { setattr } for pid=14822 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 637.599605][T14823] veth1_macvtap: left promiscuous mode [ 637.798827][T14882] capability: warning: `syz.1.2094' uses 32-bit capabilities (legacy support in use) [ 638.012264][T14887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.026457][T14887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.035459][T14887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.045382][T14887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.061266][T14887] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 638.068653][T14887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 638.087199][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.111814][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.120600][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.129232][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.749717][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 638.763249][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 638.798807][ T29] audit: type=1400 audit(2000000240.530:692): avc: denied { mounton } for pid=14868 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 640.454455][T14906] tipc: Started in network mode [ 640.459600][T14906] tipc: Node identity 7, cluster identity 4711 [ 640.466801][T14906] tipc: Node number set to 7 [ 640.740488][T14868] chnl_net:caif_netlink_parms(): no params data found [ 640.861542][ T5819] Bluetooth: hci4: command tx timeout [ 640.886475][T14868] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.899315][T14868] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.931360][T14868] bridge_slave_0: entered allmulticast mode [ 640.938260][T14868] bridge_slave_0: entered promiscuous mode [ 641.060250][T14868] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.092656][T14868] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.113873][T14868] bridge_slave_1: entered allmulticast mode [ 641.221130][T14868] bridge_slave_1: entered promiscuous mode [ 641.878373][T14868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.927251][T14868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.891781][T14932] bond0: (slave wlan1): Releasing backup interface [ 642.945926][ T5819] Bluetooth: hci4: command tx timeout [ 642.968851][T14868] team0: Port device team_slave_0 added [ 643.776770][T14868] team0: Port device team_slave_1 added [ 643.936377][T14868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.958966][T14868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.994066][T14868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.014336][T14868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.024379][T14868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.069252][T14868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.874688][T14868] hsr_slave_0: entered promiscuous mode [ 644.941964][T14868] hsr_slave_1: entered promiscuous mode [ 645.023239][ T5819] Bluetooth: hci4: command tx timeout [ 645.023652][T14868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.049836][T14868] Cannot create hsr debugfs directory [ 645.248048][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2116'. [ 645.361799][T14967] delete_channel: no stack [ 645.386565][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'. [ 646.046545][T14868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 646.088470][T14971] tipc: Enabled bearer , priority 0 [ 646.111427][T14868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 646.381950][T14868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 646.392115][T14868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 647.366057][ T5819] Bluetooth: hci4: command tx timeout [ 647.372021][ T5915] tipc: Node number set to 340002790 [ 648.556444][T14868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.642433][T14868] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.770576][T14987] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.104888][ T29] audit: type=1400 audit(2000000250.840:693): avc: denied { ioctl } for pid=14993 comm="syz.3.2127" path="socket:[36855]" dev="sockfs" ino=36855 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 649.772928][T14987] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.112950][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.120082][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.151182][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.158342][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.527207][T14987] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.849256][T14987] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.986497][T14987] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.011135][T14987] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.110451][T14987] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.144616][T14987] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.336384][T14868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.307369][T14987] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.351161][T14987] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.527146][T14987] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.619925][ T29] audit: type=1400 audit(2000000254.340:694): avc: denied { recv } for pid=15028 comm="syz.3.2134" saddr=10.128.0.169 src=48768 daddr=10.128.10.19 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 652.659556][T14987] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.856436][T14987] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.905782][T14987] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.964764][T15036] netlink: 'syz.2.2135': attribute type 4 has an invalid length. [ 652.976675][T15036] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2135'. [ 652.999215][T14987] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.010237][T14987] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.137425][T14868] veth0_vlan: entered promiscuous mode [ 653.154986][T14868] veth1_vlan: entered promiscuous mode [ 653.247674][ T29] audit: type=1400 audit(2000000254.980:695): avc: denied { nlmsg_read } for pid=15039 comm="syz.3.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 653.252786][T14868] veth0_macvtap: entered promiscuous mode [ 653.375996][T14868] veth1_macvtap: entered promiscuous mode [ 653.454409][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.576788][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.593887][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.477515][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.643963][T14868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.657510][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.668405][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.689521][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.471292][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.801152][T14868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.811727][T14868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.822999][T14868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.033003][T14868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.075225][T14868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.130976][T14868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.167637][T14868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.521209][T14031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.563130][T14031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.647523][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.672364][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.710553][ T29] audit: type=1400 audit(2000000258.440:696): avc: denied { mounton } for pid=14868 comm="syz-executor" path="/root/syzkaller.QE3xoe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 656.810531][ T29] audit: type=1400 audit(2000000258.450:697): avc: denied { mounton } for pid=14868 comm="syz-executor" path="/root/syzkaller.QE3xoe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 656.873429][ T29] audit: type=1400 audit(2000000258.500:698): avc: denied { mounton } for pid=14868 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 656.928762][T15069] TCP: out of memory -- consider tuning tcp_mem [ 657.559659][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2146'. [ 657.704802][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 663.235525][T15133] vivid-007: disconnect [ 663.549860][T15124] vivid-007: reconnect [ 664.551800][T15140] veth0_to_team: entered promiscuous mode [ 664.557819][T15140] veth0_to_team: entered allmulticast mode [ 668.159673][T15161] tmpfs: Bad value for 'mpol' [ 670.051871][T15177] ceph: No mds server is up or the cluster is laggy [ 670.368029][ T9] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 670.482355][ T29] audit: type=1400 audit(2000000272.220:699): avc: denied { write } for pid=15196 comm="syz.3.2179" name="vlan0" dev="proc" ino=4026533778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 670.600500][T15200] netlink: 'syz.3.2179': attribute type 3 has an invalid length. [ 670.608576][T15200] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2179'. [ 675.294776][T15231] kvm: kvm [15230]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 675.341585][T15231] kvm: kvm [15230]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 675.368915][T15231] kvm: kvm [15230]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 675.418606][T15231] kvm: kvm [15230]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 675.485796][T15246] xt_CT: No such helper "snmp_trap" [ 675.596729][T15252] overlayfs: failed to clone upperpath [ 676.489290][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 677.067301][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 677.079593][ T5912] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 677.101600][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.118307][ T5912] usb 4-1: Product: syz [ 677.124694][ T5912] usb 4-1: Manufacturer: syz [ 677.129452][ T5912] usb 4-1: SerialNumber: syz [ 677.142905][ T5912] usb 4-1: config 0 descriptor?? [ 677.361302][ T5912] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 678.594648][ T29] audit: type=1326 audit(2000000280.290:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 678.644851][T15287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15287 comm=syz.4.2204 [ 678.655860][ T29] audit: type=1326 audit(2000000280.290:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 678.794587][T15293] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[15293] [ 679.512993][ T5912] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 679.591266][ T5912] usb 4-1: USB disconnect, device number 20 [ 679.611106][ T29] audit: type=1326 audit(2000000280.290:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.209972][ T29] audit: type=1326 audit(2000000280.290:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.274639][ T29] audit: type=1326 audit(2000000280.290:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.316051][ T29] audit: type=1326 audit(2000000280.290:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.359701][ T29] audit: type=1326 audit(2000000280.290:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.384220][ T29] audit: type=1326 audit(2000000280.290:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.447659][T15307] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 680.811326][ T29] audit: type=1326 audit(2000000280.320:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 680.919744][T15314] syz.3.2212: attempt to access beyond end of device [ 680.919744][T15314] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 680.967092][T15314] syz.3.2212: attempt to access beyond end of device [ 680.967092][T15314] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 680.994590][ T29] audit: type=1326 audit(2000000280.320:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15285 comm="syz.2.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 681.330688][ T6529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.348065][ T6529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.534912][ T6529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.551058][ T6529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.254254][ T6529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.298161][ T6529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.650426][ T6529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.827767][T14887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.840706][T14887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.850900][T14887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.861616][T14887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.878583][T14887] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 683.887410][T14887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 684.223663][ T6529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.827282][ T6529] bridge_slave_1: left allmulticast mode [ 684.972528][ T6529] bridge_slave_1: left promiscuous mode [ 684.983798][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.013548][ T6529] bridge_slave_0: left allmulticast mode [ 685.019263][ T6529] bridge_slave_0: left promiscuous mode [ 685.031130][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.844313][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.871024][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.274021][T14887] Bluetooth: hci2: command tx timeout [ 687.661141][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 687.670427][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 688.391349][T14887] Bluetooth: hci2: command tx timeout [ 688.690172][T12309] libceph: connect (1)[c::]:6789 error -22 [ 688.705245][T12309] libceph: mon0 (1)[c::]:6789 connect error [ 688.711279][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 688.711356][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 689.751113][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 689.759737][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 689.791499][T15388] ceph: No mds server is up or the cluster is laggy [ 689.798571][T12309] libceph: connect (1)[c::]:6789 error -22 [ 689.833199][T12309] libceph: mon0 (1)[c::]:6789 connect error [ 690.479286][T14887] Bluetooth: hci2: command tx timeout [ 692.804275][T14887] Bluetooth: hci2: command tx timeout [ 694.506515][T15437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.141323][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.813467][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.957196][ T6529] bond0 (unregistering): Released all slaves [ 697.316578][ T6529] tipc: Disabling bearer [ 697.336398][ T6529] tipc: Left network mode [ 700.266583][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.273925][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.550803][T15474] tipc: Resetting bearer [ 701.210528][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.338058][T15474] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.359612][T15474] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.368618][T15474] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.392629][T15474] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.505084][T15474] bond2: left allmulticast mode [ 701.510060][T15474] bridge1: left allmulticast mode [ 701.515634][T15474] bond2: left promiscuous mode [ 701.520479][T15474] bridge1: left promiscuous mode [ 701.709944][T15345] chnl_net:caif_netlink_parms(): no params data found [ 704.859899][T15345] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.888855][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.900843][T15345] bridge_slave_0: entered allmulticast mode [ 705.152956][T15345] bridge_slave_0: entered promiscuous mode [ 705.179171][ T6529] hsr_slave_0: left promiscuous mode [ 705.196146][ T6529] hsr_slave_1: left promiscuous mode [ 706.814307][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.836218][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 706.836234][ T29] audit: type=1400 audit(2000000308.570:731): avc: denied { getopt } for pid=15531 comm="syz.2.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 706.842443][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.009678][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.967501][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.315253][ T29] audit: type=1400 audit(2000000309.390:732): avc: denied { write } for pid=15537 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 708.539889][ T6529] veth1_macvtap: left promiscuous mode [ 708.551325][ T6529] veth0_macvtap: left promiscuous mode [ 708.559449][ T6529] veth1_vlan: left promiscuous mode [ 708.595852][ T6529] veth0_vlan: left promiscuous mode [ 715.017156][T15594] random: crng reseeded on system resumption [ 717.815965][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 717.872257][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 718.304366][ T5895] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 718.452962][ T5895] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 722.685579][T15650] Invalid ELF header type: 0 != 1 [ 722.797281][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2298'. [ 722.806988][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 723.846872][T15345] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.855656][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.871432][T15345] bridge_slave_1: entered allmulticast mode [ 723.891571][T15345] bridge_slave_1: entered promiscuous mode [ 724.244555][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.687305][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.845766][T15680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2305'. [ 725.427105][T15345] team0: Port device team_slave_0 added [ 725.443126][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 725.527699][T15345] team0: Port device team_slave_1 added [ 725.644518][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.664108][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.826271][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.466857][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.474926][ T6529] IPVS: stop unused estimator thread 0... [ 726.495203][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.582332][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.207857][ T29] audit: type=1400 audit(2000000329.630:733): avc: denied { write } for pid=15696 comm="syz.1.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 728.229704][T15699] netlink: 'syz.2.2311': attribute type 1 has an invalid length. [ 729.013758][T15345] hsr_slave_0: entered promiscuous mode [ 729.070106][T15345] hsr_slave_1: entered promiscuous mode [ 729.366707][T15710] macsec1: entered promiscuous mode [ 729.391123][T15710] team0: entered promiscuous mode [ 729.399201][T15710] team_slave_0: entered promiscuous mode [ 729.420882][T15710] team_slave_1: entered promiscuous mode [ 729.431736][T15710] macsec1: entered allmulticast mode [ 729.437246][T15710] team0: entered allmulticast mode [ 729.466663][T15710] team_slave_0: entered allmulticast mode [ 729.472928][T15710] team_slave_1: entered allmulticast mode [ 735.263118][T15758] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2328'. [ 735.272320][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2328'. [ 735.322614][T15758] xt_TPROXY: Can be used only with -p tcp or -p udp [ 735.441360][T15345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 735.501396][T15345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 735.550044][T15345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 735.610841][T15345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 735.935067][T15345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.974624][T15345] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.000121][T14743] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.007276][T14743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.055594][T15772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.069704][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.076849][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.558727][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.614947][T15345] veth0_vlan: entered promiscuous mode [ 736.624173][T15345] veth1_vlan: entered promiscuous mode [ 737.762414][T15345] veth0_macvtap: entered promiscuous mode [ 737.810554][T15345] veth1_macvtap: entered promiscuous mode [ 737.858421][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.937952][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.965060][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.997526][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.035036][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.105444][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.131401][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.141745][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.161219][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.801096][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.972826][T15345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.985606][T15345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.997620][T15345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.012872][T15345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.031428][T14265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.071184][T14265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.893114][ T6529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.935469][ T6529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.581388][ T29] audit: type=1400 audit(2000000343.520:734): avc: denied { wake_alarm } for pid=15841 comm="syz.3.2215" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.569774][T15854] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 744.582606][T15854] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 744.591701][T15854] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 746.777479][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2362'. [ 747.067819][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2362'. [ 747.270048][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.276499][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.576861][T15904] infiniband syz2: set down [ 749.581452][T15904] infiniband syz2: added team_slave_1 [ 749.589197][T15904] syz2: rxe_create_cq: returned err = -12 [ 749.595502][T15904] infiniband syz2: Couldn't create ib_mad CQ [ 749.601624][T15904] infiniband syz2: Couldn't open port 1 [ 749.708568][T15904] RDS/IB: syz2: added [ 749.712634][T15904] smc: adding ib device syz2 with port count 1 [ 749.718779][T15904] smc: ib device syz2 port 1 has pnetid [ 751.795921][T15939] netlink: 'syz.1.2381': attribute type 10 has an invalid length. [ 752.415836][T15939] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 752.472399][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 752.972122][T15941] bridge_slave_1: left allmulticast mode [ 753.011116][ T5855] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 753.019366][T15941] bridge_slave_1: left promiscuous mode [ 753.025625][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.074613][T15941] bridge_slave_0: left allmulticast mode [ 753.089072][T15941] bridge_slave_0: left promiscuous mode [ 753.196732][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.218499][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 753.228425][ T5855] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 753.246974][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.889964][ T5915] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 753.923056][ T5855] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 754.061939][ T5855] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 754.373362][ T5855] usb 4-1: Product: syz [ 754.375997][T15941] bond0: (slave bridge0): Releasing backup interface [ 754.381159][ T5855] usb 4-1: Manufacturer: syz [ 754.431076][ T5855] usb 4-1: SerialNumber: syz [ 754.452195][ T5855] usb 4-1: config 0 descriptor?? [ 754.487026][ T5855] ldusb 4-1:0.0: Interrupt in endpoint not found [ 754.629579][ T29] audit: type=1400 audit(2000000356.360:735): avc: denied { unmount } for pid=14868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 754.702298][ T5915] usb 4-1: USB disconnect, device number 21 [ 756.823509][T15973] tc_dump_action: action bad kind [ 756.854341][ T29] audit: type=1400 audit(2000000358.590:736): avc: denied { mount } for pid=15974 comm="syz.1.2390" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 757.006950][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 757.141358][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 759.786088][T16007] netlink: 'syz.3.2400': attribute type 10 has an invalid length. [ 760.245982][T16011] netlink: 'syz.4.2401': attribute type 3 has an invalid length. [ 760.359646][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 762.989670][ T29] audit: type=1400 audit(2000000364.720:737): avc: denied { mount } for pid=16037 comm="syz.1.2410" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 763.135053][T16046] syz.3.2412[16046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 763.135143][T16046] syz.3.2412[16046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 763.187707][T16046] syz.3.2412[16046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 763.364396][T16053] futex_wake_op: syz.2.2413 tries to shift op by -1; fix this program [ 763.390651][T16053] uprobe: syz.2.2413:16053 failed to unregister, leaking uprobe [ 763.569768][T16056] xt_cgroup: invalid path, errno=-2 [ 764.297422][ T29] audit: type=1326 audit(2000000366.030:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7fc00000 [ 764.701169][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 764.848726][T16072] overlayfs: failed to clone lowerpath [ 765.871068][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 765.895212][T16058] can0: slcan on ptm0. [ 768.132054][T16058] can0 (unregistered): slcan off ptm0. [ 769.650648][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2430'. [ 770.168265][ T29] audit: type=1400 audit(2000000371.530:739): avc: denied { view } for pid=16107 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 770.921695][ T29] audit: type=1400 audit(2000000372.650:740): avc: denied { ioctl } for pid=16129 comm="syz.4.2432" path="socket:[43177]" dev="sockfs" ino=43177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 771.029385][T16134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2432'. [ 773.853495][T16162] syz.5.2436: attempt to access beyond end of device [ 773.853495][T16162] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 773.870319][T16162] (syz.5.2436,16162,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 773.878573][T16162] (syz.5.2436,16162,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 773.886265][T16162] (syz.5.2436,16162,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 773.895296][T16162] (syz.5.2436,16162,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 774.438339][T16165] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 775.015491][T16170] binder: 16168:16170 ioctl 4018620d 0 returned -22 [ 778.661197][ T29] audit: type=1400 audit(2000000379.770:741): avc: denied { create } for pid=16200 comm="syz.2.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 782.465247][T16259] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 784.491350][ T29] audit: type=1400 audit(2000000386.070:742): avc: denied { ioctl } for pid=16281 comm="syz.5.2461" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 785.657987][ T29] audit: type=1400 audit(2000000387.390:743): avc: denied { mount } for pid=16296 comm="syz.3.2464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 785.921347][ T29] audit: type=1400 audit(2000000387.470:744): avc: denied { listen } for pid=16290 comm="syz.4.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 785.999253][T16304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 786.011001][T16304] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 786.635550][ T29] audit: type=1400 audit(2000000387.810:745): avc: denied { read } for pid=16296 comm="syz.3.2464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 786.657426][ T29] audit: type=1400 audit(2000000387.810:746): avc: denied { open } for pid=16296 comm="syz.3.2464" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 786.782627][ T29] audit: type=1400 audit(2000000387.820:747): avc: denied { search } for pid=16296 comm="syz.3.2464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 786.888605][ T29] audit: type=1400 audit(2000000387.820:748): avc: denied { getattr } for pid=16296 comm="syz.3.2464" name="saved_tgids" dev="tracefs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 786.940207][T15817] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 787.065038][ T29] audit: type=1400 audit(2000000388.340:749): avc: denied { unmount } for pid=15345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 787.111032][T15817] usb 6-1: Using ep0 maxpacket: 8 [ 787.152519][T15817] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 787.175481][ T29] audit: type=1400 audit(2000000388.440:750): avc: denied { name_connect } for pid=16299 comm="syz.1.2465" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 787.201977][T15817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.235958][T15817] usb 6-1: Product: syz [ 787.240169][T15817] usb 6-1: Manufacturer: syz [ 788.481476][T15817] usb 6-1: SerialNumber: syz [ 788.781205][T15817] usb 6-1: config 0 descriptor?? [ 789.021466][T15817] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 790.548603][ T29] audit: type=1400 audit(2000000392.280:751): avc: denied { name_bind } for pid=16340 comm="syz.1.2474" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 790.789254][ T29] audit: type=1400 audit(2000000392.520:752): avc: denied { getopt } for pid=16348 comm="syz.3.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 792.113642][T15817] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 792.462924][ T5912] usb 6-1: USB disconnect, device number 2 [ 793.732597][T16357] openvswitch: netlink: IP tunnel dst address not specified [ 793.950889][T16392] ceph: No mds server is up or the cluster is laggy [ 795.096106][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 795.276417][ T5819] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 796.859087][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 799.932421][ T5863] libceph: connect (1)[c::]:6789 error -22 [ 799.951110][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 800.003358][T16467] ceph: No mds server is up or the cluster is laggy [ 800.221386][ T5863] libceph: connect (1)[c::]:6789 error -22 [ 800.227371][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 801.514041][T16512] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 806.811237][ T5863] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 807.031291][ T5863] usb 6-1: device descriptor read/64, error -71 [ 807.345884][ T5863] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 808.029407][ T5863] usb 6-1: device descriptor read/64, error -71 [ 808.772932][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.779243][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.788673][ T5863] usb usb6-port1: attempt power cycle [ 815.048869][ T29] audit: type=1400 audit(2000000416.770:753): avc: denied { search } for pid=16601 comm="syz.5.2529" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 819.095921][ T29] audit: type=1400 audit(2000000420.820:754): avc: denied { mount } for pid=16652 comm="syz.4.2544" name="/" dev="hugetlbfs" ino=42940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 819.160643][T16649] netlink: 'syz.5.2540': attribute type 4 has an invalid length. [ 819.631005][ T29] audit: type=1400 audit(2000000421.250:755): avc: denied { bind } for pid=16647 comm="syz.5.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 819.883366][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2547'. [ 819.914938][ T5863] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 820.131061][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 820.410625][T16677] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 820.436736][ T29] audit: type=1400 audit(2000000422.110:756): avc: denied { read } for pid=16668 comm="syz.3.2545" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 820.468939][ T29] audit: type=1400 audit(2000000422.110:757): avc: denied { open } for pid=16668 comm="syz.3.2545" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 821.575575][ T5863] usb 6-1: unable to read config index 0 descriptor/all [ 821.595393][ T5863] usb 6-1: can't read configurations, error -71 [ 821.660660][T16683] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.669757][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.710208][T16683] bridge0: entered allmulticast mode [ 821.736757][T16686] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2553'. [ 821.751520][T16687] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.758674][T16687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.766150][T16687] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.773243][T16687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.782170][T16687] bridge0: entered promiscuous mode [ 821.944056][ T29] audit: type=1400 audit(2000000423.680:758): avc: denied { ioctl } for pid=16682 comm="syz.3.2552" path="socket:[42989]" dev="sockfs" ino=42989 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 822.032411][T16694] bond0: (slave batadv0): Releasing backup interface [ 822.042380][T16694] bond0: (slave bond_slave_0): Releasing backup interface [ 822.064539][T16694] bond0: (slave bond_slave_1): Releasing backup interface [ 822.105348][T16694] team_slave_0: left promiscuous mode [ 822.110825][T16694] team_slave_0: left allmulticast mode [ 822.144141][T16694] team0: Port device team_slave_0 removed [ 822.164004][T16694] team_slave_1: left promiscuous mode [ 822.175213][T16694] team_slave_1: left allmulticast mode [ 822.192738][T16694] team0: Port device team_slave_1 removed [ 822.200258][T16694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.214236][T16694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.348003][T16694] bond1: (slave ip6erspan0): Releasing active interface [ 822.358243][T16694] bond2: (slave bridge1): Releasing active interface [ 822.383296][T16695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.107850][T16695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.134935][T16695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.147956][T16695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.157604][T16695] geneve2: entered promiscuous mode [ 823.163154][T16695] geneve2: entered allmulticast mode [ 823.190261][T16695] batman_adv: batadv0: Adding interface: geneve2 [ 823.208394][T16695] batman_adv: batadv0: Interface activated: geneve2 [ 825.689931][T16718] Cannot find del_set index 136 as target [ 829.282281][T16749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2572'. [ 830.776735][ T29] audit: type=1400 audit(2000000432.510:759): avc: denied { ioctl } for pid=16762 comm="syz.1.2576" path="socket:[43923]" dev="sockfs" ino=43923 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 831.841802][ T29] audit: type=1326 audit(2000000433.560:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.2580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x0 [ 832.842657][T16772] : entered promiscuous mode [ 833.262161][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2585'. [ 834.150645][T16789] ceph: No mds server is up or the cluster is laggy [ 834.179536][ T29] audit: type=1400 audit(2000000435.910:761): avc: denied { accept } for pid=16803 comm="syz.3.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 835.211087][ T29] audit: type=1400 audit(2000000436.140:762): avc: denied { ioctl } for pid=16803 comm="syz.3.2589" path="socket:[45065]" dev="sockfs" ino=45065 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 842.275318][T16853] can0: slcan on ptm0. [ 842.431564][T16851] can0 (unregistered): slcan off ptm0. [ 844.348567][T16870] ceph: No mds server is up or the cluster is laggy [ 844.356195][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 844.374851][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 848.101622][T16916] 9pnet_virtio: no channels available for device syz [ 849.401452][T16922] sch_tbf: burst 4398 is lower than device lo mtu (1075109906) ! [ 850.613601][T16934] loop2: detected capacity change from 0 to 7 [ 850.658763][T16934] Dev loop2: unable to read RDB block 7 [ 850.666252][T16934] loop2: unable to read partition table [ 850.675527][T16934] loop2: partition table beyond EOD, truncated [ 850.682221][T16934] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 851.399535][T16947] openvswitch: netlink: Flow actions attr not present in new flow. [ 851.431141][ T29] audit: type=1400 audit(2000000453.150:763): avc: denied { setopt } for pid=16935 comm="syz.1.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 854.258227][ T29] audit: type=1400 audit(2000000455.990:764): avc: denied { watch } for pid=16970 comm="syz.1.2630" path="/550" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 855.016111][ T29] audit: type=1400 audit(2000000455.990:765): avc: denied { watch_sb } for pid=16970 comm="syz.1.2630" path="/550" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 855.098921][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'. [ 855.241243][ T29] audit: type=1400 audit(2000000456.940:766): avc: denied { map } for pid=16979 comm="syz.1.2634" path="socket:[45304]" dev="sockfs" ino=45304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 855.333198][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2636'. [ 855.343677][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2636'. [ 855.392975][ T29] audit: type=1400 audit(2000000457.130:767): avc: denied { map } for pid=16977 comm="syz.3.2632" path="/proc/212/net/route" dev="proc" ino=4026534453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 860.855131][ T29] audit: type=1400 audit(2000000462.540:768): avc: denied { getopt } for pid=17035 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 861.956774][T17045] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 865.148343][ T29] audit: type=1400 audit(2000000466.220:769): avc: denied { name_bind } for pid=17072 comm="syz.5.2659" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 867.482358][ T29] audit: type=1400 audit(2000000469.210:770): avc: denied { name_bind } for pid=17094 comm="syz.5.2664" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 867.593921][ T29] audit: type=1400 audit(2000000469.210:771): avc: denied { accept } for pid=17094 comm="syz.5.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 868.375623][T17107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 870.142869][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.149716][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.707226][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 872.101521][ T29] audit: type=1326 audit(2000000473.430:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 872.389673][ T5819] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 872.417131][ T29] audit: type=1326 audit(2000000473.430:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 872.608005][T17144] overlayfs: failed to resolve './file1': -2 [ 873.251156][ T29] audit: type=1326 audit(2000000473.430:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 873.277476][ T29] audit: type=1326 audit(2000000473.430:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 873.305072][ T29] audit: type=1326 audit(2000000473.440:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 873.328926][ T29] audit: type=1326 audit(2000000473.440:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 873.581290][ T29] audit: type=1326 audit(2000000473.440:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 874.589189][ T5895] IPVS: starting estimator thread 0... [ 874.604216][ T29] audit: type=1326 audit(2000000473.440:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 876.155442][ T29] audit: type=1326 audit(2000000473.440:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 876.181103][T17159] IPVS: using max 32 ests per chain, 76800 per kthread [ 876.254290][ T29] audit: type=1326 audit(2000000473.440:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 876.362494][T17172] siw: device registration error -23 [ 876.664447][ T29] audit: type=1326 audit(2000000473.440:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 876.931089][ T29] audit: type=1326 audit(2000000473.440:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.4.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de6385d29 code=0x7ffc0000 [ 877.518231][T17178] syz.1.2685[17178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.518591][T17178] syz.1.2685[17178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.530725][T17178] syz.1.2685[17178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.687806][T17192] TCP: out of memory -- consider tuning tcp_mem [ 881.323979][T17207] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.2693'. [ 881.364248][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 881.364285][ T29] audit: type=1400 audit(2000003043.046:796): avc: denied { create } for pid=17203 comm="syz.4.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 881.889778][ T29] audit: type=1400 audit(2000003043.056:797): avc: denied { bind } for pid=17203 comm="syz.4.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 882.042237][ T29] audit: type=1400 audit(2000003043.056:798): avc: denied { name_bind } for pid=17203 comm="syz.4.2693" src=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 882.900699][ T29] audit: type=1400 audit(2000003043.056:799): avc: denied { node_bind } for pid=17203 comm="syz.4.2693" saddr=6d66:7300:: src=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 883.130359][ T29] audit: type=1400 audit(2000003044.816:800): avc: denied { create } for pid=17212 comm="syz.4.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.644736][ T29] audit: type=1400 audit(2000003044.836:801): avc: denied { mount } for pid=17212 comm="syz.4.2695" name="/" dev="rpc_pipefs" ino=45639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 884.683101][ T29] audit: type=1400 audit(2000003045.837:802): avc: denied { create } for pid=17229 comm="syz.3.2697" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 884.812527][ T29] audit: type=1400 audit(2000003045.837:803): avc: denied { map } for pid=17229 comm="syz.3.2697" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 884.839638][ T29] audit: type=1400 audit(2000003045.837:804): avc: denied { read write } for pid=17229 comm="syz.3.2697" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 887.083982][T17258] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 887.091928][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 887.704550][T17263] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 887.712840][T17263] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 887.721995][T17263] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 887.729799][T17263] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 889.692429][ T29] audit: type=1326 audit(2000003051.017:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 890.134551][ T29] audit: type=1326 audit(2000003051.017:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 890.930668][ T29] audit: type=1326 audit(2000003051.117:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 890.954766][ T29] audit: type=1326 audit(2000003051.147:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 891.056144][ T29] audit: type=1326 audit(2000003051.147:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 891.175360][ T29] audit: type=1326 audit(2000003051.297:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17281 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb077b85e5 code=0x7ffc0000 [ 891.208031][ T29] audit: type=1326 audit(2000003051.297:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 891.934041][T17287] ipt_REJECT: TCP_RESET invalid for non-tcp [ 891.992534][ T29] audit: type=1326 audit(2000003051.297:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 892.022571][ T29] audit: type=1326 audit(2000003051.297:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 892.189758][ T29] audit: type=1326 audit(2000003051.397:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17281 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb07721f29 code=0x7ffc0000 [ 893.146076][T17306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.655134][T17335] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 897.670852][T17335] Error validating options; rc = [-22] [ 899.622581][T17359] ALSA: mixer_oss: invalid OSS volume '' [ 901.341221][T17368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 901.350523][T17368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 904.857951][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 904.857970][ T29] audit: type=1800 audit(2000003066.319:824): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2744" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 905.204052][T17399] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 905.213105][T17399] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 905.221837][T17399] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 905.711671][ T29] audit: type=1400 audit(2000003067.449:825): avc: denied { ioctl } for pid=17403 comm="syz.3.2747" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 906.904778][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 906.920636][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 908.033526][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 908.702921][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 908.737680][T17414] ceph: No mds server is up or the cluster is laggy [ 909.977922][ T5814] kernel read not supported for file /rfkill (pid: 5814 comm: kworker/0:3) [ 911.947046][ T29] audit: type=1400 audit(2000003073.660:826): avc: denied { cmd } for pid=17474 comm="syz.2.2767" path="socket:[44919]" dev="sockfs" ino=44919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 912.747922][T17485] /dev/nbd4: Can't lookup blockdev [ 915.130950][T17497] overlayfs: failed to clone upperpath [ 915.196929][ T29] audit: type=1400 audit(2000003076.860:827): avc: denied { watch_sb } for pid=17492 comm="syz.1.2772" path="/582/net_prio.prioidx" dev="tmpfs" ino=3149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 916.797606][ T29] audit: type=1400 audit(2000003078.521:828): avc: denied { unmount } for pid=15345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 917.182007][T17510] overlayfs: failed to clone upperpath [ 920.150441][ T29] audit: type=1400 audit(2000003081.891:829): avc: denied { setopt } for pid=17541 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 920.334925][ T29] audit: type=1400 audit(2000003081.911:830): avc: denied { bind } for pid=17541 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 920.839114][ T29] audit: type=1400 audit(2000003081.921:831): avc: denied { write } for pid=17541 comm="syz.5.2786" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 920.860938][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.888216][ T29] audit: type=1400 audit(2000003081.921:832): avc: denied { connect } for pid=17541 comm="syz.5.2786" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 920.910270][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.965789][ T29] audit: type=1400 audit(2000003081.941:833): avc: denied { read } for pid=17541 comm="syz.5.2786" path="socket:[46044]" dev="sockfs" ino=46044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 922.916164][ T29] audit: type=1326 audit(2000003084.391:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 923.025878][ T29] audit: type=1326 audit(2000003084.391:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 923.049263][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.161373][ T29] audit: type=1326 audit(2000003084.591:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 923.168733][T17573] bad cache= option: no%e [ 923.168733][T17573] [ 923.213591][ T29] audit: type=1326 audit(2000003084.591:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 923.238718][T17573] CIFS: VFS: bad cache= option: no%e [ 923.244730][ T29] audit: type=1326 audit(2000003084.591:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb07785d29 code=0x7ffc0000 [ 924.863370][T17586] netlink: 'syz.3.2799': attribute type 4 has an invalid length. [ 925.679546][T17595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 926.965273][ T5864] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 927.274441][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 927.290543][ T5864] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 927.313143][ T5864] usb 4-1: config 0 has no interface number 0 [ 927.357806][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 927.928600][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.015744][ T5864] usb 4-1: Product: syz [ 928.019944][ T5864] usb 4-1: Manufacturer: syz [ 928.063307][ T5864] usb 4-1: SerialNumber: syz [ 928.077411][ T5864] usb 4-1: config 0 descriptor?? [ 928.099452][ T5864] usb 4-1: can't set config #0, error -71 [ 928.120556][ T5864] usb 4-1: USB disconnect, device number 22 [ 928.296935][ T5814] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 928.521152][T17608] IPVS: ovf: UDP 0.0.0.0:0 - no destination available [ 928.580284][T17598] ceph: No mds server is up or the cluster is laggy [ 931.815107][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.821434][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.110006][T17661] IPVS: Unknown mcast interface: macvlan1 [ 933.132998][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 933.133034][ T29] audit: type=1400 audit(2000003094.833:842): avc: denied { write } for pid=17660 comm="syz.2.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 934.436754][ T29] audit: type=1400 audit(2000003096.183:843): avc: denied { ioctl } for pid=17672 comm="syz.4.2821" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47203 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 935.747233][T17697] xt_TCPMSS: Only works on TCP SYN packets [ 937.575664][ T29] audit: type=1400 audit(2000003099.003:844): avc: denied { read } for pid=17701 comm="syz.3.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 938.414408][ T29] audit: type=1800 audit(2000003099.543:845): pid=17710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2829" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 943.484339][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2839'. [ 949.703402][ T5895] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 950.002597][ T5895] usb 6-1: device descriptor read/64, error -71 [ 950.787513][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 951.031320][ T5895] usb 6-1: device descriptor read/64, error -71 [ 951.172645][ T5895] usb usb6-port1: attempt power cycle [ 951.403596][T14887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 951.419868][T14887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 951.428150][T14887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 951.436994][T14887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 951.450407][T14887] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 951.457726][T14887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.542324][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 951.583852][ T5895] usb 6-1: device descriptor read/8, error -71 [ 951.835169][ T5895] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 951.872780][ T5895] usb 6-1: device descriptor read/8, error -71 [ 951.925461][T17850] batman_adv: batadv0: Adding interface: vxlan0 [ 951.938163][T17850] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.963867][T17850] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 951.993139][ T5895] usb usb6-port1: unable to enumerate USB device [ 952.357200][T17843] chnl_net:caif_netlink_parms(): no params data found [ 952.391064][T17863] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 952.401402][T17862] IPVS: stopping master sync thread 17863 ... [ 953.106411][T17871] netlink: 'syz.3.2858': attribute type 4 has an invalid length. [ 953.276938][T17843] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.284371][T17843] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.356276][T17843] bridge_slave_0: entered allmulticast mode [ 953.432431][T17843] bridge_slave_0: entered promiscuous mode [ 953.494429][T14887] Bluetooth: hci1: command tx timeout [ 953.536662][T17843] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.737950][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.779624][T17843] bridge_slave_1: entered allmulticast mode [ 953.895897][T17843] bridge_slave_1: entered promiscuous mode [ 954.563638][T17843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.593309][T17843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.651413][T17843] team0: Port device team_slave_0 added [ 954.688612][T17843] team0: Port device team_slave_1 added [ 954.851389][T17843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.882633][T17843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.908598][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.021968][T17843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.657580][T14887] Bluetooth: hci1: command tx timeout [ 955.711078][T17843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.735639][T17843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.761593][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.780759][T17843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.926295][T17843] hsr_slave_0: entered promiscuous mode [ 955.946347][T17843] hsr_slave_1: entered promiscuous mode [ 955.972463][T17843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.989056][T17843] Cannot create hsr debugfs directory [ 956.003495][T17894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 956.064158][T17894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.074333][ T29] audit: type=1400 audit(2000003117.795:846): avc: denied { connect } for pid=17899 comm="syz.1.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 956.128706][ T29] audit: type=1400 audit(2000003117.795:847): avc: denied { write } for pid=17899 comm="syz.1.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 957.434912][T17843] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 957.766004][T14887] Bluetooth: hci1: command tx timeout [ 958.025912][T17843] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 958.085587][T17843] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 958.274464][T17843] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 959.152494][T17843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.220825][T17843] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.289574][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.296727][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.394640][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.401796][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.813361][T14887] Bluetooth: hci1: command tx timeout [ 960.043519][T17929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 960.515006][T17843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 960.551845][T17843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 960.754064][T17936] wg1: entered promiscuous mode [ 960.796087][ T29] audit: type=1400 audit(2000003122.536:848): avc: denied { execute } for pid=17937 comm="syz.5.2876" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 960.820048][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.099698][T17843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.393165][T17957] netlink: 'syz.5.2878': attribute type 1 has an invalid length. [ 962.487434][T17957] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 962.506670][T17843] veth0_vlan: entered promiscuous mode [ 962.588732][T17843] veth1_vlan: entered promiscuous mode [ 962.631979][T17957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.646185][T17821] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 962.677230][T17957] vlan2: entered promiscuous mode [ 962.684195][T17957] bond1: entered promiscuous mode [ 962.689317][T17957] ip6gretap1: entered promiscuous mode [ 962.730067][T17957] bond1: left promiscuous mode [ 962.735822][T17957] ip6gretap1: left promiscuous mode [ 963.723174][T17821] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 963.740007][T17843] veth0_macvtap: entered promiscuous mode [ 963.888927][T17843] veth1_macvtap: entered promiscuous mode [ 964.283625][T17843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.331518][T17843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.415332][T17843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.428852][T17843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.438981][T17843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.449643][T17843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.460691][T17843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.496910][T17843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.507515][T17843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.517563][T17843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.528175][T17843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.544517][ T29] audit: type=1400 audit(2000003126.286:849): avc: denied { execheap } for pid=17971 comm="syz.5.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 964.544539][T17843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.104734][T17843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.121371][T17843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.953095][T17843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.967104][T17843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.976152][T17843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.985317][T17843] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.589133][T17977] block nbd3: NBD_DISCONNECT [ 968.037432][T14887] block nbd3: Receive control failed (result -32) [ 968.049282][T17977] block nbd3: Send disconnect failed -32 [ 968.058922][T17977] block nbd3: shutting down sockets [ 969.094155][T14265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.111427][T14265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.147311][T14265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.159805][T14265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.165908][T18006] netlink: 'syz.5.2889': attribute type 3 has an invalid length. [ 969.171464][T18008] netlink: 'syz.3.2891': attribute type 1 has an invalid length. [ 969.293103][T18008] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 969.438543][T18008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 969.441507][T14265] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 969.589493][T14887] Bluetooth: hci2: command 0x0406 tx timeout [ 970.232886][T18008] vlan2: entered promiscuous mode [ 970.238561][T18008] bond1: entered promiscuous mode [ 970.407332][T18008] ip6gretap1: entered promiscuous mode [ 970.468472][T18008] bond1: left promiscuous mode [ 970.485743][T18008] ip6gretap1: left promiscuous mode [ 970.494948][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2893'. [ 970.683893][ T5977] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 971.393196][T18017] bridge0: entered promiscuous mode [ 971.399022][T18017] macvlan2: entered promiscuous mode [ 971.652034][T18028] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=18028 comm=syz.3.2895 [ 971.727290][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 972.821138][T14887] Bluetooth: hci5: command 0xfc11 tx timeout [ 972.830925][ T5819] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 973.137836][ T29] audit: type=1400 audit(2000003134.877:850): avc: denied { watch_mount } for pid=18034 comm="syz.6.2897" path="/1" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 974.705967][T18050] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2901'. [ 975.292663][T18052] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 976.305966][T18067] infiniband syz0: set down [ 976.320053][T18067] infiniband syz0: added ipvlan1 [ 976.502279][T18067] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 976.508014][T18067] infiniband syz0: Couldn't open port 1 [ 976.576858][T18067] RDS/IB: syz0: added [ 976.580954][T18067] smc: adding ib device syz0 with port count 1 [ 976.587111][T18067] smc: ib device syz0 port 1 has pnetid [ 978.379780][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 978.726429][ T9] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 978.737145][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.755314][ T9] usb 7-1: config 0 descriptor?? [ 979.705029][ T29] audit: type=1400 audit(2000003141.448:851): avc: denied { setopt } for pid=18074 comm="syz.6.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 980.303420][T18098] overlayfs: failed to resolve './file0': -2 [ 980.383524][ T9] usb 7-1: Cannot read MAC address [ 980.389684][ T9] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 980.489929][ T29] audit: type=1400 audit(2000003142.228:852): avc: denied { getattr } for pid=18101 comm="syz.5.2914" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 980.616815][T18102] geneve2: entered promiscuous mode [ 980.629029][T18102] geneve2: entered allmulticast mode [ 980.703123][ T5865] usb 7-1: USB disconnect, device number 2 [ 981.766606][T12309] IPVS: starting estimator thread 0... [ 981.785121][T18108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2917'. [ 981.869204][T18116] IPVS: using max 31 ests per chain, 74400 per kthread [ 983.668792][T18141] [ 983.671149][T18141] ====================================================== [ 983.678157][T18141] WARNING: possible circular locking dependency detected [ 983.685183][T18141] 6.13.0-syzkaller #0 Not tainted [ 983.690197][T18141] ------------------------------------------------------ [ 983.697204][T18141] syz.6.2924/18141 is trying to acquire lock: [ 983.703262][T18141] ffff88807cbf8ba0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 983.712163][T18141] [ 983.712163][T18141] but task is already holding lock: [ 983.719519][T18141] ffff888142f5a670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 983.728843][T18141] [ 983.728843][T18141] which lock already depends on the new lock. [ 983.728843][T18141] [ 983.739239][T18141] [ 983.739239][T18141] the existing dependency chain (in reverse order) is: [ 983.748249][T18141] [ 983.748249][T18141] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 983.756077][T18141] __mutex_lock+0x19b/0xa60 [ 983.761111][T18141] blk_mq_init_sched+0x42b/0x640 [ 983.766584][T18141] elevator_init_mq+0x2cd/0x420 [ 983.771962][T18141] add_disk_fwnode+0x113/0x1300 [ 983.777342][T18141] sd_probe+0xa86/0x1000 [ 983.782122][T18141] really_probe+0x23e/0xa90 [ 983.787154][T18141] __driver_probe_device+0x1de/0x440 [ 983.792962][T18141] driver_probe_device+0x4c/0x1b0 [ 983.798512][T18141] __device_attach_driver+0x1df/0x310 [ 983.804409][T18141] bus_for_each_drv+0x157/0x1e0 [ 983.809787][T18141] __device_attach_async_helper+0x1d3/0x290 [ 983.816206][T18141] async_run_entry_fn+0x9c/0x530 [ 983.821678][T18141] process_one_work+0x9c5/0x1ba0 [ 983.827143][T18141] worker_thread+0x6c8/0xf00 [ 983.832253][T18141] kthread+0x2c1/0x3a0 [ 983.836844][T18141] ret_from_fork+0x45/0x80 [ 983.841769][T18141] ret_from_fork_asm+0x1a/0x30 [ 983.847053][T18141] [ 983.847053][T18141] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 983.855916][T18141] blk_queue_enter+0x50f/0x640 [ 983.861206][T18141] blk_mq_alloc_request+0x59b/0x950 [ 983.866920][T18141] scsi_execute_cmd+0x1da/0xf40 [ 983.872284][T18141] read_capacity_16+0x213/0xe10 [ 983.877652][T18141] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 983.883975][T18141] sd_probe+0x904/0x1000 [ 983.888747][T18141] really_probe+0x23e/0xa90 [ 983.893760][T18141] __driver_probe_device+0x1de/0x440 [ 983.899552][T18141] driver_probe_device+0x4c/0x1b0 [ 983.905087][T18141] __device_attach_driver+0x1df/0x310 [ 983.910969][T18141] bus_for_each_drv+0x157/0x1e0 [ 983.916325][T18141] __device_attach_async_helper+0x1d3/0x290 [ 983.922739][T18141] async_run_entry_fn+0x9c/0x530 [ 983.928200][T18141] process_one_work+0x9c5/0x1ba0 [ 983.933655][T18141] worker_thread+0x6c8/0xf00 [ 983.938759][T18141] kthread+0x2c1/0x3a0 [ 983.943346][T18141] ret_from_fork+0x45/0x80 [ 983.948275][T18141] ret_from_fork_asm+0x1a/0x30 [ 983.953555][T18141] [ 983.953555][T18141] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 983.961189][T18141] __mutex_lock+0x19b/0xa60 [ 983.966207][T18141] __nbd_set_size+0x2c0/0x730 [ 983.971403][T18141] nbd_start_device+0x8fd/0xd70 [ 983.976763][T18141] nbd_ioctl+0x21a/0xfd0 [ 983.981518][T18141] blkdev_ioctl+0x276/0x6d0 [ 983.986539][T18141] __x64_sys_ioctl+0x190/0x200 [ 983.991818][T18141] do_syscall_64+0xcd/0x250 [ 983.996835][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.003253][T18141] [ 984.003253][T18141] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 984.011851][T18141] blk_mq_submit_bio+0x1fb6/0x24c0 [ 984.017480][T18141] __submit_bio+0x384/0x540 [ 984.022498][T18141] submit_bio_noacct_nocheck+0x698/0xd70 [ 984.028653][T18141] submit_bio_noacct+0x93a/0x1e20 [ 984.034191][T18141] block_read_full_folio+0x812/0xa50 [ 984.039998][T18141] filemap_read_folio+0xc6/0x2a0 [ 984.045461][T18141] filemap_get_pages+0x155f/0x1be0 [ 984.051100][T18141] filemap_read+0x3ca/0xd70 [ 984.056131][T18141] blkdev_read_iter+0x187/0x480 [ 984.061497][T18141] vfs_read+0x87f/0xbe0 [ 984.066163][T18141] ksys_read+0x12b/0x250 [ 984.070916][T18141] do_syscall_64+0xcd/0x250 [ 984.075941][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.082395][T18141] [ 984.082395][T18141] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 984.090908][T18141] down_read+0x9a/0x330 [ 984.095586][T18141] filemap_fault+0x62c/0x2820 [ 984.100777][T18141] __do_fault+0x10a/0x490 [ 984.105654][T18141] do_pte_missing+0xebd/0x3e00 [ 984.110940][T18141] __handle_mm_fault+0x103c/0x2a40 [ 984.116570][T18141] handle_mm_fault+0x3fa/0xaa0 [ 984.121848][T18141] do_user_addr_fault+0x7a3/0x13f0 [ 984.127481][T18141] exc_page_fault+0x5c/0xc0 [ 984.132504][T18141] asm_exc_page_fault+0x26/0x30 [ 984.137873][T18141] rep_movs_alternative+0x4a/0x70 [ 984.143419][T18141] _copy_from_iter+0x385/0x1560 [ 984.148797][T18141] tipc_msg_build+0x308/0x1120 [ 984.154072][T18141] __tipc_sendstream+0x6fa/0x1190 [ 984.159615][T18141] tipc_sendstream+0x4f/0x70 [ 984.164726][T18141] sock_write_iter+0x4fe/0x5b0 [ 984.170007][T18141] vfs_write+0x5ae/0x1150 [ 984.174850][T18141] ksys_write+0x207/0x250 [ 984.179693][T18141] do_syscall_64+0xcd/0x250 [ 984.184718][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.191129][T18141] [ 984.191129][T18141] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 984.198680][T18141] __lock_acquire+0x249e/0x3c40 [ 984.204049][T18141] lock_acquire.part.0+0x11b/0x380 [ 984.209694][T18141] __might_fault+0x11b/0x190 [ 984.214798][T18141] _copy_from_user+0x29/0xd0 [ 984.219894][T18141] __blk_trace_setup+0xa8/0x180 [ 984.225257][T18141] blk_trace_ioctl+0x163/0x290 [ 984.230527][T18141] blkdev_ioctl+0x109/0x6d0 [ 984.235543][T18141] __x64_sys_ioctl+0x190/0x200 [ 984.240825][T18141] do_syscall_64+0xcd/0x250 [ 984.245842][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.252249][T18141] [ 984.252249][T18141] other info that might help us debug this: [ 984.252249][T18141] [ 984.262461][T18141] Chain exists of: [ 984.262461][T18141] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 984.262461][T18141] [ 984.276795][T18141] Possible unsafe locking scenario: [ 984.276795][T18141] [ 984.284228][T18141] CPU0 CPU1 [ 984.289577][T18141] ---- ---- [ 984.294924][T18141] lock(&q->debugfs_mutex); [ 984.299505][T18141] lock(&q->q_usage_counter(queue)#50); [ 984.307647][T18141] lock(&q->debugfs_mutex); [ 984.314741][T18141] rlock(&mm->mmap_lock); [ 984.319145][T18141] [ 984.319145][T18141] *** DEADLOCK *** [ 984.319145][T18141] [ 984.327274][T18141] 1 lock held by syz.6.2924/18141: [ 984.332366][T18141] #0: ffff888142f5a670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 984.342107][T18141] [ 984.342107][T18141] stack backtrace: [ 984.347976][T18141] CPU: 1 UID: 0 PID: 18141 Comm: syz.6.2924 Not tainted 6.13.0-syzkaller #0 [ 984.356635][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 984.366690][T18141] Call Trace: [ 984.369962][T18141] [ 984.372880][T18141] dump_stack_lvl+0x116/0x1f0 [ 984.377553][T18141] print_circular_bug+0x419/0x5d0 [ 984.382572][T18141] check_noncircular+0x31a/0x400 [ 984.387499][T18141] ? __pfx_check_noncircular+0x10/0x10 [ 984.392950][T18141] ? widen_string+0xd8/0x2a0 [ 984.397532][T18141] ? lockdep_lock+0xc6/0x200 [ 984.402117][T18141] ? __pfx_lockdep_lock+0x10/0x10 [ 984.407137][T18141] ? string+0x202/0x3d0 [ 984.411282][T18141] __lock_acquire+0x249e/0x3c40 [ 984.416129][T18141] ? __pfx___lock_acquire+0x10/0x10 [ 984.421317][T18141] ? __pfx_bdev_name.constprop.0+0x10/0x10 [ 984.427115][T18141] ? avc_has_extended_perms+0x481/0x1580 [ 984.432748][T18141] lock_acquire.part.0+0x11b/0x380 [ 984.437850][T18141] ? __might_fault+0xe3/0x190 [ 984.442521][T18141] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 984.448143][T18141] ? rcu_is_watching+0x12/0xc0 [ 984.452904][T18141] ? trace_lock_acquire+0x14e/0x1f0 [ 984.458107][T18141] ? __might_fault+0xe3/0x190 [ 984.462780][T18141] ? lock_acquire+0x2f/0xb0 [ 984.467274][T18141] ? __might_fault+0xe3/0x190 [ 984.471949][T18141] ? __might_fault+0xe3/0x190 [ 984.476618][T18141] __might_fault+0x11b/0x190 [ 984.481201][T18141] ? __might_fault+0xe3/0x190 [ 984.485874][T18141] _copy_from_user+0x29/0xd0 [ 984.490455][T18141] __blk_trace_setup+0xa8/0x180 [ 984.495304][T18141] ? __pfx___blk_trace_setup+0x10/0x10 [ 984.500756][T18141] ? __pfx_snprintf+0x10/0x10 [ 984.505433][T18141] blk_trace_ioctl+0x163/0x290 [ 984.510186][T18141] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 984.515462][T18141] blkdev_ioctl+0x109/0x6d0 [ 984.519962][T18141] ? __pfx_blkdev_ioctl+0x10/0x10 [ 984.524982][T18141] ? selinux_file_ioctl+0x180/0x270 [ 984.530173][T18141] ? selinux_file_ioctl+0xb4/0x270 [ 984.535280][T18141] ? __pfx_blkdev_ioctl+0x10/0x10 [ 984.540300][T18141] __x64_sys_ioctl+0x190/0x200 [ 984.545062][T18141] do_syscall_64+0xcd/0x250 [ 984.549562][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.555451][T18141] RIP: 0033:0x7f289eb85d29 [ 984.559861][T18141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.579485][T18141] RSP: 002b:00007f289f9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.587891][T18141] RAX: ffffffffffffffda RBX: 00007f289ed76240 RCX: 00007f289eb85d29 [ 984.595863][T18141] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000006 [ 984.603843][T18141] RBP: 00007f289ec01b08 R08: 0000000000000000 R09: 0000000000000000 [ 984.611801][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.619765][T18141] R13: 0000000000000000 R14: 00007f289ed76240 R15: 00007fffa95a65e8 [ 984.627731][T18141] [ 984.948342][ T29] audit: type=1400 audit(2000003145.319:853): avc: denied { write } for pid=18129 comm="syz.6.2924" name="file0" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 985.035528][T18134] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 985.066043][T18134] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 985.085059][T18134] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 993.008504][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.014851][ T1290] ieee802154 phy1 wpan1: encryption failed: -22