last executing test programs: 15m26.96734664s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0x3, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10002) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 15m22.443456632s ago: executing program 4 (id=14): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000140)) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r4 = socket$inet(0x2, 0x3, 0x9) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 15m17.9178071s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5da}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) pipe2$9p(&(0x7f0000000000), 0x80800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) 15m0.951934126s ago: executing program 32 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5da}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) pipe2$9p(&(0x7f0000000000), 0x80800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) 8m59.112520589s ago: executing program 3 (id=766): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) read$FUSE(r2, &(0x7f0000006280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x39, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 8m57.994304464s ago: executing program 3 (id=770): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000001a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001e80)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="420f00000000f881ce6781bd8f8b1e95e564019b7f7609374c86f0795f2e38fad56077ace82df952055c8f4cae0fa783754bdd681ae394763b56d80a81fbae16693ad19724d91953c61ab487ad231438aa71f0bc31895fed5c2f818368e09e7dae12afb17fb06c3dd9a81144335733"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000000)=0x74d, 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$isdn(0x22, 0x2, 0x10) r10 = socket$isdn(0x22, 0x2, 0x2) r11 = dup3(r10, r9, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r8, &(0x7f0000000280)={r11, r7, 0x7}) sendmsg$nl_generic(r8, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000036007bc32ddf7000fddbdf2503"], 0x14}}, 0x4000) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x301c1, 0x0) write$dsp(r12, &(0x7f0000000180)="6dc3f3dc4a5f9d437d1420b7195aa9907dc359415830d30bcc8d3d06ddec900639e308308450d4d5f1ed454f0a1c4a7e8c9794b620504110a8e136914a6deb5f6d", 0x41) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100), 0x8) 8m50.754754722s ago: executing program 3 (id=781): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000003040)=""/102399, 0x18fff) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) close(0x4) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 8m45.479138439s ago: executing program 3 (id=793): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r8}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r8}) fcntl$dupfd(r5, 0x406, r5) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000001140)=0x10000000) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x34, 0xcd, 0x55, 0x10, 0x102c, 0x6251, 0x5930, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x8, 0xf8, 0x0, 0xbb, 0xd6, 0x56, 0x51}}]}}]}}, 0x0) 8m39.662829897s ago: executing program 3 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) 8m37.323832354s ago: executing program 3 (id=809): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x13c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x128, 0x1, [@m_simple={0x124, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0xf5, 0x6, "0e80673129e255dad80b9a048dfa3825110b914708fb1ba61aa2725af3959bc7f26e5a53ec4b1307e274f3d43ab5a9cffbe00924f0f18fd68f5fa58daa5a85459f9a519d36ab81dbc01d1bf2405e53b84f1254393553b8e8313a2ce6f65fc22b1b2f524e86d01a4d021d85f0b3f5aa041724b4cb4b52969d6d5cd2e43805f1722b67569cbf334642ed973c67e15895be07a7ebb738004f0125dd6e9ee2b3c20266697de7136a4b7f47ea8147f346c99263d4703f2d7a18da63553ef5df0a142545b263a0b00610a9edc6e9a973d3c6158f9d0db22aa41b8e09654f926cfdc015b02e316e010eafb271a9a8f812ff1a4efd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x13c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x5) syz_emit_ethernet(0x62, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00008a0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8m20.662374167s ago: executing program 33 (id=809): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x13c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x128, 0x1, [@m_simple={0x124, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0xf5, 0x6, "0e80673129e255dad80b9a048dfa3825110b914708fb1ba61aa2725af3959bc7f26e5a53ec4b1307e274f3d43ab5a9cffbe00924f0f18fd68f5fa58daa5a85459f9a519d36ab81dbc01d1bf2405e53b84f1254393553b8e8313a2ce6f65fc22b1b2f524e86d01a4d021d85f0b3f5aa041724b4cb4b52969d6d5cd2e43805f1722b67569cbf334642ed973c67e15895be07a7ebb738004f0125dd6e9ee2b3c20266697de7136a4b7f47ea8147f346c99263d4703f2d7a18da63553ef5df0a142545b263a0b00610a9edc6e9a973d3c6158f9d0db22aa41b8e09654f926cfdc015b02e316e010eafb271a9a8f812ff1a4efd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x13c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x5) syz_emit_ethernet(0x62, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00008a0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m30.255727879s ago: executing program 0 (id=2341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 1m29.574945226s ago: executing program 0 (id=2347): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="f000000010000100abbd700000000000fc01000000000000000000000000000100000000000000000000000000000000000000765d955e65eabb20000000", @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb0000000002"], 0xf0}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m28.878563715s ago: executing program 0 (id=2356): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0xffdd) sendto$inet6(r0, &(0x7f0000000180)="9f", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 1m28.552356792s ago: executing program 6 (id=2359): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) 1m28.110375827s ago: executing program 6 (id=2363): syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m24.515280254s ago: executing program 0 (id=2367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffd8b4}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r4}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m22.348306824s ago: executing program 5 (id=2375): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340"], 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = eventfd2(0xffffffff, 0x80001) write$eventfd(r0, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 1m22.070121145s ago: executing program 6 (id=2378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote, r2}, 0x19) 1m21.663590035s ago: executing program 2 (id=2380): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') timer_create(0x7, &(0x7f0000001280)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000012c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000001300)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001340)) r2 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) getdents64(r0, &(0x7f0000000040)=""/27, 0x1b) getdents(r0, &(0x7f0000001f80)=""/4096, 0x1000) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb5, 0xe6, 0x74, 0x20, 0x5ac, 0x292, 0x8873, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0x77, 0x0, 0x1, 0x3, 0x9a, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}]}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) 1m20.382079018s ago: executing program 6 (id=2383): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x31, &(0x7f0000006680)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x0, &(0x7f0000000300)) 1m19.78451741s ago: executing program 6 (id=2385): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="00100c0000000a3207f1f6c23dceb5d21e9d29"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000400)={0x40, 0x15, 0x28, "6db18531e052ac0b10cf08423f29f415b6ea83f34deb31aabd35f47aac14ec29edf3118aa0d8197f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x8, 0x28, "590f16f4daff67a35b83151ede018d0740958efcb77883d3ddbc41d8c62ae6de335f23e0a8d46252"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m19.5938142s ago: executing program 5 (id=2386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1m19.537651664s ago: executing program 2 (id=2387): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f000047c000/0xd000)=nil, 0xd000, 0x1000001, 0x12, r0, 0xc3d33000) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000482000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m19.423327693s ago: executing program 2 (id=2388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x41000, 0x8, 0x6f, 0x3, 0x82, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0x2, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0x5, 0x5, 0x7e}, {0x7000, 0x26000, 0xa, 0x0, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe, 0x1}, {0x200000, 0x0, 0x10, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9f, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0xf8, 0xa0, 0x80, 0x70, 0x40, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xe, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x1000, 0xb, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x4, 0x7, 0x9}, {0x40000, 0x30}, {0x10000, 0x86}, 0x1, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) 1m19.352568129s ago: executing program 5 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x350}, {&(0x7f0000000b00)="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", 0x231}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1m19.35235564s ago: executing program 2 (id=2390): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1m19.076012763s ago: executing program 2 (id=2391): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff], [0x10000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x5], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xffffffbd}, {0x0, 0x6}, {0xfffffffd, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfefffffa}, {}, {0x8000000, 0x8f96}, {}, {}, {}, {0x1}], '\x00', 0x1000}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1m19.016527913s ago: executing program 2 (id=2392): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0xf57) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x2, 0xfa11, 0x80200001}, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644c", 0xca}], 0x1}, 0x4088040) 1m18.970443794s ago: executing program 5 (id=2393): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r3, 0x2513, 0x7fff, 0x6, 0x81, 0x5}, 0x14) 1m18.465757857s ago: executing program 0 (id=2395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="c892b6bc436a00"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000061c0)=@deltfilter={0x107c, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xb, 0x3}, {0x4, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x104c, 0x2, [@TCA_FLOW_POLICE={0x80c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x7, 0x1ff, 0x24, 0x7f800000, 0xdd0, 0x8001, 0x9, 0x4, 0x8, 0x3, 0x5, 0x6, 0x7f, 0x81, 0x40000000, 0x6, 0x3, 0x9, 0x3, 0x5, 0xebe, 0x4, 0x2, 0x7fff, 0x3, 0x3, 0x0, 0xb, 0x80, 0x9, 0x4, 0x8, 0x1ff, 0x4f, 0x4, 0x7, 0x9, 0xe025, 0xc, 0x2, 0x8a6, 0x5, 0x8, 0x80, 0x8, 0x25e, 0x8, 0x1, 0x1, 0x55ea429a, 0x5, 0x0, 0x8, 0x7, 0x7, 0x80000000, 0x1ff, 0xfffffff3, 0x8, 0x4, 0x9, 0x1, 0x3, 0x4, 0x7fff, 0xee, 0x5d93, 0x4963, 0x2, 0x7, 0x0, 0x8, 0x4, 0x5, 0x1, 0xfffffff9, 0x7, 0x56, 0x1000, 0x0, 0x0, 0xffff0001, 0x6, 0x2, 0x206, 0xa, 0x5, 0x75fba843, 0xfffffffb, 0xb, 0x6, 0x734, 0x7ff, 0xba3, 0x6, 0x2, 0x80000001, 0xf6, 0x1, 0x4, 0x5, 0x47c82681, 0x7fffffff, 0x40, 0x8001, 0x2, 0x7f, 0x6f, 0x3f896bdc, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x3, 0x9, 0xd, 0x1, 0x804, 0x99, 0x5, 0x8, 0x401, 0x1, 0x2, 0x6, 0x7, 0x6, 0xfffffffa, 0x3, 0xff, 0xff, 0x3, 0x8, 0x9, 0x1, 0x7, 0x8, 0x0, 0x5, 0x1, 0x22, 0x10ab, 0xfffffff8, 0xb, 0x8, 0x2, 0x3, 0x100, 0x7ba, 0xcdf, 0xfffff296, 0x3, 0x9, 0x9, 0xff, 0x8, 0x10, 0x8, 0x0, 0x6, 0x6, 0x200, 0x7, 0x6, 0x3, 0x9, 0x4, 0x401, 0x0, 0x0, 0x4, 0x0, 0x80000000, 0x400, 0x80000000, 0x6, 0x9, 0x2, 0x2, 0xe, 0x7, 0x7f, 0x800, 0x7fffffff, 0x2, 0x5, 0x7ff, 0x7f, 0x6, 0xffff, 0x9, 0x2, 0xa, 0x0, 0xb, 0x1, 0x7, 0x4, 0x3, 0x3, 0x6, 0xabb, 0x401, 0xf7b1, 0x3, 0x1, 0x8, 0x75, 0x6, 0x2, 0x1, 0x6, 0x7, 0x8, 0x4, 0x7, 0x8, 0x8, 0xfffffff7, 0x81, 0xe4, 0x2, 0xde, 0xf, 0x7ff, 0x488, 0x3, 0x0, 0x3, 0x5, 0x41, 0xfff, 0x8, 0xa237, 0xff, 0xc3b, 0x7, 0x4, 0x0, 0x4, 0x0, 0xb0, 0x9, 0x6, 0x0, 0xfffffffc, 0x10, 0x64, 0x5, 0x6, 0x8000, 0x8, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1a16, 0x5, 0x8, 0x3, 0x8, 0x7b, 0x7df, 0x6, 0x8, 0x5, 0x800, 0xfff, 0x9318, 0x3, 0x167, 0xfffffffd, 0x5, 0xe6e, 0x0, 0x4, 0x6, 0x9, 0x3, 0x8, 0x9, 0x80000001, 0x8, 0x9, 0x8, 0x6214, 0x200, 0x14, 0x4, 0x168ac436, 0xc00000, 0x7, 0x0, 0x7f, 0x3, 0x4, 0xffff, 0xf, 0x6, 0x7fff, 0xfffffff8, 0x9, 0x9, 0x579a, 0x401, 0x6, 0x1, 0x8, 0x8, 0x9, 0x56b1, 0xd9, 0x80000000, 0xcf, 0x2e, 0x4, 0x24c, 0xffff, 0x5, 0x6, 0xb7a, 0x9, 0x721, 0x5, 0x2, 0x0, 0x6, 0xff, 0xa, 0x10, 0x280, 0x0, 0xfffffffe, 0x1a00000, 0xe, 0x6, 0x200, 0xfffffaf0, 0x3, 0x44a, 0x1, 0x3, 0x4, 0x6, 0x2, 0x8, 0xb81, 0x8000, 0x3, 0x4, 0x10, 0x1, 0x0, 0xde6, 0x2, 0x6, 0x10, 0x50e, 0x5, 0x1000, 0x8, 0x9, 0x1b1, 0x2, 0x4, 0x7, 0x1, 0x8, 0xfe0, 0x7, 0x7, 0x8, 0x1, 0x3, 0xfffffff7, 0x2, 0x7fffffff, 0x80, 0x1, 0xdf6c, 0x5, 0x3, 0x7, 0x4, 0x1ff, 0xfff, 0xfffffffe, 0x7, 0x2f5, 0x0, 0x5, 0x2, 0x7, 0x8, 0xd8c, 0x0, 0x5, 0x4, 0xf6b, 0x50b, 0x2, 0x2, 0x0, 0x3, 0x401, 0x8, 0x68f, 0x3, 0x9, 0x1, 0x5, 0x6, 0xf, 0xc, 0x0, 0x5, 0x4, 0xfffff355, 0x81, 0x6, 0x2, 0xfff, 0x4, 0x9, 0x3, 0xfffffffa, 0x40, 0xa0, 0x3, 0x9, 0x26, 0x8d4, 0x9, 0x2, 0x89, 0x8001, 0x2, 0xec9, 0x5, 0x2000000, 0x8, 0x0, 0x2, 0x5, 0x3, 0x9, 0x9bfb, 0x6, 0x5, 0xb, 0x0, 0xffffffff, 0x3, 0x800, 0x6, 0x2d7a, 0x4, 0x9, 0x5, 0xfffff000, 0x9, 0x6, 0x1, 0x100, 0x2, 0x1, 0x40, 0xb71, 0x8000, 0xfffffffd, 0x5, 0x7fffffff, 0x679b6d7, 0x5, 0x6, 0x1, 0xfffffffd, 0x8, 0xff, 0x14838efb, 0x9, 0x9, 0x7f, 0xc6ea, 0x6, 0x4, 0x5, 0x5, 0x2, 0x1, 0x7, 0x55, 0x8, 0x8, 0x5, 0x7, 0x84, 0x3, 0x0, 0x10000, 0xfffff65a, 0x0, 0x4, 0x9, 0x2, 0x2, 0x62b5, 0x3ff, 0x2, 0x5, 0x1, 0x4]}]}, @TCA_FLOW_ACT={0x83c, 0x9, 0x0, 0x1, [@m_police={0x838, 0x10, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x9, 0x3, 0x0, 0x78db, 0x9, 0x1, 0x2a5, 0x10, 0xa, 0x7, 0x0, 0x9, 0xfffffff8, 0x2, 0x1, 0x5, 0x7, 0x1, 0x400, 0x8000, 0x9, 0x9, 0x5c6, 0x8, 0xca, 0xa, 0x8, 0x80000001, 0xb, 0xfffff625, 0x4, 0x80000000, 0xfff, 0x3800000, 0x478b, 0x2, 0x8, 0x6, 0x55a, 0x1, 0x26416728, 0xff, 0x5, 0x0, 0x7f, 0x7, 0x4, 0x2, 0xfffffffc, 0x1, 0x24, 0xffff, 0x2, 0x3, 0x9, 0xc9, 0x9, 0x9, 0x8b48, 0x6, 0x7, 0x6, 0x1, 0x1, 0x7, 0x8, 0x81, 0x2, 0x7, 0x1, 0xc5, 0x4, 0x5, 0x2, 0x8, 0x2, 0xbde, 0x6, 0x488, 0x1, 0x3, 0x6, 0x3, 0xb5, 0x6, 0x2, 0x5, 0x5, 0x0, 0x5, 0x2, 0x9, 0x10001, 0x0, 0x1000, 0x9, 0x8, 0x8, 0x4, 0x4f50, 0x401, 0xe, 0x42, 0x2, 0x1, 0x7f, 0x800, 0x7, 0x4, 0x1, 0x3, 0x0, 0x7, 0x8, 0x3, 0x0, 0x200, 0x3, 0x5, 0x178000, 0x80000001, 0xfffffff7, 0x7, 0x9, 0x3, 0x7ff, 0x0, 0x461, 0x3c7, 0x8000000, 0xffff, 0x400, 0xfffff38d, 0x6, 0x0, 0x1, 0x2, 0x7, 0x2, 0x0, 0xb, 0x9, 0x3, 0x1, 0x0, 0x10001, 0x4, 0x1, 0x7fff, 0x81, 0x5, 0x7, 0xe, 0x6, 0x0, 0xe36, 0x9782, 0x7, 0x9, 0x0, 0x2a2d, 0x9, 0x8, 0x2, 0x6, 0x7, 0x6, 0x8, 0x9353, 0x81, 0x7, 0x3ff, 0x2, 0x4, 0x8ca, 0x6, 0x7, 0x0, 0x1, 0x100, 0xee0, 0xad, 0x8001, 0x2, 0x9, 0x9, 0x4, 0x5, 0x3, 0xa00, 0x2, 0x1000, 0x4, 0x81, 0x0, 0x0, 0x9, 0xffffffff, 0x8, 0x9, 0xa, 0xa, 0x4, 0x401, 0xf, 0x4f, 0xfffff000, 0x4, 0x9, 0x0, 0xa, 0x7ff, 0x0, 0x7fffffff, 0x200, 0x0, 0xffffff7f, 0x3, 0xc, 0x3, 0x2, 0x0, 0x7, 0x8, 0x2, 0x400, 0x4, 0x1ff, 0xb, 0x1, 0x6a74, 0x7fff, 0x8, 0x2, 0x9d, 0x5, 0x8, 0x8001, 0x2, 0x4, 0x40, 0x4, 0xffff, 0x0, 0x7, 0x3, 0xfffff000, 0x0, 0x95b, 0xfffffff0, 0x65c, 0x6f1, 0x0, 0x2, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x5, 0x4, 0x2, 0x9, 0xfffffff7, 0x24, 0xbf55, 0x10000, 0xd, 0x8138, 0x2, 0x7, 0xfff, 0x0, 0x0, 0x0, 0x8, 0xe, 0x7f, 0x5, 0x4, 0x9, 0x8, 0xbf, 0xc, 0x8, 0x1, 0xe7, 0x7, 0x8, 0x71b2, 0x3, 0x2, 0x9, 0x6da2, 0x2, 0x3, 0x5, 0x5, 0x0, 0x1a, 0x3, 0xdc, 0x6, 0x3, 0x3fe00000, 0x7fffffff, 0x8, 0x7ff, 0x8d, 0xe5, 0xffffffc3, 0x2, 0xa, 0x9, 0x7c35, 0x4, 0x1, 0xbd3, 0x776f, 0x3, 0x73, 0x1, 0xaa, 0xf, 0x9, 0x200, 0x7, 0x700, 0x3, 0xfffffff8, 0xfffffffb, 0x200, 0x5, 0x8, 0x400, 0xb46, 0x8, 0x6322216e, 0x5, 0x62, 0x8, 0x5, 0x5, 0x4, 0x8, 0xff, 0x2, 0x6, 0x2, 0x3ff, 0x2, 0x5, 0x8000, 0x400, 0xae, 0xfffffffb, 0x80000001, 0x4, 0x9, 0x2, 0x3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x0, 0x5e, 0x12, 0xc9, 0x5, 0x97f, 0x26, 0x4, 0x8, 0x0, 0x800, 0x78e, 0x6, 0x9, 0x4, 0x7, 0xc447, 0xa387, 0x5, 0x58, 0x7, 0xffffffff, 0x4, 0x7f, 0x6, 0xffff7fff, 0x1, 0xfffffff8, 0x8, 0x540, 0x80000000, 0x3ff, 0x0, 0xc9, 0xe5b, 0xab, 0xfffffff3, 0x5, 0xfffffffa, 0x3, 0x0, 0x3, 0x81, 0x5, 0x0, 0xefb, 0x4, 0x2, 0x6, 0x3, 0x2458, 0x1, 0x6, 0xc, 0x1ff, 0x4e67, 0xffff, 0xfff, 0x7081, 0x3b4e, 0xd38d, 0x10000, 0x3, 0x0, 0x63a2, 0x7fffffff, 0x7, 0x401, 0x3, 0x400, 0x6, 0x43e70000, 0x7, 0x9, 0x2, 0x8f2a, 0xda16, 0x925, 0x0, 0x7, 0x9, 0x5, 0x1, 0x4140, 0xa4000000, 0x1, 0x9, 0x101, 0x7, 0x8, 0x10001, 0xfffffff7, 0xfffffffc, 0x2, 0x180, 0x7, 0x7f, 0x7, 0x1, 0x8000, 0xf86c, 0x2, 0x9, 0x5, 0xc, 0x4, 0xb1c, 0x5, 0x2, 0x8cf0000, 0x947, 0x5, 0x4, 0x8, 0x10, 0x5, 0x40000000, 0x0, 0xaaf8, 0x8a1, 0x8, 0x7fff, 0x6cc, 0x0, 0x6, 0x9, 0x5, 0xfffffffb, 0xee0, 0x4, 0x6, 0x2, 0x7, 0x10001, 0x7, 0xfffffffd, 0x4, 0x5, 0x4, 0x44, 0x400, 0xd, 0xf, 0x8, 0xb3f4, 0x8, 0x0, 0x3]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0xd816451b076636a9}, 0x1) 1m18.361377632s ago: executing program 1 (id=2396): r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = fanotify_init(0x4, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x61, 0x40001002, r3, 0x0) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m18.045237272s ago: executing program 5 (id=2397): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 1m17.947943304s ago: executing program 1 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 1m17.34905748s ago: executing program 1 (id=2399): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 1m16.909560322s ago: executing program 0 (id=2400): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1m16.798151636s ago: executing program 1 (id=2401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @loopback}, {0x4e21, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x7, 0x100, @void}}}}}}}, 0x0) 1m16.537274826s ago: executing program 1 (id=2402): syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 1m16.426008393s ago: executing program 6 (id=2403): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="486d083a2e4601f804", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="d3e871f3a1d3344a091469db57a91f5d795b55dc6a04d94c746eb7e724dd47d3777fe1dc2b79413d5936a89ac38588dcdeebbe87390ef3b4208029c29e5d620792df6cee8a93e4731116af5610a072f66793aad59845bfe897760573f2faddc7e2e116a863556954470e697197a38385525d8767a10d5e5fd62c7c5615953bee4d299e5d86cc0fe4ca40e033e3f0a2c0e769e728a55cb2fd7390a4640754e5b1a21d8f735050efcf6a402f1d7d4cba8d76dde60e1a02ca9c72b1b23c3a7514ffa1a1aede013aef0825fdde32f254f22074c12dba31a29182f68c0360a1a01f90251c8988", 0xe4}, {&(0x7f0000000400)="d30cbf8fa70026ee3cd49e0859e7dafcd3523e5e204e97d9ac5adf26abd70e5e9cd67f69eb19f31cae1d278dd886d59e066c1bc9c0b6a846a341c5947c2317f18b59a7b3cbcb1b9c3e2d561735e0b5803319aa5a388256cd5381fac4984c12e66af06068dbd947973b658b8c07f7302e2cf0ea2784ae3870935d7e313bd1f1f26227b9656bd491c685863d3e2aa3eb4b2008d1c0407457c6dc38d81e7eed16868d27e423b1", 0xa5}, {&(0x7f0000000680)="4ebb06a386c2b88eb6c00f6fcf33e8b927749339f7c8a80fb00204dd4222f9573d5b3b02c290dbe09bb4954475b0ecd2438a29ebc23b2cbd5b460740ed00b1bc592cfcbc827f2d71eb6932ec1dfb4f727e54b42113dd324d7cc4f8f898edf2ef0562df9c84fac075931078fae0bfb8f0df46dc450ceb8924eb61eff1a898889009ce210c4ec198a91b7eb909cbf2a6e24d897eb0421bfebb45", 0x99}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)="fd51997a6229edf6232c1645c6c4750d97393d4fddccb98b4992b0b005037932e7530a1a7d277371d7b083307db43136970d84aa6da5e55992941b9efb1e2419414fb1eaeeda9350b5a08c8eac6a734bbb07762b8009a605b4e2402b48fb979b890c14e4b9f7384d20daa35cd87a", 0x6e}], 0x1}}], 0x3, 0x4) 1m16.265984271s ago: executing program 5 (id=2404): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) exit(0x0) 0s ago: executing program 1 (id=2405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) kernel console output (not intermixed with test programs): nterface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.632972][T10266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.019284][T10266] hsr_slave_0: entered promiscuous mode [ 492.027301][T10266] hsr_slave_1: entered promiscuous mode [ 492.036910][T10266] debugfs: 'hsr0' already exists in 'hsr' [ 492.044831][T10266] Cannot create hsr debugfs directory [ 492.518779][T10266] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.624545][T10266] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.634851][T10266] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.655953][T10266] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 493.064293][T10325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.847'. [ 493.837010][ T51] Bluetooth: hci0: command tx timeout [ 494.337978][T10266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.362366][T10266] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.397891][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.405005][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.374315][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 495.374332][ T30] audit: type=1326 audit(1771307792.652:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.1.849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f953ab9bf79 code=0x0 [ 495.868823][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.875082][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.881848][ T5818] Bluetooth: hci0: command tx timeout [ 495.975521][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.982670][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.255674][T10342] xt_socket: unknown flags 0x4 [ 497.907045][T10266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.188912][ T5818] Bluetooth: hci0: command tx timeout [ 498.230425][T10353] netlink: 10 bytes leftover after parsing attributes in process `syz.2.854'. [ 499.267638][T10266] veth0_vlan: entered promiscuous mode [ 499.332941][T10266] veth1_vlan: entered promiscuous mode [ 499.369724][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 499.391808][T10266] veth0_macvtap: entered promiscuous mode [ 499.415564][T10266] veth1_macvtap: entered promiscuous mode [ 499.460903][T10266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.650289][T10377] overlayfs: failed to clone upperpath [ 499.725130][T10266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.060054][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.072731][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.316917][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.336811][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.203876][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.241898][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.287532][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.307360][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.529673][ T30] audit: type=1400 audit(1771307799.342:999): avc: denied { mounton } for pid=10266 comm="syz-executor" path="/root/syzkaller.eHxQe5/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 501.633998][T10396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.863'. [ 501.951682][ T30] audit: type=1400 audit(1771307799.342:1000): avc: denied { mounton } for pid=10266 comm="syz-executor" path="/root/syzkaller.eHxQe5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 501.980231][ T30] audit: type=1400 audit(1771307799.422:1001): avc: denied { mounton } for pid=10266 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 503.327866][T10410] overlayfs: failed to clone lowerpath [ 504.689920][T10416] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 505.749751][ T5865] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 505.988441][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 505.995128][ T5865] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 506.014737][ T5865] usb 7-1: config 0 has no interface number 0 [ 506.030304][ T5865] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.180196][ T5865] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 506.195219][ T5865] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 507.278464][ T5865] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 507.654230][ T5865] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.814320][ T5865] usb 7-1: string descriptor 0 read error: -71 [ 507.820827][ T5865] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 507.830085][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.688904][ T5865] usb 7-1: config 0 descriptor?? [ 508.694556][ T5865] usb 7-1: can't set config #0, error -71 [ 508.747588][ T5865] usb 7-1: USB disconnect, device number 2 [ 510.190587][T10462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.875'. [ 513.172115][T10486] netlink: 32 bytes leftover after parsing attributes in process `syz.6.881'. [ 513.506800][ T30] audit: type=1400 audit(1771307811.312:1002): avc: denied { accept } for pid=10482 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 514.458616][T10498] Bluetooth: MGMT ver 1.23 [ 514.658530][T10496] 9pnet_fd: p9_fd_create_tcp (10496): problem connecting socket to 127.0.0.1 [ 516.522158][ T5818] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 516.529514][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 517.541404][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.547638][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.557866][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.613029][T10522] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 517.717902][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.733298][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.747947][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.761934][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.775664][T10522] wlan1 speed is unknown, defaulting to 1000 [ 517.791216][T10522] wlan1 speed is unknown, defaulting to 1000 [ 518.769720][ T30] audit: type=1400 audit(1771307816.592:1003): avc: denied { unmount } for pid=10266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 521.212922][T10558] 9p: Bad value for 'rfdno' [ 521.219494][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 521.454667][T10560] netlink: 32 bytes leftover after parsing attributes in process `syz.6.899'. [ 522.145132][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.897'. [ 526.405703][T10607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.703692][T10607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.757832][T10612] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 528.207625][T10624] kAFS: unable to lookup cell '(' [ 532.479789][ T30] audit: type=1400 audit(1771307829.992:1004): avc: denied { getopt } for pid=10664 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 532.951756][T10678] futex_wake_op: syz.5.922 tries to shift op by 146; fix this program [ 533.197364][T10676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.923'. [ 534.163942][ T30] audit: type=1400 audit(1771307831.982:1005): avc: denied { set_context_mgr } for pid=10691 comm="syz.6.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 536.681175][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'. [ 537.691932][T10704] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 538.429061][ T30] audit: type=1400 audit(1771307836.212:1006): avc: denied { getopt } for pid=10719 comm="syz.6.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 538.756282][T10727] netlink: 'syz.5.931': attribute type 4 has an invalid length. [ 539.487149][T10739] pim6reg: entered allmulticast mode [ 539.934502][ T30] audit: type=1400 audit(1771308093.324:1007): avc: denied { ioctl } for pid=10735 comm="syz.6.934" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 539.980143][ T30] audit: type=1400 audit(1771308093.344:1008): avc: denied { accept } for pid=10735 comm="syz.6.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 541.185637][T10756] netlink: 'syz.6.936': attribute type 2 has an invalid length. [ 542.484507][T10756] ‚#{6c: entered promiscuous mode [ 543.336780][T10767] siw: device registration error -23 [ 545.155892][ T30] audit: type=1400 audit(1771308098.957:1009): avc: denied { mount } for pid=10771 comm="syz.0.941" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 546.728835][T10789] lo speed is unknown, defaulting to 1000 [ 547.385496][T10789] wlan1 speed is unknown, defaulting to 1000 [ 547.699248][T10794] netlink: 'syz.6.947': attribute type 1 has an invalid length. [ 548.722983][T10814] ALSA: mixer_oss: invalid OSS volume 'IGAI' [ 548.733170][T10814] xt_hashlimit: size too large, truncated to 1048576 [ 549.712337][T10825] siw: device registration error -23 [ 550.957603][T10822] lo speed is unknown, defaulting to 1000 [ 551.104696][T10822] wlan1 speed is unknown, defaulting to 1000 [ 553.051542][T10846] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.957'. [ 553.171408][T10844] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.957'. [ 556.149865][ T5918] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 556.701039][T10867] tipc: Enabled bearer , priority 10 [ 557.221667][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.255839][T10874] overlayfs: failed to clone upperpath [ 557.286327][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.308378][ T5918] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.321765][ T5918] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.407423][T10874] Cannot find set identified by id 0 to match [ 557.578627][ T5918] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.645191][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.882049][T10859] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 557.937881][ T5918] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.392778][ T5918] usb 7-1: USB disconnect, device number 3 [ 558.970581][ T6124] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 561.487691][T10914] netlink: 'syz.0.968': attribute type 4 has an invalid length. [ 561.541846][T10914] netlink: 'syz.0.968': attribute type 4 has an invalid length. [ 561.874444][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 562.596693][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 563.455303][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.463918][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.705785][T10932] lo speed is unknown, defaulting to 1000 [ 563.789150][T10932] wlan1 speed is unknown, defaulting to 1000 [ 564.216124][ T30] audit: type=1326 audit(1771308117.947:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 564.751679][T10940] netlink: 'syz.1.975': attribute type 3 has an invalid length. [ 564.759719][ T30] audit: type=1326 audit(1771308117.947:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 565.486705][ T51] Bluetooth: hci4: Unknown advertising packet type: 0x73 [ 565.486827][ T51] Bluetooth: hci4: Malformed LE Event: 0x0d [ 565.542276][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 565.568818][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 565.655114][ T30] audit: type=1326 audit(1771308117.947:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 565.715152][ T10] usb 7-1: can't read configurations, error -71 [ 565.725680][ T30] audit: type=1326 audit(1771308117.957:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 565.934694][ T30] audit: type=1326 audit(1771308117.957:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 566.206830][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 566.280939][T10958] fuse: Bad value for 'fd' [ 566.755758][ T30] audit: type=1326 audit(1771308117.957:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 566.790417][ T30] audit: type=1326 audit(1771308117.957:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 566.817962][T10957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.978'. [ 566.832480][T10961] tipc: Started in network mode [ 566.837395][T10961] tipc: Node identity , cluster identity 4711 [ 566.843676][T10961] tipc: Failed to set node id, please configure manually [ 566.850848][T10961] tipc: Enabling of bearer rejected, failed to enable media [ 566.918835][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.977'. [ 567.783706][ T30] audit: type=1326 audit(1771308117.957:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 568.337843][ T30] audit: type=1326 audit(1771308117.957:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 568.503704][ T30] audit: type=1326 audit(1771308117.957:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 568.669379][T10971] netlink: 32 bytes leftover after parsing attributes in process `syz.6.980'. [ 568.823350][T10973] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.980'. [ 569.672930][T10979] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 569.779776][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 569.779795][ T30] audit: type=1326 audit(1771308123.509:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 569.896982][ T30] audit: type=1326 audit(1771308123.519:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 570.063924][ T30] audit: type=1326 audit(1771308123.519:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 570.087967][ T30] audit: type=1326 audit(1771308123.519:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 570.502785][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.982'. [ 570.537547][T10983] tipc: Bearer : already 2 bearers with priority 10 [ 570.545071][T10983] tipc: Bearer : trying with adjusted priority [ 570.553595][T10983] tipc: Enabled bearer , priority 9 [ 570.673970][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 570.716703][ T30] audit: type=1326 audit(1771308123.519:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 571.302550][T10994] SET target dimension over the limit! [ 571.352270][ T30] audit: type=1326 audit(1771308123.519:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 571.466423][ T30] audit: type=1326 audit(1771308123.519:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 571.504034][ T5879] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 571.632119][ T30] audit: type=1326 audit(1771308123.519:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 571.730667][ T30] audit: type=1326 audit(1771308123.519:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 571.772413][ T5879] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.789091][ T5879] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 571.837437][ T5879] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 571.882510][ T30] audit: type=1326 audit(1771308123.529:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 571.932329][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.966234][T10992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 571.986842][ T5879] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.228215][T11000] netlink: 32 bytes leftover after parsing attributes in process `syz.2.988'. [ 572.251596][ T5879] usb 7-1: USB disconnect, device number 6 [ 573.954301][T11011] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 575.631889][T11030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.993'. [ 576.181381][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 576.181417][ T30] audit: type=1326 audit(1771308130.003:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 576.503402][ T30] audit: type=1326 audit(1771308130.053:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 576.537324][ T30] audit: type=1326 audit(1771308130.053:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 576.566879][ T30] audit: type=1326 audit(1771308130.053:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 576.633374][ T30] audit: type=1326 audit(1771308130.053:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 576.729660][ T30] audit: type=1326 audit(1771308130.053:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 576.903681][ T30] audit: type=1326 audit(1771308130.053:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f3d9d807 code=0x7ffc0000 [ 577.110987][T11052] overlayfs: failed to clone upperpath [ 577.724413][ T30] audit: type=1326 audit(1771308130.053:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa9f3d5c84e code=0x7ffc0000 [ 577.838303][ T30] audit: type=1326 audit(1771308130.053:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa9f3d5c84e code=0x7ffc0000 [ 577.871344][T11046] netlink: 'syz.0.997': attribute type 13 has an invalid length. [ 577.879833][ T30] audit: type=1326 audit(1771308130.053:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.6.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa9f3d5c84e code=0x7ffc0000 [ 577.956331][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 578.410986][T11065] siw: device registration error -23 [ 579.668732][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1002'. [ 579.729478][T11074] pimreg: entered allmulticast mode [ 580.841910][T11085] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1006'. [ 580.861691][T11083] overlayfs: unescaped trailing colons in lowerdir mount option. [ 581.351035][T11089] /dev/nullb0: Can't lookup blockdev [ 581.357891][T11089] netlink: 'syz.5.1005': attribute type 20 has an invalid length. [ 584.667761][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 584.748375][T11131] siw: device registration error -23 [ 584.917008][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dcdf000: rx timeout, send abort [ 585.417063][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dcdec00: rx timeout, send abort [ 585.426064][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dcdf000: abort rx timeout. Force session deactivation [ 585.760647][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 585.760661][ T30] audit: type=1400 audit(1771308139.597:1128): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 585.902417][ T30] audit: type=1400 audit(1771308139.597:1129): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.924706][ T30] audit: type=1400 audit(1771308139.597:1130): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.991945][T11133] netlink: 'syz.5.1015': attribute type 1 has an invalid length. [ 586.001512][T11137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 586.021366][ T30] audit: type=1400 audit(1771308139.597:1131): avc: denied { add_name } for pid=5160 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.074905][ T30] audit: type=1400 audit(1771308139.597:1132): avc: denied { create } for pid=5160 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 586.217527][ T30] audit: type=1400 audit(1771308139.597:1133): avc: denied { append open } for pid=5160 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 586.365935][ T30] audit: type=1400 audit(1771308139.597:1134): avc: denied { getattr } for pid=5160 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.408299][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1015'. [ 587.485315][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1015'. [ 587.516652][T11133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.606528][T11139] bond2: (slave veth3): Enslaving as an active interface with a down link [ 587.780724][T11133] bond2: (slave dummy0): making interface the new active one [ 588.353659][T11133] dummy0: entered promiscuous mode [ 588.359096][T11133] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 588.375071][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 588.475928][T11143] bond2 (unregistering): (slave veth3): Releasing active interface [ 588.516125][T11143] bond2 (unregistering): (slave dummy0): Releasing active interface [ 588.531682][T11143] bond2 (unregistering): Released all slaves [ 588.604475][T11160] wg1: entered promiscuous mode [ 588.610428][T11160] wg1: entered allmulticast mode [ 588.663882][ T5806] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 588.680262][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 588.825241][ T5806] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 588.853521][ T5806] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 588.873785][ T5806] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 588.882820][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.970898][T11155] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 589.447971][ T5806] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.618023][ T5806] usb 7-1: USB disconnect, device number 7 [ 591.532777][T11195] siw: device registration error -23 [ 592.076595][T11199] xt_cgroup: invalid path, errno=-2 [ 593.085640][T11204] blktrace: Concurrent blktraces are not allowed on loop2 [ 593.117364][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1030'. [ 593.973632][T11219] netlink: 'syz.5.1037': attribute type 39 has an invalid length. [ 594.593418][T11220] overlayfs: failed to clone lowerpath [ 594.643878][T11221] overlayfs: failed to clone lowerpath [ 595.024570][ T30] audit: type=1400 audit(1771308148.812:1135): avc: denied { read } for pid=11208 comm="syz.6.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 595.380545][ T30] audit: type=1400 audit(1771308149.142:1136): avc: denied { create } for pid=11208 comm="syz.6.1032" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 597.185476][T11245] siw: device registration error -23 [ 597.762361][T11255] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1043'. [ 601.248119][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 601.412459][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1050'. [ 601.504461][T11287] wg1: entered promiscuous mode [ 601.509593][T11287] wg1: entered allmulticast mode [ 602.341103][T11293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.508306][T11293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.693021][T11279] lo speed is unknown, defaulting to 1000 [ 602.770078][T11279] wlan1 speed is unknown, defaulting to 1000 [ 602.853231][T11293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.923592][T11249] lo speed is unknown, defaulting to 1000 [ 603.080759][T11293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.705270][T10976] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.841181][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 604.850667][T11249] wlan1 speed is unknown, defaulting to 1000 [ 604.867164][T10975] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.966487][T10975] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.981665][T10975] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.048587][T11323] delete_channel: no stack [ 606.423746][ T30] audit: type=1400 audit(1771308159.737:1137): avc: denied { read } for pid=11312 comm="syz.6.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 606.469611][T11322] ceph: No mds server is up or the cluster is laggy [ 606.502473][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 606.703760][T11311] batadv_slave_1: entered promiscuous mode [ 606.712196][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 608.978702][T11343] netlink: 'syz.6.1062': attribute type 4 has an invalid length. [ 609.036790][T11343] netlink: 'syz.6.1062': attribute type 4 has an invalid length. [ 609.246463][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 609.614198][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 609.623183][T11352] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1060'. [ 609.633402][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 609.642639][T11352] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1060'. [ 609.651801][T11352] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1060'. [ 610.154852][T11360] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1066'. [ 610.280585][T11362] sctp: [Deprecated]: syz.5.1065 (pid 11362) Use of int in maxseg socket option. [ 610.280585][T11362] Use struct sctp_assoc_value instead [ 610.654975][T11364] openvswitch: netlink: IP tunnel dst address not specified [ 610.821444][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 611.790458][ T30] audit: type=1400 audit(1771308165.630:1138): avc: denied { ioctl } for pid=11374 comm="syz.6.1068" path="socket:[26142]" dev="sockfs" ino=26142 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 612.126662][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 612.261278][T11396] netlink: set zone limit has 4 unknown bytes [ 612.315674][ T30] audit: type=1400 audit(1771308166.131:1139): avc: denied { read } for pid=11389 comm="syz.1.1071" path="socket:[26971]" dev="sockfs" ino=26971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 612.423575][ T30] audit: type=1400 audit(1771308166.131:1140): avc: denied { ioctl } for pid=11389 comm="syz.1.1071" path="socket:[26971]" dev="sockfs" ino=26971 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 612.582855][T11399] : renamed from bond_slave_0 [ 614.607028][ T5912] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 614.770511][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 614.777888][ T5912] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 614.789259][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.824781][ T5912] pvrusb2: Hardware description: Terratec Grabster AV400 [ 614.840054][ T5912] pvrusb2: ********** [ 614.856731][ T5912] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 614.932465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.946909][ T5912] pvrusb2: Important functionality might not be entirely working. [ 614.957215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.964569][ T5912] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 614.977042][ T5912] pvrusb2: ********** [ 615.033841][ T2341] pvrusb2: Invalid write control endpoint [ 615.149151][ T2341] pvrusb2: Invalid write control endpoint [ 615.174126][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 615.211431][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 615.226893][T11436] netlink: 'syz.2.1079': attribute type 12 has an invalid length. [ 615.235074][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 615.238545][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1077'. [ 615.270405][ T2341] pvrusb2: Device being rendered inoperable [ 615.309260][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 615.333712][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 615.346570][ T2341] pvrusb2: Attached sub-driver cx25840 [ 615.359282][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 615.382132][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 615.648937][T11448] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 615.955118][T11442] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 616.581962][T11423] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 616.599930][T11423] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 616.778991][ T5912] usb 7-1: USB disconnect, device number 8 [ 616.958450][T11455] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1082'. [ 616.981674][T11455] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1082'. [ 618.625632][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.729172][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.394326][ T30] audit: type=1400 audit(1771308172.802:1141): avc: denied { getopt } for pid=11465 comm="syz.6.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 622.623932][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 622.810394][T11510] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'. [ 622.939391][T11512] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1094'. [ 623.265179][T11516] capability: warning: `syz.5.1096' uses deprecated v2 capabilities in a way that may be insecure [ 624.660702][ T30] audit: type=1400 audit(1771308177.752:1142): avc: denied { link } for pid=11517 comm="syz.6.1097" name="#16" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 625.038657][T11524] overlayfs: missing 'workdir' [ 625.058343][T11525] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1099'. [ 626.713503][ T30] audit: type=1400 audit(1771308180.562:1143): avc: denied { read } for pid=11544 comm="syz.6.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 626.758024][T11548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1103'. [ 627.128992][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 627.285085][T11563] 9p: Bad value for 'rfdno' [ 627.355597][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 627.752022][ T5865] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 628.401537][ T5865] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.412676][ T5865] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 628.504921][T11572] lo speed is unknown, defaulting to 1000 [ 628.582278][T11572] wlan1 speed is unknown, defaulting to 1000 [ 629.048333][ T5865] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 629.060370][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.138800][T11566] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.160146][ T5865] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.427022][ T5865] usb 7-1: USB disconnect, device number 9 [ 631.852929][T11603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 632.099477][T11610] trusted_key: syz.1.1117 sent an empty control message without MSG_MORE. [ 633.221634][T11618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1119'. [ 633.861245][T11624] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 634.399007][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 634.506486][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1122'. [ 637.126633][ T5806] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 637.218307][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 637.238663][T11655] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 637.443012][ T5806] usb 7-1: Using ep0 maxpacket: 8 [ 637.473882][ T5806] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 637.484220][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.506640][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1131'. [ 638.212764][ T5806] pvrusb2: Hardware description: Terratec Grabster AV400 [ 638.304898][ T5806] pvrusb2: ********** [ 638.308941][ T5806] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 638.319929][ T5806] pvrusb2: Important functionality might not be entirely working. [ 638.328007][ T5806] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 638.339523][ T5806] pvrusb2: ********** [ 638.345742][ T2341] pvrusb2: Invalid write control endpoint [ 639.356053][ T1205] wlan1 speed is unknown, defaulting to 1000 [ 639.423764][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'. [ 639.432313][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 639.442310][ T2341] pvrusb2: Invalid write control endpoint [ 639.448395][T11678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.451711][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 639.973050][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 639.983195][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 639.995564][ T2341] pvrusb2: Device being rendered inoperable [ 640.012396][T11644] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 640.024790][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 640.032932][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 640.048903][ T5806] usb 7-1: USB disconnect, device number 10 [ 640.063068][ T2341] pvrusb2: Attached sub-driver cx25840 [ 640.073313][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 640.085608][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 641.346285][ T30] audit: type=1400 audit(1771308195.192:1144): avc: denied { mount } for pid=11701 comm="syz.5.1139" name="/" dev="rpc_pipefs" ino=27703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 642.113161][T11707] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1140'. [ 642.461391][T11710] netlink: 'syz.0.1138': attribute type 4 has an invalid length. [ 642.511454][T11715] netlink: 'syz.0.1138': attribute type 4 has an invalid length. [ 642.883044][T11718] netlink: 'syz.5.1141': attribute type 21 has an invalid length. [ 642.978854][T11718] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.292788][T11729] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1144'. [ 644.385534][ T30] audit: type=1400 audit(1771308197.862:1145): avc: denied { watch_sb watch_reads } for pid=11733 comm="syz.2.1145" path="/249/bus" dev="tmpfs" ino=1372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 644.513201][T10975] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.136087][T10975] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.279557][T10975] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.783304][T10975] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.024258][T11751] random: crng reseeded on system resumption [ 646.112574][ T30] audit: type=1400 audit(1771308199.872:1146): avc: denied { write } for pid=11747 comm="syz.6.1148" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 647.222235][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 647.264030][ T30] audit: type=1400 audit(1771308199.872:1147): avc: denied { open } for pid=11747 comm="syz.6.1148" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 647.350132][ T30] audit: type=1400 audit(1771308199.892:1148): avc: denied { ioctl } for pid=11747 comm="syz.6.1148" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 647.379472][T10975] bridge0: port 3(batadv0) entered disabled state [ 647.388420][ T30] audit: type=1400 audit(1771308200.722:1149): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 647.418078][ T30] audit: type=1400 audit(1771308201.122:1150): avc: denied { create } for pid=11752 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.441702][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 647.450684][ T30] audit: type=1400 audit(1771308201.142:1151): avc: denied { getopt } for pid=11752 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.505720][T10975] bridge_slave_1: left allmulticast mode [ 647.512099][T10975] bridge_slave_1: left promiscuous mode [ 647.528939][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.965717][T10975] bridge_slave_0: left allmulticast mode [ 648.019845][T10975] bridge_slave_0: left promiscuous mode [ 648.038121][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.025869][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 649.402069][T10975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.486160][T10975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.547438][T10975] bond0 (unregistering): Released all slaves [ 649.626126][T11814] netlink: 'syz.2.1158': attribute type 10 has an invalid length. [ 650.329750][T11814] team0: Port device netdevsim0 added [ 651.087927][ T30] audit: type=1400 audit(1771308204.932:1152): avc: denied { bind } for pid=11816 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 651.203611][ T30] audit: type=1400 audit(1771308204.962:1153): avc: denied { setopt } for pid=11816 comm="syz.5.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 651.726096][T11830] macsec1: entered promiscuous mode [ 651.731327][T11830] macsec1: entered allmulticast mode [ 652.131534][ T30] audit: type=1400 audit(1771308205.962:1154): avc: denied { search } for pid=11832 comm="syz.1.1162" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.113556][ T30] audit: type=1400 audit(1771308205.962:1155): avc: denied { setattr } for pid=11832 comm="syz.1.1162" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.187924][T11846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1164'. [ 654.242004][T10975] hsr_slave_0: left promiscuous mode [ 654.270011][T10975] hsr_slave_1: left promiscuous mode [ 654.299396][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.439896][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.463124][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.478213][T10975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.519854][T10975] veth1_macvtap: left promiscuous mode [ 654.533721][T10975] veth0_macvtap: left promiscuous mode [ 654.543998][T11875] siw: device registration error -23 [ 654.823224][T10975] team0 (unregistering): Port device batadv1 removed [ 655.093258][T10975] team0 (unregistering): Port device team_slave_1 removed [ 655.117256][T11883] fuse: Unknown parameter 'f’' [ 655.238430][T10975] team0 (unregistering): Port device team_slave_0 removed [ 656.056179][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 656.065241][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 656.074236][T11887] netlink: 'syz.2.1171': attribute type 13 has an invalid length. [ 656.082093][T11887] netlink: 'syz.2.1171': attribute type 12 has an invalid length. [ 657.266935][T11906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1172'. [ 657.507103][ T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 657.672308][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.685323][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.750378][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.759410][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.025681][ T9] usb 7-1: usb_control_msg returned -32 [ 658.054985][ T9] usbtmc 7-1:16.0: can't read capabilities [ 658.856428][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.866588][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.389530][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1178'. [ 660.167707][ T9] usb 7-1: USB disconnect, device number 11 [ 661.308790][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 662.044241][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 662.334615][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.354785][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 662.358618][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 662.380340][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.389464][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.400748][T11953] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 662.422118][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.678715][ T9] usb 7-1: USB disconnect, device number 12 [ 665.722000][T12007] netlink: 'syz.6.1191': attribute type 298 has an invalid length. [ 665.733390][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.742596][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.758939][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.767900][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.787075][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.795934][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.805376][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.814233][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1191'. [ 665.970550][T10976] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.827905][T10976] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.836904][T10976] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.845838][T10976] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.321763][T12014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1192'. [ 667.708099][ T30] audit: type=1400 audit(1771308221.502:1156): avc: denied { read } for pid=12012 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 667.819329][ T30] audit: type=1400 audit(1771308221.502:1157): avc: denied { write } for pid=12012 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 667.840840][ T30] audit: type=1400 audit(1771308221.542:1158): avc: denied { map } for pid=12023 comm="syz.5.1197" path="socket:[28296]" dev="sockfs" ino=28296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 668.834268][ T30] audit: type=1400 audit(1771308221.632:1159): avc: denied { read accept } for pid=12023 comm="syz.5.1197" path="socket:[28296]" dev="sockfs" ino=28296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 669.031785][ T30] audit: type=1326 audit(1771308221.802:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.1194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa69639bf79 code=0x0 [ 669.329589][T12029] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1197'. [ 669.636345][T12040] wlan1 speed is unknown, defaulting to 1000 [ 672.390555][ T30] audit: type=1326 audit(1771308226.222:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 672.741188][ T30] audit: type=1326 audit(1771308226.222:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ed9bf79 code=0x7ffc0000 [ 673.026586][T12069] __nla_validate_parse: 1 callbacks suppressed [ 673.026608][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1205'. [ 675.937351][T12101] openvswitch: netlink: IP tunnel dst address not specified [ 675.961120][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 676.204898][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1210'. [ 676.520130][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 677.420630][T12122] netlink: 'syz.6.1214': attribute type 2 has an invalid length. [ 677.428424][T12122] netlink: 'syz.6.1214': attribute type 1 has an invalid length. [ 680.153155][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.181551][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.850586][T12163] netlink: 'syz.1.1218': attribute type 4 has an invalid length. [ 681.226428][T12180] overlayfs: failed to clone upperpath [ 681.822552][T12183] sctp: [Deprecated]: syz.6.1220 (pid 12183) Use of int in maxseg socket option. [ 681.822552][T12183] Use struct sctp_assoc_value instead [ 684.706466][T12238] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 685.548835][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 685.725308][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 686.375425][ T9] IPVS: starting estimator thread 0... [ 686.470403][T12272] IPVS: using max 78 ests per chain, 187200 per kthread [ 686.521450][ T30] audit: type=1400 audit(1771308240.362:1163): avc: denied { read write } for pid=12256 comm="syz.6.1232" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 686.642207][ T30] audit: type=1400 audit(1771308240.362:1164): avc: denied { open } for pid=12256 comm="syz.6.1232" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 686.730203][ T30] audit: type=1400 audit(1771308240.422:1165): avc: denied { write } for pid=12256 comm="syz.6.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 688.102370][T12291] delete_channel: no stack [ 688.440251][T12289] ceph: No mds server is up or the cluster is laggy [ 688.448587][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 688.467175][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 688.673386][ T30] audit: type=1400 audit(1771308242.522:1166): avc: denied { unmount } for pid=10266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 689.646026][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 690.928886][T12310] overlayfs: failed to clone lowerpath [ 690.979610][T12311] overlayfs: failed to clone lowerpath [ 691.610389][ T5806] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 691.756372][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 691.808450][ T5806] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 691.819198][ T5806] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 691.832357][ T5806] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.857536][ T5806] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 691.869443][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.878890][ T5806] usb 7-1: Product: syz [ 691.886935][ T5806] usb 7-1: Manufacturer: syz [ 691.895750][ T5806] usb 7-1: SerialNumber: syz [ 692.029992][ T5806] hub 7-1:1.0: bad descriptor, ignoring hub [ 692.037273][ T5806] hub 7-1:1.0: probe with driver hub failed with error -5 [ 692.232784][ T5806] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 692.479210][ T30] audit: type=1400 audit(1771308246.322:1167): avc: denied { read write } for pid=12313 comm="syz.6.1243" name="lp0" dev="devtmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 692.553173][ T30] audit: type=1400 audit(1771308246.322:1168): avc: denied { open } for pid=12313 comm="syz.6.1243" path="/dev/usb/lp0" dev="devtmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 692.587371][ T30] audit: type=1400 audit(1771308246.432:1169): avc: denied { write } for pid=12313 comm="syz.6.1243" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 692.617437][ T30] audit: type=1400 audit(1771308246.472:1170): avc: denied { write } for pid=12313 comm="syz.6.1243" dev="sockfs" ino=29787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 692.654889][ T5806] usb 7-1: USB disconnect, device number 13 [ 692.783943][ T5806] usblp0: removed [ 692.990315][T12342] netlink: 'syz.2.1249': attribute type 7 has an invalid length. [ 693.407220][T12343] overlayfs: failed to clone lowerpath [ 693.651722][T12342] netlink: 'syz.2.1249': attribute type 7 has an invalid length. [ 693.757994][ T6129] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.775850][ T6129] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.984716][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.993467][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.662739][T12375] netlink: 'syz.5.1255': attribute type 21 has an invalid length. [ 697.670591][T12375] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1255'. [ 697.679611][T12375] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1255'. [ 697.690933][T12375] netlink: 'syz.5.1255': attribute type 21 has an invalid length. [ 697.698718][T12375] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1255'. [ 697.707775][T12375] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1255'. [ 699.354845][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 701.223426][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1264'. [ 701.232489][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1264'. [ 701.254830][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1264'. [ 701.263889][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1264'. [ 701.430244][ T30] audit: type=1326 audit(1771308255.192:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.6.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 701.467191][T12413] netlink: 810 bytes leftover after parsing attributes in process `syz.6.1264'. [ 701.510526][ T30] audit: type=1326 audit(1771308255.192:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.6.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 701.539690][ T30] audit: type=1326 audit(1771308255.192:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.6.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 701.624354][ T30] audit: type=1326 audit(1771308255.412:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.6.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 701.671211][ T30] audit: type=1326 audit(1771308255.412:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.6.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 701.877668][ T30] audit: type=1400 audit(1771308255.722:1176): avc: denied { lock } for pid=12429 comm="syz.6.1267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 701.987521][ T30] audit: type=1400 audit(1771308255.812:1177): avc: denied { create } for pid=12429 comm="syz.6.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 702.304819][ T30] audit: type=1400 audit(1771308256.152:1178): avc: denied { ioctl } for pid=12429 comm="syz.6.1267" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 702.793388][T12442] Cannot find add_set index 65532 as target [ 703.647240][T12450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 704.671756][T12457] : entered promiscuous mode [ 705.832728][T12467] siw: device registration error -23 [ 706.313832][T12469] __nla_validate_parse: 1 callbacks suppressed [ 706.313849][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 706.453594][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 706.471430][T12473] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1275'. [ 706.564441][T12475] random: crng reseeded on system resumption [ 706.570586][ T30] audit: type=1400 audit(1771308260.412:1179): avc: denied { read } for pid=12470 comm="syz.6.1274" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 706.636795][T12477] openvswitch: netlink: Key type 153 is out of range max 32 [ 706.886618][T12483] siw: device registration error -23 [ 707.401227][T12485] can: request_module (can-proto-3) failed. [ 707.418484][T12485] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 708.668404][T12494] fuse: Unknown parameter 'f’' [ 708.770426][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 709.064485][T12513] sctp: [Deprecated]: syz.1.1286 (pid 12513) Use of int in maxseg socket option. [ 709.064485][T12513] Use struct sctp_assoc_value instead [ 709.792275][ T5865] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 709.950687][ T5865] usb 7-1: Using ep0 maxpacket: 8 [ 709.969237][ T5865] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 709.986622][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.021272][ T5865] pvrusb2: Hardware description: Terratec Grabster AV400 [ 710.028433][ T5865] pvrusb2: ********** [ 710.032912][ T5865] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 710.045502][ T5865] pvrusb2: Important functionality might not be entirely working. [ 710.084092][ T5865] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 710.113860][ T5865] pvrusb2: ********** [ 710.225161][ T2341] pvrusb2: Invalid write control endpoint [ 710.296544][T12532] overlayfs: failed to clone upperpath [ 710.311601][ T2341] pvrusb2: Invalid write control endpoint [ 710.369883][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 710.397964][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 710.417127][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 710.446789][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1289'. [ 710.450318][ T2341] pvrusb2: Device being rendered inoperable [ 710.529043][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 710.549698][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 710.559604][T12538] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 710.631974][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.762511][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.781449][ T2341] pvrusb2: Attached sub-driver cx25840 [ 710.803043][ T5806] usb 7-1: USB disconnect, device number 14 [ 710.909004][ T5879] syz0: Port: 1 Link DOWN [ 711.218673][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 711.232282][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 711.630393][T12552] ptrace attach of "./syz-executor exec"[10266] was attempted by ""[12552] [ 711.656814][ T30] audit: type=1400 audit(1771308265.492:1180): avc: denied { getopt } for pid=12546 comm="syz.6.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 714.440091][T12577] sctp: [Deprecated]: syz.6.1300 (pid 12577) Use of int in maxseg socket option. [ 714.440091][T12577] Use struct sctp_assoc_value instead [ 714.571669][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1298'. [ 714.580982][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1298'. [ 715.202172][T12586] xt_socket: unknown flags 0x4 [ 716.288375][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 716.316016][T12601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 716.747046][ T1205] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 717.244873][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 717.345500][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 717.364869][ T1205] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 717.374296][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.410484][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 717.417578][ T1205] pvrusb2: ********** [ 717.421620][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 717.431935][ T1205] pvrusb2: Important functionality might not be entirely working. [ 717.439743][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 717.461493][ T1205] pvrusb2: ********** [ 717.604435][ T2341] pvrusb2: Invalid write control endpoint [ 717.697241][ T2341] pvrusb2: Invalid write control endpoint [ 717.733985][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 717.750579][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 717.758258][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 717.780302][ T2341] pvrusb2: Device being rendered inoperable [ 717.796489][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 717.804524][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 717.808025][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1303'. [ 717.812865][ T2341] pvrusb2: Attached sub-driver cx25840 [ 717.847175][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 717.908101][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 717.982738][T12595] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 717.994528][T12595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.003541][T12595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.012753][ T5806] usb 7-1: USB disconnect, device number 15 [ 718.833114][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1311'. [ 720.123410][ T30] audit: type=1326 audit(1771308273.892:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.5.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd9bf79 code=0x7ffc0000 [ 720.364204][T12644] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1313'. [ 720.480617][ T30] audit: type=1326 audit(1771308273.892:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.5.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd9bf79 code=0x7ffc0000 [ 721.098258][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 721.131768][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 722.964624][T12675] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1321'. [ 725.831446][T12692] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.890661][T12692] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.963373][T12692] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.024238][T12692] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.207544][ T6140] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.914015][ T6140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.350479][ T30] audit: type=1326 audit(1771308281.022:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ab9bf79 code=0x7ffc0000 [ 727.995725][ T6140] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.000542][ T30] audit: type=1326 audit(1771308281.022:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ab9bf79 code=0x7ffc0000 [ 728.162010][ T6140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.740335][ T30] audit: type=1400 audit(1771308282.302:1185): avc: denied { open } for pid=12712 comm="syz.6.1329" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 729.310314][ T30] audit: type=1400 audit(1771308282.472:1186): avc: denied { write } for pid=12712 comm="syz.6.1329" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 729.340346][ T30] audit: type=1400 audit(1771308282.472:1187): avc: denied { open } for pid=12712 comm="syz.6.1329" path="/93/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 729.500376][T12726] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.1328'. [ 730.733196][ T30] audit: type=1400 audit(1771308284.442:1188): avc: denied { nlmsg_write } for pid=12724 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 731.617146][T12742] netlink: 'syz.0.1333': attribute type 7 has an invalid length. [ 731.653767][T12742] netlink: 'syz.0.1333': attribute type 7 has an invalid length. [ 732.086249][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 732.118437][ T6140] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.141133][ T6140] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.160187][ T6140] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.182558][ T6140] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.386489][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 732.666591][T12760] lo speed is unknown, defaulting to 1000 [ 732.672885][T12760] lo speed is unknown, defaulting to 1000 [ 732.682147][T12760] lo speed is unknown, defaulting to 1000 [ 732.736118][T12760] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 732.887670][T12760] lo speed is unknown, defaulting to 1000 [ 732.901391][T12760] lo speed is unknown, defaulting to 1000 [ 732.914100][T12760] lo speed is unknown, defaulting to 1000 [ 732.927545][T12760] lo speed is unknown, defaulting to 1000 [ 732.941147][T12760] lo speed is unknown, defaulting to 1000 [ 733.090878][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 735.770814][ T30] audit: type=1326 audit(1771308289.562:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69639bf79 code=0x7ffc0000 [ 736.097867][ T30] audit: type=1326 audit(1771308289.562:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69639bf79 code=0x7ffc0000 [ 738.575635][T12801] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1347'. [ 738.950360][ T1205] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 739.110422][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 739.298567][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1351'. [ 739.340553][T12822] siw: device registration error -23 [ 739.963477][ T1205] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 740.654947][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.692500][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 740.719772][ T1205] pvrusb2: ********** [ 740.731328][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 740.770587][ T1205] pvrusb2: Important functionality might not be entirely working. [ 740.798982][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 740.840315][ T1205] pvrusb2: ********** [ 740.902487][ T2341] pvrusb2: Invalid write control endpoint [ 740.997569][ T2341] pvrusb2: Invalid write control endpoint [ 741.026439][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 741.057917][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 741.086825][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 741.117063][ T2341] pvrusb2: Device being rendered inoperable [ 741.127354][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'. [ 741.135940][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 741.175582][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 741.223879][ T2341] pvrusb2: Attached sub-driver cx25840 [ 741.229421][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 741.295515][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 741.326183][T12832] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 741.504712][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.511869][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.539118][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.755991][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.794095][ T30] audit: type=1400 audit(1771308295.642:1191): avc: denied { getopt } for pid=12839 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 741.861694][ T1205] usb 7-1: USB disconnect, device number 16 [ 742.725884][ T30] audit: type=1400 audit(1771308296.552:1192): avc: denied { ioctl } for pid=12851 comm="syz.6.1356" path="socket:[31257]" dev="sockfs" ino=31257 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 742.785000][T12854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.810081][T12854] bond0: (slave rose0): Enslaving as an active interface with an up link [ 743.058117][ T30] audit: type=1400 audit(1771308296.612:1193): avc: denied { bind } for pid=12851 comm="syz.6.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 744.236138][T12876] tipc: Bearer : already 2 bearers with priority 10 [ 744.243940][T12876] tipc: Bearer : trying with adjusted priority [ 744.251866][T12876] tipc: Enabled bearer , priority 9 [ 745.028597][T12873] wlan1 speed is unknown, defaulting to 1000 [ 745.035439][T12873] lo speed is unknown, defaulting to 1000 [ 745.105998][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'. [ 745.400206][T12878] tipc: Started in network mode [ 745.411561][T12878] tipc: Node identity ac1414aa, cluster identity 4711 [ 745.446687][T12878] tipc: Enabled bearer , priority 10 [ 745.995206][T12892] bridge0: entered allmulticast mode [ 746.151112][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1362'. [ 746.167874][ T30] audit: type=1400 audit(1771308299.912:1194): avc: denied { shutdown } for pid=12891 comm="syz.6.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 746.722268][ T5806] tipc: Node number set to 2886997162 [ 746.861467][T12906] tipc: Enabling of bearer rejected, failed to enable media [ 747.518515][T12905] netlink: 'syz.6.1364': attribute type 3 has an invalid length. [ 747.744320][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 748.231182][ T5806] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 748.898329][ T5806] usb 7-1: Using ep0 maxpacket: 16 [ 748.916351][ T5806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.945038][ T5806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.966170][ T5806] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 749.012534][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.037391][ T5806] usb 7-1: config 0 descriptor?? [ 750.122748][ T5806] kye 0003:0458:5016.0001: control desc unexpectedly large [ 750.150948][ T5806] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0001/input/input6 [ 750.298970][T12975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1371'. [ 750.324944][ T30] audit: type=1400 audit(1771308304.172:1195): avc: denied { read } for pid=5163 comm="acpid" name="mouse1" dev="devtmpfs" ino=3051 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 750.372446][T12967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.394291][ T30] audit: type=1400 audit(1771308304.172:1196): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3051 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 750.397093][ T5806] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0001/input/input7 [ 750.449820][ T30] audit: type=1400 audit(1771308304.232:1197): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3051 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 750.511994][ T5806] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 750.598226][ T30] audit: type=1400 audit(1771308304.322:1198): avc: denied { name_bind } for pid=12977 comm="syz.5.1374" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 751.561105][ T5806] usb 7-1: reset high-speed USB device number 17 using dummy_hcd [ 753.520810][T13008] : entered promiscuous mode [ 754.001040][ T30] audit: type=1326 audit(1771308307.652:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 754.047300][ T30] audit: type=1326 audit(1771308307.652:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f3d9bf79 code=0x7ffc0000 [ 755.679418][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 755.715754][T13023] xt_socket: unknown flags 0x4 [ 755.791065][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1380'. [ 755.800102][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1380'. [ 756.153551][ T5918] usb 7-1: USB disconnect, device number 17 [ 757.319645][T13037] delete_channel: no stack [ 759.450966][T13070] : entered promiscuous mode [ 760.371782][T13080] binder: binder_mmap: 13074 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 760.578471][ T30] audit: type=1400 audit(1771309082.294:1201): avc: denied { map } for pid=13074 comm="syz.6.1395" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 760.767855][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 760.844513][T13088] nbd: couldn't find a device at index -2133000188 [ 763.765727][T13132] bridge1: entered promiscuous mode [ 763.771013][T13132] bridge1: entered allmulticast mode [ 763.804442][T13132] siw: device registration error -23 [ 766.088897][T13153] sp0: Synchronizing with TNC [ 766.135962][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.145193][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.158576][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.167643][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.177817][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.186742][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.196312][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.226543][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.236602][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.245523][T13153] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1407'. [ 766.275263][T13153] wg1: left promiscuous mode [ 766.325788][T13153] macsec1: left promiscuous mode [ 766.342135][T13153] bridge1: left promiscuous mode [ 767.977095][T13163] sctp: [Deprecated]: syz.2.1410 (pid 13163) Use of int in maxseg socket option. [ 767.977095][T13163] Use struct sctp_assoc_value instead [ 768.026494][T13161] sctp: [Deprecated]: syz.1.1411 (pid 13161) Use of int in maxseg socket option. [ 768.026494][T13161] Use struct sctp_assoc_value instead [ 768.121914][T13155] wlan1 speed is unknown, defaulting to 1000 [ 768.128593][T13155] lo speed is unknown, defaulting to 1000 [ 772.336167][T13184] __nla_validate_parse: 159 callbacks suppressed [ 772.336216][T13184] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1416'. [ 772.359010][T13184] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ [ 773.964295][T13195] xt_TPROXY: Can be used only with -p tcp or -p udp [ 776.935924][ T30] audit: type=1400 audit(1771309099.234:1202): avc: denied { write } for pid=13204 comm="syz.6.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 777.659788][T13222] IPVS: set_ctl: invalid protocol: 98 172.20.20.46:20000 [ 777.884357][T13222] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 777.896121][T13228] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1422'. [ 777.898654][T13229] CIFS: VFS: Malformed UNC in devname [ 778.097115][T13229] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 778.174201][T13236] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1426'. [ 778.592979][T13238] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1427'. [ 778.968552][ T5806] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 779.157220][ T5806] usb 7-1: Using ep0 maxpacket: 16 [ 779.169161][ T5806] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.194864][ T5806] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.222928][ T5806] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.263392][ T5806] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.285494][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.308086][ T5806] usb 7-1: Product: syz [ 779.327453][ T5806] usb 7-1: Manufacturer: syz [ 779.353614][ T5806] usb 7-1: SerialNumber: syz [ 780.715982][T13247] trusted_key: encrypted_key: keylen parameter is missing [ 781.257590][ T5806] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 781.298694][ T5806] usb 7-1: 2:1 : format type 36 is not supported yet [ 781.351560][ T5806] usb 7-1: USB disconnect, device number 18 [ 781.404791][T13179] udevd[13179]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.515411][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 781.689015][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1441'. [ 783.104492][ T5818] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 783.362516][ T1205] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 784.724619][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 785.042986][ T1205] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 785.054246][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.293823][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 785.311339][ T1205] pvrusb2: ********** [ 785.315960][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 785.330307][ T1205] pvrusb2: Important functionality might not be entirely working. [ 785.338267][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 785.359203][ T1205] pvrusb2: ********** [ 785.463819][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 785.488934][ T2341] pvrusb2: Invalid write control endpoint [ 786.148851][T13296] wg1: entered promiscuous mode [ 786.164599][T13296] wg1: entered allmulticast mode [ 786.226929][ T2341] pvrusb2: Invalid write control endpoint [ 786.228196][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 786.270218][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 786.292194][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 786.299739][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 786.346788][ T30] audit: type=1400 audit(1771309108.036:1203): avc: denied { sys_module } for pid=13272 comm="syz.6.1435" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 786.369826][ T2341] pvrusb2: Device being rendered inoperable [ 786.409542][T13304] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 786.448652][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.468051][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.475858][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 786.482905][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 786.485662][ T1205] usb 7-1: USB disconnect, device number 19 [ 786.524597][ T2341] pvrusb2: Attached sub-driver cx25840 [ 786.562985][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 786.602989][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 787.034321][T13309] ip6t_srh: unknown srh match flags 4000 [ 790.249150][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 790.707477][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 790.781272][T13353] wg1: entered promiscuous mode [ 790.792650][T13353] wg1: entered allmulticast mode [ 791.456178][T13369] kAFS: unparsable volume name [ 791.847130][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 792.741014][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 792.788334][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 793.195669][ T30] audit: type=1400 audit(1771309114.444:1204): avc: denied { search } for pid=13391 comm="syz.6.1471" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 794.689462][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 795.515957][ T1205] wlan1 speed is unknown, defaulting to 1000 [ 795.523999][ T1205] óyz2: Port: 1 Link DOWN [ 795.532144][T13420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.678269][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.054007][T13420] bond0: entered promiscuous mode [ 796.069893][T13420] : entered promiscuous mode [ 796.074949][ T5818] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 796.082722][T13420] bond_slave_1: entered promiscuous mode [ 796.122522][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.676842][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 797.769134][T13449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1487'. [ 797.853954][T13451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1488'. [ 798.003941][T13456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.548245][T13468] trusted_key: encrypted_key: keylen parameter is missing [ 802.113252][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 802.787258][ T5806] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 803.022815][ T5806] usb 7-1: Using ep0 maxpacket: 8 [ 803.046321][ T5806] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 803.061915][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.175500][T13496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1503'. [ 803.524727][ T5806] pvrusb2: Hardware description: Terratec Grabster AV400 [ 803.541436][ T5806] pvrusb2: ********** [ 803.551915][ T5806] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 803.575580][ T5806] pvrusb2: Important functionality might not be entirely working. [ 803.596428][ T5806] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 803.621060][ T5806] pvrusb2: ********** [ 803.757363][ T2341] pvrusb2: Invalid write control endpoint [ 803.817665][ T2341] pvrusb2: Invalid write control endpoint [ 803.893078][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 803.914552][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 804.016750][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 804.029231][ T2341] pvrusb2: Device being rendered inoperable [ 804.035582][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 804.420773][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.439986][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.501993][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 804.510519][ T2341] pvrusb2: Attached sub-driver cx25840 [ 804.515975][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 804.526044][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 804.526707][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1500'. [ 804.632342][T13513] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 804.701101][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.826345][T13518] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 805.113870][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.134074][ T5918] usb 7-1: USB disconnect, device number 20 [ 805.591818][T13542] wg1: entered promiscuous mode [ 805.609537][T13542] wg1: entered allmulticast mode [ 805.661255][T13546] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1520'. [ 805.673540][T13546] openvswitch: netlink: Missing key (keys=40, expected=100) [ 806.799904][T13572] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1530'. [ 806.965239][ T30] audit: type=1400 audit(1771309127.324:1205): avc: denied { setopt } for pid=13573 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.046135][T13580] ksmbd: Unknown IPC event: 4, ignore. [ 808.979276][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 809.321395][T13611] sctp: [Deprecated]: syz.0.1542 (pid 13611) Use of int in maxseg socket option. [ 809.321395][T13611] Use struct sctp_assoc_value instead [ 809.427324][T13617] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 809.930532][T13623] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 810.029548][T13628] netlink: 'syz.1.1553': attribute type 3 has an invalid length. [ 810.409738][ T5918] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 810.604114][ T5918] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 810.619281][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.630806][ T5918] usb 7-1: Product: syz [ 810.636952][ T5918] usb 7-1: Manufacturer: syz [ 810.646268][ T5918] usb 7-1: SerialNumber: syz [ 810.656187][ T5918] usb 7-1: config 0 descriptor?? [ 810.888215][ T5918] int51x1 7-1:0.0: probe with driver int51x1 failed with error -22 [ 810.957830][T13652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1564'. [ 811.126713][ T1205] usb 7-1: USB disconnect, device number 21 [ 812.082781][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 812.593926][T13688] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 812.724079][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 813.350558][T13710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'. [ 813.590567][T13722] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1594'. [ 813.606594][T13723] netlink: 'syz.5.1596': attribute type 3 has an invalid length. [ 813.651985][ T30] audit: type=1400 audit(1771309133.573:1206): avc: denied { setopt } for pid=13719 comm="syz.6.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 813.995596][T13746] sctp: [Deprecated]: syz.1.1603 (pid 13746) Use of int in maxseg socket option. [ 813.995596][T13746] Use struct sctp_assoc_value instead [ 814.033472][T13751] wg1: entered promiscuous mode [ 814.271837][T13761] openvswitch: netlink: IPv4 tunnel dst address is zero [ 814.765671][T13784] netlink: 'syz.5.1622': attribute type 3 has an invalid length. [ 815.049853][T13793] sctp: [Deprecated]: syz.2.1625 (pid 13793) Use of int in maxseg socket option. [ 815.049853][T13793] Use struct sctp_assoc_value instead [ 816.082866][ T30] audit: type=1400 audit(1771309135.855:1207): avc: denied { ioctl } for pid=13833 comm="syz.0.1645" path="socket:[33554]" dev="sockfs" ino=33554 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 816.220702][T13842] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 816.231506][T13842] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1651'. [ 816.250631][T13842] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1651'. [ 816.261674][T13842] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1651'. [ 817.022879][T13869] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1657'. [ 817.496005][T13899] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 817.515176][T13899] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.1675'. [ 817.539933][T13900] tmpfs: Bad value for 'mpol' [ 819.092954][T13948] Cannot find del_set index 1536 as target [ 819.313064][T13955] netlink: 'syz.6.1695': attribute type 2 has an invalid length. [ 819.624274][T13972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.661791][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 819.963680][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 821.230525][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 821.336958][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1736'. [ 821.451493][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1736'. [ 822.181485][T14063] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 822.321682][ T30] audit: type=1400 audit(1771309141.701:1208): avc: denied { write } for pid=14066 comm="syz.6.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 822.739314][T14090] tipc: Enabling of bearer rejected, already enabled [ 822.757802][ T5918] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 822.817052][ T5818] Bluetooth: hci2: unexpected cc 0x203d length: 9 > 1 [ 822.825125][ T5818] Bluetooth: hci2: unexpected event for opcode 0x203d [ 822.931418][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.960548][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 822.984903][ T5918] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 822.997917][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.079379][ T5918] usb 7-1: config 0 descriptor?? [ 823.158119][T14114] sctp: [Deprecated]: syz.5.1764 (pid 14114) Use of int in maxseg socket option. [ 823.158119][T14114] Use struct sctp_assoc_value instead [ 823.580128][ T5918] waterforce 0003:1044:7A4D.0002: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.6-1/input0 [ 823.677347][ T5918] waterforce 0003:1044:7A4D.0002: fw version request failed with -38 [ 823.788677][ T5918] usb 7-1: USB disconnect, device number 22 [ 823.944969][T14133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1776'. [ 824.134240][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 824.265326][T14150] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 824.577197][T14173] rdma_op ffff88802b3e71f0 conn xmit_rdma 0000000000000000 [ 824.655658][T14172] sctp: [Deprecated]: syz.1.1791 (pid 14172) Use of int in maxseg socket option. [ 824.655658][T14172] Use struct sctp_assoc_value instead [ 824.813356][ T30] audit: type=1400 audit(1771309144.021:1209): avc: denied { append } for pid=14185 comm="syz.6.1800" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 825.290107][T14203] sctp: [Deprecated]: syz.5.1804 (pid 14203) Use of int in maxseg socket option. [ 825.290107][T14203] Use struct sctp_assoc_value instead [ 825.387426][ T5912] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 825.570077][ T5912] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 825.581562][ T5912] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.611678][ T5912] usb 7-1: config 0 interface 0 has no altsetting 0 [ 825.622519][ T5912] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 825.637479][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.665409][ T5912] usb 7-1: config 0 descriptor?? [ 825.778761][T14230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1821'. [ 825.795074][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 825.856482][T14234] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1823'. [ 826.139151][ T5912] holtek 0003:1241:5015.0003: item fetching failed at offset 1/5 [ 826.166152][ T5912] holtek 0003:1241:5015.0003: parse failed [ 826.180540][ T5912] holtek 0003:1241:5015.0003: probe with driver holtek failed with error -22 [ 826.375984][ T5912] usb 7-1: USB disconnect, device number 23 [ 826.472694][ T30] audit: type=1400 audit(1771309145.574:1210): avc: denied { connect } for pid=14261 comm="syz.2.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 826.535776][T14273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.609748][T14277] tipc: Bearer : already 2 bearers with priority 10 [ 826.621899][T14277] tipc: Bearer : trying with adjusted priority [ 826.632237][T14277] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 826.788045][T14290] sctp: [Deprecated]: syz.2.1845 (pid 14290) Use of int in maxseg socket option. [ 826.788045][T14290] Use struct sctp_assoc_value instead [ 826.914480][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 827.093988][ T30] audit: type=1400 audit(1771309146.154:1211): avc: denied { ioctl } for pid=14299 comm="syz.6.1853" path="socket:[35976]" dev="sockfs" ino=35976 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 827.755082][ T30] audit: type=1400 audit(1771309146.780:1212): avc: denied { setopt } for pid=14320 comm="syz.6.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 827.895354][ T30] audit: type=1400 audit(1771309146.911:1213): avc: denied { setopt } for pid=14329 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 828.179260][ T5912] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 828.348493][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 828.356564][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.369670][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 828.386000][ T5912] usb 7-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 828.397394][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.413937][ T5912] usb 7-1: config 0 descriptor?? [ 828.469199][T14350] sctp: [Deprecated]: syz.5.1875 (pid 14350) Use of int in maxseg socket option. [ 828.469199][T14350] Use struct sctp_assoc_value instead [ 828.485055][ T30] audit: type=1400 audit(1771309147.454:1214): avc: denied { connect } for pid=14351 comm="syz.0.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 828.891076][ T5912] sony 0003:054C:1000.0004: hidraw0: USB HID v2.00 Device [HID 054c:1000] on usb-dummy_hcd.6-1/input0 [ 828.929224][ T5912] sony 0003:054C:1000.0004: failed to claim input [ 828.948083][T14367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1881'. [ 829.130500][ T5912] usb 7-1: USB disconnect, device number 24 [ 829.139362][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 829.268735][T14374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 830.468933][T14408] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1897'. [ 831.424480][T14436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1905'. [ 832.016885][T14462] tipc: Enabling of bearer rejected, already enabled [ 832.457252][T14474] sctp: [Deprecated]: syz.5.1919 (pid 14474) Use of int in maxseg socket option. [ 832.457252][T14474] Use struct sctp_assoc_value instead [ 833.707945][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 834.318487][T14531] sctp: [Deprecated]: syz.5.1945 (pid 14531) Use of int in maxseg socket option. [ 834.318487][T14531] Use struct sctp_assoc_value instead [ 834.384752][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 835.023493][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 835.032593][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 835.042890][ T5918] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 835.232243][T14556] sctp: [Deprecated]: syz.2.1955 (pid 14556) Use of int in maxseg socket option. [ 835.232243][T14556] Use struct sctp_assoc_value instead [ 835.287309][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 835.294911][ T5918] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 835.307242][ T5918] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.332799][ T5918] usb 7-1: config 0 interface 0 has no altsetting 0 [ 835.339575][ T5918] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 835.357732][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.370768][ T5918] usb 7-1: config 0 descriptor?? [ 835.377642][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 835.918492][ T5918] input: HID 28bd:0933 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0933.0005/input/input9 [ 836.096357][ T5918] uclogic 0003:28BD:0933.0005: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.6-1/input0 [ 836.235283][ T5912] usb 7-1: USB disconnect, device number 25 [ 836.303926][T14575] sctp: [Deprecated]: syz.2.1962 (pid 14575) Use of int in maxseg socket option. [ 836.303926][T14575] Use struct sctp_assoc_value instead [ 836.874516][T14601] sctp: [Deprecated]: syz.1.1972 (pid 14601) Use of int in maxseg socket option. [ 836.874516][T14601] Use struct sctp_assoc_value instead [ 837.189778][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 837.536218][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1984'. [ 837.976998][T14638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1992'. [ 838.158423][ T5818] Bluetooth: hci0: Malformed LE Event: 0x0d [ 838.854259][T14666] sctp: [Deprecated]: syz.2.2002 (pid 14666) Use of int in maxseg socket option. [ 838.854259][T14666] Use struct sctp_assoc_value instead [ 838.893827][T14671] openvswitch: netlink: Message has 592 unknown bytes. [ 838.915202][T14671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.186406][T14678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2008'. [ 839.565516][T14690] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 840.058576][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 840.401877][T14723] overlayfs: failed to resolve '//tcp_congestion_control': -2 [ 840.549656][ T1205] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 840.655645][T14727] sctp: [Deprecated]: syz.2.2027 (pid 14727) Use of int in maxseg socket option. [ 840.655645][T14727] Use struct sctp_assoc_value instead [ 840.772109][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 840.882779][ T1205] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 840.895742][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.922366][T14730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2029'. [ 840.954426][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 840.968489][ T1205] pvrusb2: ********** [ 840.981399][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 841.006274][ T1205] pvrusb2: Important functionality might not be entirely working. [ 841.022704][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 841.046878][ T1205] pvrusb2: ********** [ 841.171912][ T2341] pvrusb2: Invalid write control endpoint [ 841.236791][ T2341] pvrusb2: Invalid write control endpoint [ 841.258575][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 841.287288][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 841.311375][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 841.334358][ T2341] pvrusb2: Device being rendered inoperable [ 841.346968][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 841.362862][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 841.389322][ T2341] pvrusb2: Attached sub-driver cx25840 [ 841.402001][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 841.426376][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 841.449034][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2024'. [ 841.643642][ T1205] usb 7-1: USB disconnect, device number 26 [ 841.763227][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 842.160538][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2040'. [ 842.763332][T14779] xt_HMARK: proto mask must be zero with L3 mode [ 843.258774][T14792] netlink: 'syz.2.2057': attribute type 3 has an invalid length. [ 843.350091][T14798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.353264][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 844.075375][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2072'. [ 844.391591][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 844.777966][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 845.671037][T14918] sctp: [Deprecated]: syz.6.2109 (pid 14918) Use of int in maxseg socket option. [ 845.671037][T14918] Use struct sctp_assoc_value instead [ 845.794866][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2117'. [ 845.858755][T14931] tipc: Enabling of bearer rejected, failed to enable media [ 846.819225][T14957] netlink: 872 bytes leftover after parsing attributes in process `syz.2.2130'. [ 846.843018][T14957] netlink: 872 bytes leftover after parsing attributes in process `syz.2.2130'. [ 846.931173][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 847.838356][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 848.493434][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2163'. [ 849.449973][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 851.383578][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2180'. [ 852.941524][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 854.895052][T15150] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2209'. [ 854.908815][T15150] tipc: Enabling of bearer rejected, media not registered [ 855.075125][ T1205] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 855.096533][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2208'. [ 855.302117][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 855.336179][ T1205] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 855.345373][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.421889][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 855.452765][ T1205] pvrusb2: ********** [ 855.477782][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 855.512792][ T1205] pvrusb2: Important functionality might not be entirely working. [ 855.581948][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 855.672014][ T1205] pvrusb2: ********** [ 855.792728][ T2341] pvrusb2: Invalid write control endpoint [ 856.054332][ T2341] pvrusb2: Invalid write control endpoint [ 856.074947][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 856.236928][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 856.263730][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 856.294547][ T2341] pvrusb2: Device being rendered inoperable [ 856.309455][T15148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.322479][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 856.322522][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 856.423082][ T2341] pvrusb2: Attached sub-driver cx25840 [ 856.537242][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 856.698099][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 856.817198][T15148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.210737][T15173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2214'. [ 869.139072][ T1205] usb 7-1: USB disconnect, device number 27 [ 869.176786][T15176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.616975][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 869.959352][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.971941][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.556171][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 877.265164][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 877.503917][T15251] sctp: [Deprecated]: syz.1.2240 (pid 15251) Use of int in maxseg socket option. [ 877.503917][T15251] Use struct sctp_assoc_value instead [ 877.867595][ T1205] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 878.123967][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 878.184245][T15267] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 878.256110][ T1205] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 878.280888][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.341436][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 878.367157][ T1205] pvrusb2: ********** [ 878.401993][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 878.433754][ T1205] pvrusb2: Important functionality might not be entirely working. [ 878.498185][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 878.562233][ T1205] pvrusb2: ********** [ 878.637326][ T2341] pvrusb2: Invalid write control endpoint [ 878.910397][ T2341] pvrusb2: Invalid write control endpoint [ 878.947131][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 878.970586][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 879.043201][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2234'. [ 879.052224][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 879.096549][ T2341] pvrusb2: Device being rendered inoperable [ 879.139644][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 879.170886][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 879.224384][ T2341] pvrusb2: Attached sub-driver cx25840 [ 879.277440][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 879.323120][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 879.730350][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2253'. [ 879.817935][ T1205] usb 7-1: USB disconnect, device number 28 [ 880.376224][T15296] netlink: 'syz.1.2259': attribute type 9 has an invalid length. [ 881.095543][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 882.515346][T15315] sctp: [Deprecated]: syz.1.2261 (pid 15315) Use of int in maxseg socket option. [ 882.515346][T15315] Use struct sctp_assoc_value instead [ 884.142387][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2275'. [ 884.594666][T15350] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 884.840883][T15360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2280'. [ 884.880461][ T1205] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 885.075958][ T1205] usb 7-1: Using ep0 maxpacket: 32 [ 885.096962][ T1205] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 885.117250][ T1205] usb 7-1: config 0 has no interface number 0 [ 885.123401][ T1205] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 885.142972][ T1205] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 885.167392][ T1205] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 885.190529][ T1205] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 885.200744][ T1205] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.225637][ T1205] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 885.236067][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.254795][ T1205] usb 7-1: Product: syz [ 885.259300][ T1205] usb 7-1: Manufacturer: syz [ 885.263884][ T1205] usb 7-1: SerialNumber: syz [ 885.270951][ T1205] usb 7-1: config 0 descriptor?? [ 885.285448][T15350] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 885.299061][ T1205] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input10 [ 885.315458][ T5163] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 885.516312][T15350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.525257][T15350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.949088][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 886.104174][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2291'. [ 888.607715][T15394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2294'. [ 888.617320][ T1205] usb 7-1: USB disconnect, device number 29 [ 888.825463][ T30] audit: type=1400 audit(1771309203.896:1215): avc: denied { module_load } for pid=15400 comm="syz.1.2296" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=39124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 888.932994][T15401] Invalid ELF header magic: != ELF [ 890.600155][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'. [ 894.987693][T15454] IPv6: NLM_F_CREATE should be specified when creating new route [ 895.484889][T15469] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2324'. [ 895.526996][T15469] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2324'. [ 897.569291][T15478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2328'. [ 898.393411][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 898.566900][ T9] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 898.575550][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.617625][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.645091][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 898.669798][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.696612][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.717847][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.761048][ T9] usb 7-1: config 0 descriptor?? [ 898.779768][T15497] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 899.073608][T15517] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 899.114436][T15517] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 899.143643][T15517] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2344'. [ 899.174631][T15517] unsupported nla_type 58 [ 899.332275][ T9] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 899.407008][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 899.774715][ T9] usb 7-1: USB disconnect, device number 30 [ 899.872665][T15532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2351'. [ 900.565104][ T30] audit: type=1400 audit(1771309214.887:1216): avc: denied { map } for pid=15555 comm="syz.6.2359" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 900.623939][ T30] audit: type=1400 audit(1771309214.934:1217): avc: denied { execute } for pid=15555 comm="syz.6.2359" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 901.502201][T15566] sctp: [Deprecated]: syz.1.2362 (pid 15566) Use of int in maxseg socket option. [ 901.502201][T15566] Use struct sctp_assoc_value instead [ 906.761332][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 907.596639][T15613] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 909.440282][T15633] overlayfs: failed to clone upperpath [ 909.565664][ T1205] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 909.741386][ T1205] usb 7-1: Using ep0 maxpacket: 32 [ 909.753446][ T1205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 909.773202][ T1205] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 909.792101][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.822851][ T1205] usb 7-1: Product: syz [ 909.828213][ T1205] usb 7-1: Manufacturer: syz [ 909.843046][ T1205] usb 7-1: SerialNumber: syz [ 909.857205][ T1205] usb 7-1: config 0 descriptor?? [ 910.326917][ T1205] gs_usb 7-1:0.0: Configuring for 242 interfaces [ 910.754690][ T30] audit: type=1400 audit(1771309224.419:1218): avc: denied { audit_write } for pid=15654 comm="syz.1.2396" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 911.625074][ T1205] gs_usb 7-1:0.0: Disabling termination support for channel 1 (-EPROTO) [ 911.788775][ T1205] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 1 (-EPROTO) [ 911.850731][T15667] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 911.890933][T15667] netlink: 'syz.1.2399': attribute type 4 has an invalid length. [ 911.920404][T15667] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2399'. [ 912.496728][ T1205] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 912.520212][ T1205] usb 7-1: USB disconnect, device number 31 [ 919.286097][ C0] sched: DL replenish lagged too much [ 935.838631][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.856147][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.155915][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1028.162875][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15677/3:b..l P15675/1:b..l [ 1028.172561][ C0] rcu: (detected by 0, t=10503 jiffies, g=54493, q=1252092 ncpus=2) [ 1028.180619][ C0] task:syz.6.2403 state:R running task stack:26536 pid:15675 tgid:15675 ppid:10266 task_flags:0x400040 flags:0x00080002 [ 1028.195034][ C0] Call Trace: [ 1028.198309][ C0] [ 1028.201234][ C0] __schedule+0xfee/0x60e0 [ 1028.205669][ C0] ? __pfx___schedule+0x10/0x10 [ 1028.210522][ C0] ? mark_held_locks+0x40/0x70 [ 1028.215288][ C0] preempt_schedule_irq+0x50/0x90 [ 1028.220311][ C0] irqentry_exit+0x17b/0x670 [ 1028.224905][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1028.230879][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 1028.236076][ C0] Code: 05 fb 70 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 9b f4 0e 0f 82 c2 02 00 00 8b 35 de ce f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 70 28 12 0f 85 02 03 00 00 48 83 c4 [ 1028.255678][ C0] RSP: 0018:ffffc9000215f328 EFLAGS: 00000206 [ 1028.261734][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002 [ 1028.269680][ C0] RDX: 0000000000000000 RSI: ffffffff8de4885a RDI: ffffffff8c1ae9a0 [ 1028.277642][ C0] RBP: ffffffff8e7e93e0 R08: 0000000021944811 R09: 0000000000000007 [ 1028.285602][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1028.293556][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1028.301520][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1028.306720][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1028.311912][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1028.318062][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1028.322999][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1028.328103][ C0] ? save_stack+0x162/0x1e0 [ 1028.332604][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1028.338756][ C0] arch_stack_walk+0x94/0xf0 [ 1028.343347][ C0] ? save_stack+0x162/0x1e0 [ 1028.347851][ C0] stack_trace_save+0x8e/0xc0 [ 1028.352523][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1028.357885][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.362804][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.367743][ C0] save_stack+0x162/0x1e0 [ 1028.372070][ C0] ? __pfx_save_stack+0x10/0x10 [ 1028.376932][ C0] ? page_ext_put+0x3e/0xd0 [ 1028.381434][ C0] __reset_page_owner+0x84/0x190 [ 1028.386374][ C0] __free_frozen_pages+0x7ca/0x10a0 [ 1028.391570][ C0] qlist_free_all+0x47/0xe0 [ 1028.396068][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1028.401526][ C0] __kasan_slab_alloc+0x69/0x90 [ 1028.406375][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1028.411827][ C0] ? vm_area_dup+0x27/0x8e0 [ 1028.416328][ C0] vm_area_dup+0x27/0x8e0 [ 1028.420650][ C0] __split_vma+0x18c/0xd90 [ 1028.425068][ C0] ? __pfx___split_vma+0x10/0x10 [ 1028.430010][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.434960][ C0] ? mas_ascend+0x53d/0xb30 [ 1028.439462][ C0] vma_modify+0x1121/0x2250 [ 1028.443965][ C0] ? __pfx_vma_modify+0x10/0x10 [ 1028.448817][ C0] vma_modify_flags+0x257/0x3d0 [ 1028.453662][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 1028.459025][ C0] ? rcu_is_watching+0x12/0xc0 [ 1028.463779][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 1028.469412][ C0] mprotect_fixup+0x209/0xb70 [ 1028.474091][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 1028.479282][ C0] ? __pfx_mas_prev+0x10/0x10 [ 1028.483964][ C0] do_mprotect_pkey+0x9e1/0xe70 [ 1028.488815][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1028.494178][ C0] ? vm_mmap_pgoff+0x103/0x470 [ 1028.498969][ C0] __x64_sys_mprotect+0x78/0xc0 [ 1028.503813][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1028.509006][ C0] do_syscall_64+0x106/0xf80 [ 1028.513595][ C0] ? clear_bhb_loop+0x40/0x90 [ 1028.518261][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.524126][ C0] RIP: 0033:0x7fa9f3d9bd77 [ 1028.528531][ C0] RSP: 002b:00007fffb4894198 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1028.536936][ C0] RAX: ffffffffffffffda RBX: 00007fa9f4c506c0 RCX: 00007fa9f3d9bd77 [ 1028.544899][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fa9f4c31000 [ 1028.552860][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1028.560818][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffb48942f0 [ 1028.568779][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1028.576758][ C0] [ 1028.579766][ C0] task:syz.6.2403 state:R running task stack:27000 pid:15677 tgid:15675 ppid:10266 task_flags:0x400040 flags:0x00080002 [ 1028.593256][ C0] Call Trace: [ 1028.596514][ C0] [ 1028.599439][ C0] __schedule+0xfee/0x60e0 [ 1028.603860][ C0] ? enqueue_to_backlog+0x417/0xfa0 [ 1028.609044][ C0] ? netif_rx_internal+0x109/0x630 [ 1028.614161][ C0] ? __pfx___schedule+0x10/0x10 [ 1028.619012][ C0] ? trace_netif_rx_exit+0x6d/0x240 [ 1028.624208][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1028.629578][ C0] preempt_schedule_common+0x42/0xc0 [ 1028.634861][ C0] preempt_schedule_thunk+0x16/0x30 [ 1028.640061][ C0] ? __dev_queue_xmit+0x7dc/0x4750 [ 1028.645167][ C0] __local_bh_enable_ip+0xff/0x120 [ 1028.650273][ C0] ? __dev_queue_xmit+0x7dc/0x4750 [ 1028.655378][ C0] __dev_queue_xmit+0x7f1/0x4750 [ 1028.660316][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1028.665686][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.670645][ C0] ip_finish_output2+0xf4a/0x24d0 [ 1028.675680][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1028.681139][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 1028.687212][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 1028.692843][ C0] ip_output+0x39b/0xec0 [ 1028.697089][ C0] ? __pfx_ip_output+0x10/0x10 [ 1028.701852][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1028.707222][ C0] ? ip4_dst_hoplimit+0x1a9/0x400 [ 1028.712252][ C0] __ip_queue_xmit+0x1b73/0x22b0 [ 1028.717193][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1028.722302][ C0] __tcp_transmit_skb+0x3347/0x4b50 [ 1028.727503][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.732441][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1028.737985][ C0] ? find_held_lock+0x2b/0x80 [ 1028.742673][ C0] tcp_connect+0x2956/0x5630 [ 1028.747273][ C0] ? __pfx_tcp_connect+0x10/0x10 [ 1028.752201][ C0] ? get_random_u16+0x583/0x7d0 [ 1028.757044][ C0] ? tcp_fastopen_cookie_check+0x3ea/0x450 [ 1028.762868][ C0] tcp_v4_connect+0x158b/0x1bf0 [ 1028.767721][ C0] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1028.772917][ C0] __inet_stream_connect+0x208/0xfa0 [ 1028.778202][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 1028.784035][ C0] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1028.789243][ C0] tcp_sendmsg_locked+0x279a/0x45f0 [ 1028.794456][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.799396][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1028.804343][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1028.809888][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1028.814902][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1028.820269][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1028.825549][ C0] tcp_sendmsg+0x2e/0x50 [ 1028.829780][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1028.834710][ C0] inet_sendmsg+0xb9/0x140 [ 1028.839119][ C0] __sys_sendto+0x467/0x520 [ 1028.843616][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1028.848648][ C0] ? rcu_is_watching+0x12/0xc0 [ 1028.853936][ C0] ? do_sock_setsockopt+0x101/0x1d0 [ 1028.859134][ C0] ? kfree+0x2ec/0x6b0 [ 1028.863203][ C0] ? xfd_validate_state+0x129/0x190 [ 1028.868404][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 1028.873159][ C0] ? do_syscall_64+0x95/0xf80 [ 1028.877831][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1028.883051][ C0] do_syscall_64+0x106/0xf80 [ 1028.887637][ C0] ? clear_bhb_loop+0x40/0x90 [ 1028.892313][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.898199][ C0] RIP: 0033:0x7fa9f3d9bf79 [ 1028.902605][ C0] RSP: 002b:00007fa9f4c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1028.911009][ C0] RAX: ffffffffffffffda RBX: 00007fa9f4015fa0 RCX: 00007fa9f3d9bf79 [ 1028.918978][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1028.926939][ C0] RBP: 00007fa9f3e327e0 R08: 0000200000e68000 R09: 0000000000000010 [ 1028.934901][ C0] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 1028.942859][ C0] R13: 00007fa9f4016038 R14: 00007fa9f4015fa0 R15: 00007fffb48941f8 [ 1028.950836][ C0] [ 1028.953847][ C0] rcu: rcu_preempt kthread starved for 3887 jiffies! g54493 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1028.964940][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1028.974896][ C0] rcu: RCU grace-period kthread stack dump: [ 1028.980768][ C0] task:rcu_preempt state:R running task stack:28680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1028.994251][ C0] Call Trace: [ 1028.997517][ C0] [ 1029.000438][ C0] __schedule+0xfee/0x60e0 [ 1029.004853][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1029.009802][ C0] ? __pfx___schedule+0x10/0x10 [ 1029.014645][ C0] ? find_held_lock+0x2b/0x80 [ 1029.019315][ C0] ? schedule+0x2bf/0x390 [ 1029.023642][ C0] schedule+0xdd/0x390 [ 1029.027707][ C0] schedule_timeout+0x127/0x280 [ 1029.032567][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1029.037935][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1029.043222][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1029.049029][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1029.054492][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1029.059263][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1029.064547][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1029.069484][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1029.074678][ C0] ? rcu_is_watching+0x12/0xc0 [ 1029.079434][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1029.085239][ C0] rcu_gp_kthread+0x179/0x230 [ 1029.089917][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1029.095110][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1029.100914][ C0] ? __kthread_parkme+0x18c/0x230 [ 1029.105946][ C0] ? kthread+0x13a/0x450 [ 1029.110185][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1029.115383][ C0] kthread+0x370/0x450 [ 1029.119442][ C0] ? __pfx_kthread+0x10/0x10 [ 1029.124025][ C0] ret_from_fork+0x754/0xd80 [ 1029.128612][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.133715][ C0] ? __switch_to+0x7b4/0x1120 [ 1029.138390][ C0] ? __pfx_kthread+0x10/0x10 [ 1029.142970][ C0] ret_from_fork_asm+0x1a/0x30 [ 1029.147741][ C0] [ 1029.150749][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1029.157058][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1029.162255][ C1] NMI backtrace for cpu 1 [ 1029.162268][ C1] CPU: 1 UID: 0 PID: 15679 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.162288][ C1] Tainted: [L]=SOFTLOCKUP [ 1029.162292][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1029.162301][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1029.162323][ C1] RIP: 0010:__unwind_start+0x3c9/0x7f0 [ 1029.162340][ C1] Code: 24 08 85 d2 0f 84 2f ff ff ff 4d 89 fd 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 49 c1 ed 03 49 89 c4 49 01 ed 49 01 ec eb 2a <4c> 89 f7 e8 7f dd ff ff 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 74 [ 1029.162352][ C1] RSP: 0018:ffffc90000a08198 EFLAGS: 00000202 [ 1029.162362][ C1] RAX: 1ffff92000141044 RBX: ffffc90000a08278 RCX: ffffc90000a08280 [ 1029.162372][ C1] RDX: ffffc90000a09000 RSI: ffffffff8de6e909 RDI: ffffffff8c1ae9a0 [ 1029.162381][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1029.162389][ C1] R10: ffffc90000a081e8 R11: 0000000000000000 R12: fffff5200014103f [ 1029.162398][ C1] R13: fffff5200014103e R14: ffffc90000a081e8 R15: ffffc90000a081f0 [ 1029.162407][ C1] FS: 0000000000000000(0000) GS:ffff88812444d000(0000) knlGS:0000000000000000 [ 1029.162421][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.162430][ C1] CR2: 0000200000400000 CR3: 000000002528d000 CR4: 00000000003526f0 [ 1029.162439][ C1] Call Trace: [ 1029.162443][ C1] [ 1029.162450][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1029.162468][ C1] arch_stack_walk+0x73/0xf0 [ 1029.162485][ C1] ? __unwind_start+0x2fb/0x7f0 [ 1029.162502][ C1] stack_trace_save+0x8e/0xc0 [ 1029.162517][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1029.162535][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1029.162554][ C1] kasan_save_stack+0x30/0x50 [ 1029.162586][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1029.162599][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1029.162615][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1029.162637][ C1] dst_release+0x259/0x330 [ 1029.162651][ C1] skb_release_head_state+0x293/0x400 [ 1029.162668][ C1] consume_skb+0x8a/0x110 [ 1029.162685][ C1] nft_synproxy_do_eval+0xa7b/0xd50 [ 1029.162701][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1029.162715][ C1] ? ip_vs_conn_in_get+0x85/0x1b0 [ 1029.162731][ C1] ? ip_vs_service_find+0x1a1/0x1040 [ 1029.162747][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1029.162761][ C1] nft_do_chain+0x2e8/0x1930 [ 1029.162776][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1029.162788][ C1] ? mark_held_locks+0x40/0x70 [ 1029.162809][ C1] ? ip_vs_in_hook+0x9dd/0x27a0 [ 1029.162824][ C1] ? ip_vs_in_hook+0xa5a/0x27a0 [ 1029.162847][ C1] nft_do_chain_inet+0xee/0x340 [ 1029.162866][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1029.162887][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 1029.162904][ C1] nf_hook_slow+0xbf/0x220 [ 1029.162922][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 1029.162938][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1029.162955][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1029.162970][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1029.162986][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1029.163003][ C1] ? ip_rcv_finish_core+0x80a/0x2220 [ 1029.163020][ C1] ip_local_deliver+0x163/0x1f0 [ 1029.163041][ C1] ip_rcv+0x2d9/0x5d0 [ 1029.163056][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1029.163070][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 1029.163086][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1029.163101][ C1] ? lock_acquire+0x1cf/0x380 [ 1029.163120][ C1] ? process_backlog+0x32a/0x1580 [ 1029.163135][ C1] ? process_backlog+0x32a/0x1580 [ 1029.163148][ C1] __netif_receive_skb+0x1f/0x120 [ 1029.163162][ C1] process_backlog+0x37a/0x1580 [ 1029.163177][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 1029.163192][ C1] net_rx_action+0xa40/0xf20 [ 1029.163209][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1029.163224][ C1] ? mark_held_locks+0x40/0x70 [ 1029.163242][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1029.163260][ C1] ? tmigr_handle_remote+0x132/0x380 [ 1029.163279][ C1] ? run_timer_base+0x121/0x190 [ 1029.163295][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1029.163314][ C1] handle_softirqs+0x1eb/0x9e0 [ 1029.163331][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1029.163346][ C1] ? __alloc_skb+0x5b7/0x710 [ 1029.163361][ C1] do_softirq+0xac/0xe0 [ 1029.163375][ C1] [ 1029.163379][ C1] [ 1029.163383][ C1] __local_bh_enable_ip+0xf8/0x120 [ 1029.163398][ C1] __alloc_skb+0x5db/0x710 [ 1029.163412][ C1] ? __alloc_skb+0x5b7/0x710 [ 1029.163426][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1029.163442][ C1] ? kfree_skbmem+0x19f/0x210 [ 1029.163455][ C1] nsim_dev_trap_report_work+0x2af/0xd10 [ 1029.163478][ C1] process_one_work+0x9d7/0x1920 [ 1029.163495][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1029.163510][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1029.163529][ C1] worker_thread+0x5da/0xe40 [ 1029.163546][ C1] ? kthread+0x13a/0x450 [ 1029.163556][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1029.163568][ C1] kthread+0x370/0x450 [ 1029.163578][ C1] ? __pfx_kthread+0x10/0x10 [ 1029.163590][ C1] ret_from_fork+0x754/0xd80 [ 1029.163603][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.163616][ C1] ? rcu_is_watching+0x12/0xc0 [ 1029.163629][ C1] ? __switch_to+0x7b4/0x1120 [ 1029.163644][ C1] ? __pfx_kthread+0x10/0x10 [ 1029.163656][ C1] ret_from_fork_asm+0x1a/0x30 [ 1029.163676][ C1] [ 1031.892987][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1032.003522][ T1295] ieee802154 phy1 wpan1: encryption failed: -22