last executing test programs: 16m51.080960744s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 16m50.001120925s ago: executing program 1 (id=15): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) open(0x0, 0x0, 0x1a9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x20000000}) 16m48.789224918s ago: executing program 1 (id=17): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xc0, 0xcf68, 0xffffffff}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000340)=0x9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x202, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x2000000) 16m47.202474123s ago: executing program 1 (id=22): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16m46.169393818s ago: executing program 1 (id=24): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 16m41.674888466s ago: executing program 1 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0x39, 0x0, 0x0, {0x7}}, 0x14}}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x4) syz_open_dev$vcsn(0x0, 0x6c90, 0x40000) r3 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$MAP_CREATE(0x11c, 0x0, 0x50) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 16m26.390088912s ago: executing program 32 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0x39, 0x0, 0x0, {0x7}}, 0x14}}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x4) syz_open_dev$vcsn(0x0, 0x6c90, 0x40000) r3 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$MAP_CREATE(0x11c, 0x0, 0x50) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 14.569377446s ago: executing program 2 (id=2288): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb3, 0x17, 0xe, 0x10, 0x16d5, 0x650a, 0x83b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x24, 0x9, 0xf8}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24044094) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = io_uring_setup(0x115c, &(0x7f00000002c0)={0x0, 0x8270, 0x40, 0x3, 0x117, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) open(&(0x7f0000000080)='./file1\x00', 0xa0340, 0x84) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) 13.397242868s ago: executing program 4 (id=2292): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfffe, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200), 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r2, &(0x7f0000000180)="d4", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000f5000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) 9.943800946s ago: executing program 2 (id=2300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r2, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x4, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000000)="79ecabbd54b7b753197ce73d17b43a57e42bb16db418717a1bfc9e3e25c0e4664605745ed3aa191593d287a87a1769109eb36c0b4af377df", 0x38}, {&(0x7f0000000440)="99a111fb84cf8f9c402349b4fcf1198cc71f87387c150639b887775a4b0a529d8fc13748845cde70892a8a66522b60e0c02d44145da4822a46eb1548856cb3be3b42df6c85f71df61dde6c3b20fc1cd3d94ebf52f2589594932b7e6627a56d076ad0b087375d031ab5b79b1ffbce0d7b90b4de9a48e6879ee18957f062aa6d3deb9ff155a5d6dbc6a6225458a92f96ac419e482ff2f5dbf4d4f82180b54e1005567a0d31a07aff0647e65001beca27e3666f383d4cf5ab11c9c5747f", 0xbc}, {&(0x7f0000000500)="843886155613f9dcbacc23b932b321dfa8ec94bab09e0238cdbf35f709405ac71aaa5ff666fe32cd5273ad3a9679dfb3c5007b887015306552cde762c7ee7a98f990afefb819a941af17b02686e25a6b358582e0be449819961c4fe84bde9b7da8277e18c09d6ae62c3b866031b05c697a88b88cdc8ce359a3532a6912893f4b742a1d154078290de0da5c429a8bdd1e838d4c", 0x93}, {0x0}, {&(0x7f0000000080)}], 0x6, 0x0, 0x0, 0x48010}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000740)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 8.871478183s ago: executing program 3 (id=2301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/186, 0xba) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f00000002c0)={0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xb, 0x17}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20040054) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) 8.771421479s ago: executing program 4 (id=2303): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x4, 0x3}], 0x1) prlimit64(0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1f, 0x13, 0x200, &(0x7f0000000d80)="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"}) socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r3, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) 8.359791801s ago: executing program 5 (id=2304): r0 = syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace(0x4207, r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000180)=0x7fffffff, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.359048429s ago: executing program 4 (id=2305): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x2, 0x88, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x2, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x9}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x5, 0x1, [0x0], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x41, 0xe, 0x5, {0x7, 0x25, 0x1, 0x3, 0xa8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x52, 0x1, 0x3, {0x7, 0x25, 0x1, 0x1, 0xff}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x2, 0x0, 0x40, 0x7}, 0x8c, &(0x7f0000000b40)={0x5, 0xf, 0x8c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0x2, 0x5, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x2}, @generic={0x73, 0x10, 0xa, "1a9ddad7f56f543ca5bb90a9b3cb14803ff77d2c388074ba16d99f3adb90e9c5920ad6184ae80340db45f05796afa96e4b78b8447903a5638abef8c1a9bd3c79b1a3be14ab80c09d5a2a4016a33fef2520cea2c5d6e36d4bf4af61360c25ab47118588011bfd58ada9c015a9d5dae6ce"}]}, 0x9, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}, {0x59, &(0x7f0000000340)=@string={0x59, 0x3, "805e0d5d2a9068b263b64400ad82c2905c3dda37bfc914052b47379477137421a145d86a53a4a11e8bb39635be6528b34cbd299bd1e025fbd4f246dcb77f90e027518f07e3d3b0788efc76cab896881f11af8f9ff5f8cf"}}, {0x2c, &(0x7f0000000440)=@string={0x2c, 0x3, "6af84d435e1194d12459e8d838ebeebbb674edb1a2df9103fe4612b9c2910ccd645c601f56fb2f692e3e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c46}}, {0x4c, &(0x7f0000000580)=@string={0x4c, 0x3, "52131fdde4963751ee9ed2be9510152b490f7b2054bb92022e04646511171641419edbf6a71b1b58800aa10fd7c889c96a6655307c9df9f535fa03d3642c9809739f47133ab2c53a7e44"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x814}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='{/}\\') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r3, 0x0, 0x1000002, 0x37, 0x0, 0x0) r4 = msgget$private(0x0, 0x0) msgsnd(r4, 0x0, 0x2000, 0x0) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000000c0)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26, 0x1) 8.226067685s ago: executing program 2 (id=2306): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x6, 0x6, 0xfffffffe) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x800000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x3, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x19) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1\x00'}) 7.618825213s ago: executing program 5 (id=2307): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb3, 0x17, 0xe, 0x10, 0x16d5, 0x650a, 0x83b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x24, 0x9, 0xf8}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24044094) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = io_uring_setup(0x115c, &(0x7f00000002c0)={0x0, 0x8270, 0x40, 0x3, 0x117, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) open(&(0x7f0000000080)='./file1\x00', 0xa0340, 0x84) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) 7.302163521s ago: executing program 0 (id=2309): r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000240)=0x100, 0xff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000300)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$usbfs(r7, &(0x7f00000001c0)=""/93, 0x5d) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6a", 0x41}, {&(0x7f0000000080)='G%\t\x00\x00', 0x5}], 0x2}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 7.2116791s ago: executing program 3 (id=2310): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb3, 0x17, 0xe, 0x10, 0x16d5, 0x650a, 0x83b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x24, 0x9, 0xf8}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24044094) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = io_uring_setup(0x115c, &(0x7f00000002c0)={0x0, 0x8270, 0x40, 0x3, 0x117, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) open(&(0x7f0000000080)='./file1\x00', 0xa0340, 0x84) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) 7.0614572s ago: executing program 0 (id=2311): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0x7000000000000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r2, 0x0, 0x0) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fce4df8006000600800a000008001800e000000100"/44], 0x2c}}, 0x0) readahead(0xffffffffffffffff, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 6.109533461s ago: executing program 2 (id=2312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x180d1}, 0x49010) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mmap(&(0x7f0000a3a000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0xffffc000) r8 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd4, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0xb1, 0x5, 0x0, 0x0, 0x0, 0xfc, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xfd, 0x7, 0xa, 0x10, 0x8}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "f402abad6e5b2586a1cb148e9f1081f5"}, @ptm_cap={0x3}]}, 0x1555555555555598, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x8f, &(0x7f00000008c0)=ANY=[]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$printer(r8, &(0x7f0000000600)={0x14, &(0x7f0000000240)={0x20, 0x30, 0x17, {0x17, 0xa, "15b125aa37920be4b8773a60a1879c4a4821fdddf5"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}}, &(0x7f0000000880)={0x34, &(0x7f0000000640)={0x20, 0x1, 0x3d, "3347dcff6046c64438af5ff2276e3768e2e7cc58e71d074d3d31d5204d5097977b9bc27197a430e749ec58a3ab358c293e72dccdf0151ba90f5c262f92"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x81, {0x7f, "2170c543822de20b7084ce7dcf72b28fa28a734145c8436902b7f9bd24f03dae398f99486206f57549c6e4fc0af5ba9ac3ea00bb14bb8203c9cdf3e77bbe94006eec4a848c6d5a342e48bf92f638daa78f71fdf34ad530129899d7191bfa827fd3fad5ffac398160bd6d9c2fb7d9b7f565f737e5ae3a5fe5302edb5ab725d1"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0xb}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000405804195000000000000109022d0001000044b409040001010300010009210900760122050009058103", @ANYRESDEC, @ANYRES16=r2], 0x0) 6.084790881s ago: executing program 0 (id=2313): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r2, &(0x7f0000001e00)=""/4096, 0x1000, 0x10000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002801000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_submit(r5, 0x1, &(0x7f00000002c0)=[0x0]) fanotify_init(0x200, 0x0) mprotect(&(0x7f0000972000/0x3000)=nil, 0x3000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 5.247105364s ago: executing program 4 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a77d400", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xfffffffffffffc84, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 5.019751215s ago: executing program 5 (id=2315): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x14305, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe2$9p(0x0, 0x0) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x3f, 0x0, @thr={0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0xfffffce6, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 3.94373635s ago: executing program 0 (id=2316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) 3.875274172s ago: executing program 3 (id=2317): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) setreuid(0x0, r3) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) accept$alg(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x2, 0x0, 0x80, {0x4000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e68e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac7025372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5e3caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195280700dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6a7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 3.851902435s ago: executing program 5 (id=2318): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000480)={0x68000005}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8905, &(0x7f0000004100)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@loopback, @local}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, 0x0, 0x0) 3.692521826s ago: executing program 0 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xfffffffffffffc84, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 3.1442917s ago: executing program 3 (id=2320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r2, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x4, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000000)="79ecabbd54b7b753197ce73d17b43a57e42bb16db418717a1bfc9e3e25c0e4664605745ed3aa191593d287a87a1769109eb36c0b4af377df", 0x38}, {&(0x7f0000000440)="99a111fb84cf8f9c402349b4fcf1198cc71f87387c150639b887775a4b0a529d8fc13748845cde70892a8a66522b60e0c02d44145da4822a46eb1548856cb3be3b42df6c85f71df61dde6c3b20fc1cd3d94ebf52f2589594932b7e6627a56d076ad0b087375d031ab5b79b1ffbce0d7b90b4de9a48e6879ee18957f062aa6d3deb9ff155a5d6dbc6a6225458a92f96ac419e482ff2f5dbf4d4f82180b54e1005567a0d31a07aff0647e65001beca27e3666f383d4cf5ab11c9c5747f", 0xbc}, {&(0x7f0000000500)="843886155613f9dcbacc23b932b321dfa8ec94bab09e0238cdbf35f709405ac71aaa5ff666fe32cd5273ad3a9679dfb3c5007b887015306552cde762c7ee7a98f990afefb819a941af17b02686e25a6b358582e0be449819961c4fe84bde9b7da8277e18c09d6ae62c3b866031b05c697a88b88cdc8ce359a3532a6912893f4b742a1d154078290de0da5c429a8bdd1e838d4c62", 0x94}, {0x0}, {&(0x7f0000000080)}], 0x6, 0x0, 0x0, 0x48010}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000740)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 2.605391842s ago: executing program 2 (id=2321): r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000240)=0x100, 0xff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000300)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$usbfs(r7, &(0x7f00000001c0)=""/93, 0x5d) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6a", 0x41}, {&(0x7f0000000080)='G%\t\x00\x00', 0x5}], 0x2}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 2.557261706s ago: executing program 3 (id=2322): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r6, 0x0, 0x0, 0x800) 2.471458044s ago: executing program 5 (id=2323): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r0, 0x100000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x201000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000780), 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) set_mempolicy(0x0, &(0x7f00000007c0)=0x5, 0x1) timer_create(0x6, &(0x7f00000004c0)={0x0, 0x6, 0x4, @thr={&(0x7f0000000400)="335bb64b5b5f898f9e8018fe0e8dde919422844fc198426b2cc3af5bbada56a54853bbb61648ef1923ebd0d34425dff3d47c47b4bf4ca4ef6d987a990a1607989cf3afda67fcbccf1e1a76a892d70bdd5a47598c", &(0x7f0000000480)="d6dc60eb381f4ea2"}}, &(0x7f0000000500)) getsockopt(r5, 0x1, 0xe, 0x0, &(0x7f0000000640)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\\\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x29, 0x1, 0x81, 0x6, 0x4f7f60d657cd92da, @private2, @loopback, 0x7800, 0x700, 0x8, 0x4}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@delqdisc={0x74, 0x25, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xa}, {0x10, 0xfff1}, {0xc, 0xd}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x440) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)=""/190, &(0x7f0000000100)=0xbe) 2.31291497s ago: executing program 4 (id=2324): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x14305, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe2$9p(0x0, 0x0) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x3f, 0x0, @thr={0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0xfffffce6, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 1.264517836s ago: executing program 4 (id=2325): openat$fb0(0xffffffffffffff9c, 0x0, 0x20981, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000240)='I', 0x1, 0x2004c841, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @loopback, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x9}, 0x8) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0xc004) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) dup2(0xffffffffffffffff, r5) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, 'G'}]}}, 0x0}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r9, 0xb704, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_migrate_pages\x00', r8, 0x0, 0xdf5}, 0x42) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bind$bt_hci(r6, 0x0, 0x0) 1.22851513s ago: executing program 5 (id=2326): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r2, &(0x7f0000001e00)=""/4096, 0x1000, 0x10000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002801000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_submit(r5, 0x1, &(0x7f00000002c0)=[0x0]) fanotify_init(0x200, 0x0) mprotect(&(0x7f0000972000/0x3000)=nil, 0x3000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 549.175248ms ago: executing program 2 (id=2327): r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb3, 0x17, 0xe, 0x10, 0x16d5, 0x650a, 0x83b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x24, 0x9, 0xf8}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24044094) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = io_uring_setup(0x115c, &(0x7f00000002c0)={0x0, 0x8270, 0x40, 0x3, 0x117, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) open(&(0x7f0000000080)='./file1\x00', 0xa0340, 0x84) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) 27.962379ms ago: executing program 3 (id=2328): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(0x0, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) mkdirat(r3, &(0x7f0000000440)='./file0\x00', 0x45) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x40, 0x4, 0x31424752, 0x4, 0x3, [{0xfffffffc, 0x9}, {}, {0x0, 0x2d2}, {0x3ff, 0x3}, {0x4, 0x4}, {0xfffffffa, 0x1003}, {0x1, 0x80000001}, {0x80000000, 0x5}], 0x0, 0x7, 0x0, 0x0, 0x2}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000be914900100009", @ANYRESOCT=r6, @ANYRES16=r4], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 0s ago: executing program 0 (id=2329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r2, 0x409, 0x9) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="000000000200"/25], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) kernel console output (not intermixed with test programs): 4][ T30] audit: type=1400 audit(2000000221.160:2391): avc: denied { bind } for pid=13624 comm="syz.5.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 799.938958][ T30] audit: type=1400 audit(2000000221.200:2392): avc: denied { connect } for pid=13624 comm="syz.5.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 800.017372][ T30] audit: type=1400 audit(2000000221.200:2393): avc: denied { ioctl } for pid=13624 comm="syz.5.1651" path="socket:[44389]" dev="sockfs" ino=44389 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 800.522719][T13647] syz.0.1656 (13647): drop_caches: 2 [ 801.528953][T13660] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 801.558920][T13660] bond2: entered promiscuous mode [ 801.569013][T13660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.895869][T13664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.996006][T13664] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 802.045024][ T30] audit: type=1400 audit(2000000223.320:2394): avc: denied { unlink } for pid=13659 comm="syz.4.1659" name="#60" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 802.102113][ T30] audit: type=1400 audit(2000000223.320:2395): avc: denied { mount } for pid=13659 comm="syz.4.1659" name="/" dev="overlay" ino=1835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 802.151457][T13664] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 802.245277][T13664] bond2: (slave vcan2): making interface the new active one [ 802.252783][T13664] vcan2: entered promiscuous mode [ 802.279599][T13664] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 802.294880][T13666] overlayfs: failed lookup in lower (newroot/336, name='bus', err=-40): overlapping layers [ 803.099876][ T30] audit: type=1400 audit(2000000223.930:2396): avc: denied { audit_write } for pid=13670 comm="syz.3.1661" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 803.250360][ T30] audit: type=1107 audit(2000000223.940:2397): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 804.122056][ T30] audit: type=1400 audit(2000000225.070:2398): avc: denied { create } for pid=13679 comm="syz.3.1663" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 804.181234][ T30] audit: type=1400 audit(2000000225.130:2399): avc: denied { write } for pid=13679 comm="syz.3.1663" name="file0" dev="tmpfs" ino=1819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 804.239923][ T30] audit: type=1400 audit(2000000225.130:2400): avc: denied { open } for pid=13679 comm="syz.3.1663" path="/337/file0" dev="tmpfs" ino=1819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 804.779869][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 804.909334][T13692] syz.5.1667 (13692): drop_caches: 2 [ 804.954786][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 804.968817][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.983263][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.053973][ T5927] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 805.069769][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.108034][ T5927] usb 4-1: config 0 descriptor?? [ 805.235109][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 805.235123][ T30] audit: type=1400 audit(2000000226.510:2405): avc: denied { create } for pid=13694 comm="syz.5.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 805.291647][ T30] audit: type=1400 audit(2000000226.570:2406): avc: denied { mount } for pid=13694 comm="syz.5.1668" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 805.627094][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 805.683324][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 805.880947][ T5927] usb 4-1: USB disconnect, device number 15 [ 806.080562][ T30] audit: type=1400 audit(2000000227.260:2407): avc: denied { getopt } for pid=13706 comm="syz.2.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.694575][ T30] audit: type=1400 audit(2000000228.920:2408): avc: denied { mounton } for pid=13702 comm="syz.0.1669" path="/342/file1" dev="autofs" ino=44546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 808.251571][T13725] netlink: 'syz.3.1674': attribute type 2 has an invalid length. [ 809.134879][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.144607][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.879146][ T30] audit: type=1400 audit(2000000231.090:2409): avc: denied { create } for pid=13719 comm="syz.4.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 809.970528][T13742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13742 comm=syz.3.1676 [ 809.993150][ T30] audit: type=1400 audit(2000000231.120:2410): avc: denied { setopt } for pid=13719 comm="syz.4.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 810.012582][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.612355][T13748] syz.4.1678 (13748): drop_caches: 2 [ 811.259899][ T5927] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 811.289144][T13761] syz.5.1683 (13761): drop_caches: 2 [ 811.505528][ T5927] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 811.514163][ T5927] usb 4-1: config 0 has no interface number 0 [ 811.522152][ T5927] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 811.531757][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.644509][ T5927] usb 4-1: Product: syz [ 811.656994][T13762] GUP no longer grows the stack in syz.4.1680 (13762): 200000004000-20000000a000 (200000002000) [ 811.668406][T13762] CPU: 0 UID: 0 PID: 13762 Comm: syz.4.1680 Not tainted syzkaller #0 PREEMPT(full) [ 811.668429][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 811.668430][ T5927] usb 4-1: Manufacturer: syz [ 811.668440][T13762] Call Trace: [ 811.668446][T13762] [ 811.668453][T13762] dump_stack_lvl+0x16c/0x1f0 [ 811.668481][T13762] gup_vma_lookup+0x1d2/0x220 [ 811.668500][T13762] __get_user_pages+0x241/0x3530 [ 811.668526][T13762] ? find_held_lock+0x2b/0x80 [ 811.668546][T13762] ? __pfx___get_user_pages+0x10/0x10 [ 811.668572][T13762] get_user_pages_remote+0x243/0xab0 [ 811.668590][T13762] ? mast_spanning_rebalance.isra.0+0x2060/0x2060 [ 811.668616][T13762] ? __pfx_get_user_pages_remote+0x10/0x10 [ 811.668636][T13762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 811.668661][T13762] __access_remote_vm+0x250/0xaa0 [ 811.668682][T13762] ? do_raw_spin_lock+0x12c/0x2b0 [ 811.668699][T13762] ? __pfx___access_remote_vm+0x10/0x10 [ 811.668721][T13762] proc_pid_cmdline_read+0x4de/0x8e0 [ 811.668742][T13762] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 811.668762][T13762] ? rw_verify_area+0xcf/0x6c0 [ 811.668785][T13762] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 811.668801][T13762] vfs_readv+0x5c1/0x8b0 [ 811.668828][T13762] ? __pfx_vfs_readv+0x10/0x10 [ 811.668867][T13762] ? __fget_files+0x20e/0x3c0 [ 811.668889][T13762] ? do_preadv+0x1a6/0x270 [ 811.668909][T13762] do_preadv+0x1a6/0x270 [ 811.668931][T13762] ? __pfx_do_preadv+0x10/0x10 [ 811.668959][T13762] do_syscall_64+0xcd/0xfa0 [ 811.668982][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.668998][T13762] RIP: 0033:0x7fef3b78efc9 [ 811.669011][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.669025][T13762] RSP: 002b:00007fef3c6d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 811.669040][T13762] RAX: ffffffffffffffda RBX: 00007fef3b9e6180 RCX: 00007fef3b78efc9 [ 811.669049][T13762] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 811.669058][T13762] RBP: 00007fef3b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 811.669067][T13762] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 811.669076][T13762] R13: 00007fef3b9e6218 R14: 00007fef3b9e6180 R15: 00007ffcac61c948 [ 811.669099][T13762] [ 811.844801][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.957374][ T5927] usb 4-1: SerialNumber: syz [ 811.975094][ T5927] usb 4-1: config 0 descriptor?? [ 811.982940][ T5927] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0 [ 812.189170][ T5927] qmi_wwan 4-1:0.172: probe with driver qmi_wwan failed with error -22 [ 812.491388][T13774] siw: device registration error -23 [ 813.567764][ T30] audit: type=1400 audit(2000000234.840:2411): avc: denied { getopt } for pid=13779 comm="syz.5.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 813.603340][ T5868] usb 4-1: USB disconnect, device number 16 [ 813.889832][ T5918] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 813.985987][ T30] audit: type=1400 audit(2000000235.260:2412): avc: denied { bind } for pid=13785 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 814.871127][ T5918] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 814.880356][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.907253][ T5918] usb 6-1: config 0 descriptor?? [ 814.926151][ T5918] usb 6-1: selecting invalid altsetting 3 [ 814.934078][ T5918] comedi comedi4: could not set alternate setting 3 in high speed [ 814.941968][ T5918] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 814.961514][ T5918] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 815.955232][ T30] audit: type=1400 audit(2000000237.210:2413): avc: denied { read } for pid=13789 comm="syz.0.1689" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 816.236845][ T30] audit: type=1400 audit(2000000237.210:2414): avc: denied { open } for pid=13789 comm="syz.0.1689" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 816.263682][T13794] syz.3.1691 (13794): drop_caches: 2 [ 816.395549][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1687'. [ 816.561005][ T5918] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 816.607517][T13810] 9pnet_fd: Insufficient options for proto=fd [ 816.875361][ T5918] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 816.883658][ T5918] usb 4-1: config 0 has no interface number 0 [ 816.897720][ T5918] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 816.909786][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.919844][ T5918] usb 4-1: Product: syz [ 816.925112][ T5918] usb 4-1: Manufacturer: syz [ 816.931006][ T5918] usb 4-1: SerialNumber: syz [ 816.938159][ T5918] usb 4-1: config 0 descriptor?? [ 816.947389][ T5918] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0 [ 817.149902][ T5918] qmi_wwan 4-1:0.172: probe with driver qmi_wwan failed with error -22 [ 817.319805][ T5868] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 817.355848][T13805] siw: device registration error -23 [ 817.362984][ T1203] usb 4-1: USB disconnect, device number 17 [ 817.469736][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 817.479308][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.493764][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.504256][ T5868] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 817.513544][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.521413][ T5918] usb 6-1: USB disconnect, device number 17 [ 817.541673][ T5868] usb 5-1: config 0 descriptor?? [ 817.693241][ T30] audit: type=1400 audit(2000000238.970:2415): avc: denied { setopt } for pid=13815 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 817.870100][T13821] netlink: 'syz.5.1697': attribute type 13 has an invalid length. [ 817.950990][T13821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.980085][ T1203] lo speed is unknown, defaulting to 1000 [ 818.040837][T13814] sctp: [Deprecated]: syz.4.1695 (pid 13814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.040837][T13814] Use struct sctp_sack_info instead [ 818.066676][T13824] overlayfs: conflicting options: nfs_export=on,index=off [ 818.305385][T13826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.385013][ T5868] ft260 0003:0403:6030.0006: collection stack underflow [ 818.392074][ T5868] ft260 0003:0403:6030.0006: item 0 1 0 12 parsing failed [ 818.399477][ T5868] ft260 0003:0403:6030.0006: failed to parse HID [ 818.406330][ T5868] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -22 [ 818.749859][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 818.836711][ T5927] usb 5-1: USB disconnect, device number 29 [ 818.909833][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 818.916299][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.936485][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.946586][ T5918] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 818.956736][ T30] audit: type=1400 audit(2000000240.240:2416): avc: denied { create } for pid=13834 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 818.977395][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.988263][ T5918] usb 3-1: config 0 descriptor?? [ 819.676085][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 820.232505][ T5918] usbhid 3-1:0.0: can't add hid device: -71 [ 820.238571][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 820.374760][ T5918] usb 3-1: USB disconnect, device number 20 [ 820.445085][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 821.205788][ T30] audit: type=1400 audit(2000000242.420:2417): avc: denied { read } for pid=13855 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 821.945680][T13870] qnx4: no qnx4 filesystem (no root dir). [ 822.407434][ T5918] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 822.871529][ T5918] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 822.934273][ T5918] usb 3-1: config 0 has no interface number 0 [ 822.945889][ T5918] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 822.956986][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.965533][ T5918] usb 3-1: Product: syz [ 822.972653][ T5918] usb 3-1: Manufacturer: syz [ 822.977492][ T5918] usb 3-1: SerialNumber: syz [ 822.984421][ T5918] usb 3-1: config 0 descriptor?? [ 823.064224][ T5918] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 823.139072][ T30] audit: type=1400 audit(2000000244.410:2418): avc: denied { setopt } for pid=13879 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 823.280806][ T30] audit: type=1400 audit(2000000244.410:2419): avc: denied { write } for pid=13879 comm="syz.5.1712" path="socket:[45316]" dev="sockfs" ino=45316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 823.432984][ T5918] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 823.498911][ T30] audit: type=1400 audit(2000000244.770:2420): avc: denied { ioctl } for pid=13887 comm="syz.4.1714" path="socket:[45326]" dev="sockfs" ino=45326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 823.842776][ T5868] usb 3-1: USB disconnect, device number 21 [ 824.536339][ T30] audit: type=1400 audit(2000000245.810:2421): avc: denied { watch } for pid=13890 comm="syz.5.1715" path="/328/bus/file1" dev="overlay" ino=1790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 824.651866][ T30] audit: type=1400 audit(2000000245.890:2422): avc: denied { read } for pid=13887 comm="syz.4.1714" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 824.792620][ T30] audit: type=1400 audit(2000000245.890:2423): avc: denied { open } for pid=13887 comm="syz.4.1714" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 824.867271][ T30] audit: type=1400 audit(2000000245.890:2424): avc: denied { ioctl } for pid=13887 comm="syz.4.1714" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 825.528295][ T30] audit: type=1326 audit(2000000246.800:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 825.647154][ T30] audit: type=1326 audit(2000000246.830:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 825.715783][ T30] audit: type=1326 audit(2000000246.830:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 825.842199][ T30] audit: type=1326 audit(2000000246.830:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 825.948298][T13920] syz.0.1721 (13920): drop_caches: 2 [ 826.298103][ T30] audit: type=1326 audit(2000000246.830:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 826.367057][ T30] audit: type=1326 audit(2000000246.840:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 827.440100][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1723'. [ 827.871172][T13945] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 827.878381][T13945] cramfs: wrong magic [ 829.360791][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 829.740429][ T5868] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 829.891300][ T5868] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 829.910212][ T5868] usb 3-1: config 0 has no interface number 0 [ 829.924819][ T5868] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 829.942745][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.959860][ T5868] usb 3-1: Product: syz [ 829.966407][ T5868] usb 3-1: Manufacturer: syz [ 829.985188][ T5868] usb 3-1: SerialNumber: syz [ 829.997335][ T5868] usb 3-1: config 0 descriptor?? [ 830.007788][ T5868] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 830.208767][ T5868] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 830.425870][ T5868] usb 3-1: USB disconnect, device number 22 [ 830.521580][T13974] overlayfs: overlapping lowerdir path [ 831.289918][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 831.289954][ T30] audit: type=1400 audit(2000000252.560:2442): avc: denied { append } for pid=13978 comm="syz.0.1734" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 831.319409][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.544535][ T30] audit: type=1400 audit(2000000252.720:2443): avc: denied { write } for pid=13978 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 831.855488][ T30] audit: type=1326 audit(2000000253.130:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 831.923626][ T30] audit: type=1326 audit(2000000253.130:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 831.956319][ T30] audit: type=1326 audit(2000000253.170:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 831.981074][ T30] audit: type=1326 audit(2000000253.170:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 832.004498][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.011248][ T30] audit: type=1326 audit(2000000253.170:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 832.034675][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.049938][ T30] audit: type=1326 audit(2000000253.260:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 832.073289][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.080214][ T30] audit: type=1326 audit(2000000253.260:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 832.103647][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.190705][ T30] audit: type=1326 audit(2000000253.260:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844938efc9 code=0x7ffc0000 [ 832.772817][T13994] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1735'. [ 832.781920][T13994] unsupported nlmsg_type 40 [ 835.299675][T14034] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 835.307447][T14034] netlink: 'syz.2.1744': attribute type 2 has an invalid length. [ 835.906909][T14041] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1747'. [ 837.446513][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 837.446524][ T30] audit: type=1400 audit(2000000258.720:2478): avc: denied { listen } for pid=14061 comm="syz.0.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 837.472690][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.495651][ T30] audit: type=1400 audit(2000000258.770:2479): avc: denied { getopt } for pid=14061 comm="syz.0.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 837.602935][ T30] audit: type=1400 audit(2000000258.790:2480): avc: denied { ioctl } for pid=14061 comm="syz.0.1752" path="socket:[46574]" dev="sockfs" ino=46574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 837.627693][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.470386][ T30] audit: type=1804 audit(2000000259.740:2481): pid=14066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1751" name="/newroot/333/file0" dev="tmpfs" ino=1801 res=1 errno=0 [ 838.492867][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.694138][ T30] audit: type=1400 audit(2000000259.970:2482): avc: denied { accept } for pid=14067 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 842.358343][T14109] mkiss: ax0: crc mode is auto. [ 843.123662][T14123] netlink: 'syz.5.1764': attribute type 1 has an invalid length. [ 843.131446][T14123] netlink: 'syz.5.1764': attribute type 2 has an invalid length. [ 845.433154][ T5927] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 845.477406][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'. [ 846.059887][ T30] audit: type=1400 audit(2000000267.050:2483): avc: denied { connect } for pid=14142 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 846.114439][ T5927] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 846.123156][ T5927] usb 5-1: config 0 has no interface number 0 [ 846.131097][ T5927] usb 5-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 846.140207][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.153281][ T5927] usb 5-1: Product: syz [ 846.158930][ T5927] usb 5-1: Manufacturer: syz [ 846.168875][ T30] audit: type=1400 audit(2000000267.310:2484): avc: denied { ioctl } for pid=14142 comm="syz.5.1770" path="socket:[46855]" dev="sockfs" ino=46855 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 846.208333][ T5927] usb 5-1: SerialNumber: syz [ 846.257387][ T5927] usb 5-1: config 0 descriptor?? [ 846.271122][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'. [ 846.281964][ T5927] qmi_wwan 5-1:0.172: bogus CDC Union: master=0, slave=0 [ 846.688781][ T5927] qmi_wwan 5-1:0.172: probe with driver qmi_wwan failed with error -22 [ 847.919841][ T5927] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 848.019757][T14167] macvlan0: entered promiscuous mode [ 848.025831][T14167] macvlan0: entered allmulticast mode [ 848.032321][T14167] bond3: entered promiscuous mode [ 848.038087][T14167] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 848.046176][T14167] bond3: left promiscuous mode [ 848.072162][T14140] siw: device registration error -23 [ 848.083097][ T1203] usb 5-1: USB disconnect, device number 30 [ 848.171302][ T5927] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 848.278885][ T5927] usb 6-1: config 0 has no interface number 0 [ 848.287302][ T5927] usb 6-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 848.314635][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.329698][ T5927] usb 6-1: Product: syz [ 848.329768][ T5868] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 848.333862][ T5927] usb 6-1: Manufacturer: syz [ 848.455074][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 848.473018][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 848.497568][ T30] audit: type=1400 audit(2000000269.720:2485): avc: denied { bind } for pid=14172 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 848.792120][ T5927] usb 6-1: SerialNumber: syz [ 848.806514][ T5927] usb 6-1: config 0 descriptor?? [ 848.822672][ T5927] qmi_wwan 6-1:0.172: bogus CDC Union: master=0, slave=0 [ 848.841214][ T5868] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 848.849394][ T5868] usb 3-1: config 0 has no interface number 0 [ 848.871861][ T5868] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 848.885080][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.904532][ T5868] usb 3-1: Product: syz [ 848.908717][ T5868] usb 3-1: Manufacturer: syz [ 848.976552][ T5868] usb 3-1: SerialNumber: syz [ 849.006821][T14178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1777'. [ 849.062172][ T5868] usb 3-1: config 0 descriptor?? [ 849.069536][ T5868] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 849.226871][ T5927] qmi_wwan 6-1:0.172: probe with driver qmi_wwan failed with error -22 [ 849.368283][ T5868] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 849.433021][T14161] siw: device registration error -23 [ 849.440086][ T5868] usb 6-1: USB disconnect, device number 18 [ 849.655482][ T5927] usb 3-1: USB disconnect, device number 23 [ 849.831920][T14192] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 849.839847][T14192] netlink: 'syz.4.1780': attribute type 2 has an invalid length. [ 850.200491][T14193] netlink: 'syz.3.1779': attribute type 16 has an invalid length. [ 850.745598][T14197] block device autoloading is deprecated and will be removed. [ 850.759290][T14197] FAT-fs (loop1): unable to read boot sector [ 850.942110][ T30] audit: type=1400 audit(2000000271.890:2486): avc: denied { mounton } for pid=14194 comm="syz.0.1781" path="/369/file0" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 851.188647][ T30] audit: type=1326 audit(2000000272.460:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.218308][ T30] audit: type=1326 audit(2000000272.460:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.251877][ T30] audit: type=1326 audit(2000000272.460:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.325998][ T7268] Bluetooth: hci0: Frame reassembly failed (-84) [ 851.374744][ T30] audit: type=1326 audit(2000000272.460:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.527149][ T30] audit: type=1326 audit(2000000272.460:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.602391][ T30] audit: type=1326 audit(2000000272.520:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.787296][ T30] audit: type=1326 audit(2000000272.520:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 851.965180][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 852.354770][T14216] lo speed is unknown, defaulting to 1000 [ 852.415913][T14214] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 852.666238][ T30] audit: type=1326 audit(2000000272.520:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 852.719834][ T30] audit: type=1326 audit(2000000272.520:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 852.752177][ T30] audit: type=1326 audit(2000000272.520:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14198 comm="syz.5.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 853.359915][T11304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 853.377248][T14228] siw: device registration error -23 [ 853.789695][ T5868] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 853.951354][ T5868] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 853.959749][ T5868] usb 3-1: config 0 has no interface number 0 [ 853.967717][ T5868] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 853.977448][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.985646][ T5868] usb 3-1: Product: syz [ 854.483606][ T5868] usb 3-1: Manufacturer: syz [ 854.492776][ T5868] usb 3-1: SerialNumber: syz [ 854.499239][ T5868] usb 3-1: config 0 descriptor?? [ 854.506985][ T5868] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 854.515918][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1790'. [ 854.770703][ T5868] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 856.838583][T14251] siw: device registration error -23 [ 856.951715][ T5927] usb 3-1: USB disconnect, device number 24 [ 857.299782][ T5868] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 857.323835][T14266] SET target dimension over the limit! [ 857.417139][T14266] random: crng reseeded on system resumption [ 857.423310][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 857.423324][ T30] audit: type=1400 audit(2000000278.690:2555): avc: denied { read } for pid=14259 comm="syz.3.1797" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 857.468287][ T30] audit: type=1400 audit(2000000278.690:2556): avc: denied { ioctl } for pid=14259 comm="syz.3.1797" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 857.492877][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 857.499403][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.519941][ T5868] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 857.666368][ T5868] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 857.690656][ T5868] usb 6-1: config 0 interface 0 has no altsetting 1 [ 857.706737][ T5868] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 857.734529][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.293968][ T5868] usb 6-1: Product: syz [ 858.315237][ T5868] usb 6-1: Manufacturer: syz [ 858.335683][ T5868] usb 6-1: SerialNumber: syz [ 859.340556][ T5868] usb 6-1: config 0 descriptor?? [ 859.635830][ T5868] usb 6-1: USB disconnect, device number 19 [ 859.919920][ T5918] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 860.176579][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 860.247562][ T5918] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 860.370049][T14289] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1803'. [ 860.395946][T14295] tmpfs: Bad value for 'huge' [ 860.403024][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 860.785071][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.805991][T14280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.820251][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 861.707327][ T30] audit: type=1400 audit(2000000282.980:2557): avc: denied { getopt } for pid=14279 comm="syz.4.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 862.554147][ T5918] usb 5-1: USB disconnect, device number 31 [ 864.025998][ T30] audit: type=1400 audit(2000000285.300:2558): avc: denied { search } for pid=14306 comm="syz.0.1807" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 864.287224][ T30] audit: type=1400 audit(2000000285.300:2559): avc: denied { search } for pid=14306 comm="syz.0.1807" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 864.445110][ T30] audit: type=1400 audit(2000000285.720:2560): avc: denied { create } for pid=14316 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 865.080907][ T30] audit: type=1400 audit(2000000285.980:2561): avc: denied { setopt } for pid=14316 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 865.117521][ T30] audit: type=1400 audit(2000000285.980:2562): avc: denied { connect } for pid=14316 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 865.379719][ T5918] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 865.582853][ T5918] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 865.960887][ T5918] usb 5-1: config 0 has no interface number 0 [ 865.993853][ T5918] usb 5-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 866.023118][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.054275][ T5918] usb 5-1: Product: syz [ 866.067735][ T5918] usb 5-1: Manufacturer: syz [ 866.081002][ T5918] usb 5-1: SerialNumber: syz [ 866.221674][ T5918] usb 5-1: config 0 descriptor?? [ 866.228887][ T5918] qmi_wwan 5-1:0.172: bogus CDC Union: master=0, slave=0 [ 866.722841][ T5918] qmi_wwan 5-1:0.172: probe with driver qmi_wwan failed with error -22 [ 866.746910][ T30] audit: type=1326 audit(2000000288.020:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 866.840064][ T30] audit: type=1326 audit(2000000288.020:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 866.867736][ T30] audit: type=1326 audit(2000000288.050:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 866.891259][ T30] audit: type=1326 audit(2000000288.050:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 866.916020][ T30] audit: type=1326 audit(2000000288.050:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14331 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 866.949172][T14338] netlink: 'syz.5.1814': attribute type 12 has an invalid length. [ 867.365317][T14321] siw: device registration error -23 [ 867.374958][ T5918] usb 5-1: USB disconnect, device number 32 [ 867.692254][T14352] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 867.700087][T14352] netlink: 'syz.2.1815': attribute type 2 has an invalid length. [ 868.061965][T14344] siw: device registration error -23 [ 869.249892][ T5918] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 869.390507][T14378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.603857][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.611356][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.826265][ T5918] usb 5-1: config 0 has no interfaces? [ 869.881318][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.895788][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.923613][ T5918] usb 5-1: Product: syz [ 869.937994][ T5918] usb 5-1: Manufacturer: syz [ 869.957350][ T5918] usb 5-1: SerialNumber: syz [ 869.985834][ T5918] usb 5-1: config 0 descriptor?? [ 870.504320][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 870.504331][ T30] audit: type=1400 audit(2000000291.780:2578): avc: denied { firmware_load } for pid=14380 comm="syz.5.1823" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 870.629367][T14377] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 870.637447][T14377] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 871.247554][T14387] bridge0: port 1(team0) entered disabled state [ 871.640281][T14403] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 871.648067][T14403] netlink: 'syz.5.1827': attribute type 2 has an invalid length. [ 872.113934][T14387] team0 (unregistering): left allmulticast mode [ 872.120686][T14387] team0 (unregistering): left promiscuous mode [ 872.127728][T14387] bridge0: port 1(team0) entered disabled state [ 872.146316][ T30] audit: type=1400 audit(2000000293.410:2579): avc: denied { ioctl } for pid=14404 comm="syz.0.1828" path="socket:[48411]" dev="sockfs" ino=48411 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 872.299099][ T30] audit: type=1400 audit(2000000293.410:2580): avc: denied { write } for pid=14404 comm="syz.0.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 872.581048][ T5918] usb 5-1: USB disconnect, device number 33 [ 872.618176][ T30] audit: type=1400 audit(2000000293.890:2581): avc: denied { write } for pid=14416 comm="syz.4.1831" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 874.085163][ T30] audit: type=1400 audit(2000000295.360:2582): avc: denied { append } for pid=14432 comm="syz.2.1834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 874.180798][T14443] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 874.216264][ T30] audit: type=1400 audit(2000000295.490:2583): avc: denied { ioctl } for pid=14438 comm="syz.3.1835" path="socket:[48466]" dev="sockfs" ino=48466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 875.683121][ T5868] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 875.952607][T14466] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 875.960419][T14466] netlink: 'syz.0.1839': attribute type 2 has an invalid length. [ 876.374659][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 876.402248][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.542959][ T5868] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 876.860382][T14472] vxfs: WRONG superblock magic 00000000 at 1 [ 876.867951][T14472] vxfs: WRONG superblock magic 00000000 at 8 [ 876.874026][T14472] vxfs: can't find superblock. [ 876.989428][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.008547][T14470] ceph: No mds server is up or the cluster is laggy [ 877.015427][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 877.022011][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 877.022395][ T5868] usb 6-1: config 0 descriptor?? [ 877.535696][T14479] netlink: 'syz.0.1841': attribute type 4 has an invalid length. [ 878.585161][ T5868] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 879.064260][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 879.082439][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 879.109742][T14491] ceph: No mds server is up or the cluster is laggy [ 879.549825][T14506] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 879.557642][T14506] netlink: 'syz.4.1846': attribute type 2 has an invalid length. [ 879.887465][ T5868] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 879.905709][ T5868] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 879.941572][ T5868] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 880.336875][ T5868] usb 6-1: USB disconnect, device number 20 [ 880.443337][T14516] netlink: 'syz.0.1848': attribute type 1 has an invalid length. [ 880.451128][T14516] netlink: 'syz.0.1848': attribute type 2 has an invalid length. [ 882.882584][ T30] audit: type=1400 audit(2000000303.550:2584): avc: denied { accept } for pid=14527 comm="syz.3.1852" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 884.012782][ T30] audit: type=1400 audit(2000000305.240:2585): avc: denied { write } for pid=14534 comm="syz.3.1854" path="socket:[48667]" dev="sockfs" ino=48667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 886.296982][ T30] audit: type=1326 audit(2000000307.570:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.371557][ T30] audit: type=1326 audit(2000000307.570:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.425344][ T30] audit: type=1326 audit(2000000307.570:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.450235][ T30] audit: type=1326 audit(2000000307.570:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.474055][ T30] audit: type=1326 audit(2000000307.570:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.567389][ T30] audit: type=1326 audit(2000000307.570:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.621598][T14557] overlayfs: conflicting options: nfs_export=on,index=off [ 886.632799][ T30] audit: type=1326 audit(2000000307.570:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 886.660767][ T30] audit: type=1326 audit(2000000307.570:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 887.392849][T14569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.637473][T14583] bridge4: entered promiscuous mode [ 891.969787][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 891.969859][ T30] audit: type=1326 audit(2000000313.240:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 892.067299][ T30] audit: type=1326 audit(2000000313.240:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 892.102919][ T30] audit: type=1326 audit(2000000313.240:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 892.152211][ T30] audit: type=1326 audit(2000000313.250:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 892.180605][ T30] audit: type=1326 audit(2000000313.290:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 892.268184][ T30] audit: type=1326 audit(2000000313.540:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 892.330709][ T30] audit: type=1326 audit(2000000313.540:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 893.059739][T14605] netlink: 'syz.5.1868': attribute type 1 has an invalid length. [ 893.067580][T14605] netlink: 'syz.5.1868': attribute type 2 has an invalid length. [ 894.068164][T14619] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 895.993086][T14658] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 897.287729][T14674] net veth1_virt_wifi : renamed from virt_wifi0 [ 897.422728][T14674] bridge0: port 3(batadv2) entered blocking state [ 897.432455][T14674] bridge0: port 3(batadv2) entered disabled state [ 897.438993][T14674] batadv2: entered allmulticast mode [ 897.448997][T14674] batadv2: entered promiscuous mode [ 897.690160][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 898.043598][ T7215] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 898.052814][ T7215] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 898.486623][T14685] pim6reg: entered allmulticast mode [ 899.339283][T14684] pim6reg: left allmulticast mode [ 901.780922][ T30] audit: type=1326 audit(2000000323.020:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7fc00000 [ 902.018986][ T5918] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 902.189749][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 902.217758][T14705] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 902.225606][T14705] netlink: 'syz.3.1891': attribute type 2 has an invalid length. [ 902.278852][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 902.383438][ T5918] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 902.609835][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.617855][ T5918] usb 3-1: Product: syz [ 902.622741][ T5918] usb 3-1: Manufacturer: syz [ 902.629696][ T5918] usb 3-1: SerialNumber: syz [ 902.635574][ T5918] usb 3-1: config 0 descriptor?? [ 902.644148][T14695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 902.705566][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.012610][T14713] IPv6: Can't replace route, no match found [ 903.587759][T14716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.891340][ T5918] usb 3-1: USB disconnect, device number 25 [ 904.160693][T14728] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 907.567272][T14753] netlink: 'syz.5.1903': attribute type 21 has an invalid length. [ 907.575243][T14753] IPv6: NLM_F_CREATE should be specified when creating new route [ 907.585754][T14753] IPv6: Can't replace route, no match found [ 907.729697][ T30] audit: type=1400 audit(2000000329.003:2637): avc: denied { read write } for pid=14752 comm="syz.4.1906" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 908.718399][ T30] audit: type=1400 audit(2000000329.003:2638): avc: denied { open } for pid=14752 comm="syz.4.1906" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 908.754301][ T30] audit: type=1400 audit(2000000329.373:2639): avc: denied { mounton } for pid=14752 comm="syz.4.1906" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 908.885242][T14762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 909.169849][T14768] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 909.177623][T14768] netlink: 'syz.3.1908': attribute type 2 has an invalid length. [ 909.185679][T14769] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 909.193502][T14769] netlink: 'syz.2.1904': attribute type 2 has an invalid length. [ 910.941604][ T30] audit: type=1400 audit(2000000332.093:2640): avc: denied { ioctl } for pid=14774 comm="syz.0.1909" path="socket:[49278]" dev="sockfs" ino=49278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 913.263180][T14794] ceph: No mds server is up or the cluster is laggy [ 913.287382][ T5918] libceph: connect (1)[c::]:6789 error -22 [ 913.288889][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 913.363747][T14797] vxfs: WRONG superblock magic 00000000 at 1 [ 913.370851][T14797] vxfs: WRONG superblock magic 00000000 at 8 [ 913.376867][T14797] vxfs: can't find superblock. [ 915.016129][ T30] audit: type=1400 audit(2000000336.293:2641): avc: denied { setopt } for pid=14803 comm="syz.0.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 915.038445][T14805] ceph: No mds server is up or the cluster is laggy [ 915.047643][ T5918] libceph: connect (1)[b::]:6789 error -101 [ 915.177579][ T5918] libceph: mon0 (1)[b::]:6789 connect error [ 917.066531][T14841] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 917.074359][T14841] netlink: 'syz.2.1923': attribute type 2 has an invalid length. [ 917.712929][ T30] audit: type=1400 audit(2000000338.993:2642): avc: denied { shutdown } for pid=14842 comm="syz.0.1924" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 917.891628][T14852] random: crng reseeded on system resumption [ 918.216159][ T30] audit: type=1400 audit(2000000339.493:2643): avc: denied { write } for pid=14854 comm="syz.3.1928" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 920.118863][T14855] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 922.087708][T14880] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1931'. [ 922.098587][T14880] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1931'. [ 922.108925][T14880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=14880 comm=syz.0.1931 [ 922.256769][T14892] netlink: 'syz.5.1932': attribute type 1 has an invalid length. [ 922.264580][T14892] netlink: 'syz.5.1932': attribute type 2 has an invalid length. [ 923.175871][T14903] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 923.726540][T14903] lo speed is unknown, defaulting to 1000 [ 924.289749][T14908] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 924.297496][T14908] netlink: 'syz.2.1938': attribute type 2 has an invalid length. [ 925.233687][T14916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.242320][T14916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.279050][T14916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.347480][T14916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.929681][T14934] overlayfs: missing 'lowerdir' [ 926.059205][ T30] audit: type=1400 audit(2000000347.303:2644): avc: denied { map } for pid=14928 comm="syz.4.1945" path="socket:[50494]" dev="sockfs" ino=50494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 926.376898][ T30] audit: type=1400 audit(2000000347.323:2645): avc: denied { create } for pid=14928 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 926.695763][T14938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1943'. [ 926.839954][T14938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 927.022704][ T30] audit: type=1800 audit(2000000348.303:2646): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1946" name="file1" dev="tmpfs" ino=2099 res=0 errno=0 [ 927.952916][ T30] audit: type=1400 audit(2000000349.233:2647): avc: denied { read } for pid=14951 comm="syz.3.1949" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 928.017283][ T30] audit: type=1400 audit(2000000349.233:2648): avc: denied { open } for pid=14951 comm="syz.3.1949" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 929.264914][T14964] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 929.719217][T14967] dns_resolver: Unsupported content type (5) [ 930.342125][T14978] random: crng reseeded on system resumption [ 930.361656][T14978] nfs4: Unknown parameter 'noaal' [ 931.043548][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.050970][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.408999][T14990] syz.3.1955 (14990): drop_caches: 2 [ 932.150134][ T30] audit: type=1400 audit(2000000353.373:2649): avc: denied { getopt } for pid=14993 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 935.360204][ T30] audit: type=1400 audit(2000000356.313:2650): avc: denied { wake_alarm } for pid=15027 comm="syz.3.1963" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 937.111922][ T30] audit: type=1400 audit(2000000357.603:2651): avc: denied { write } for pid=15033 comm="syz.4.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 938.353802][T15049] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1966'. [ 940.405838][T15053] netlink: 'syz.4.1967': attribute type 4 has an invalid length. [ 942.518087][ T30] audit: type=1400 audit(2000000363.226:2652): avc: denied { listen } for pid=15076 comm="syz.5.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 942.558986][ T30] audit: type=1400 audit(2000000363.226:2653): avc: denied { connect } for pid=15076 comm="syz.5.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 944.393189][ T30] audit: type=1400 audit(2000000365.556:2654): avc: denied { setopt } for pid=15114 comm="syz.0.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 944.412824][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.387072][ T30] audit: type=1326 audit(2000000366.646:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8be98efc9 code=0x7ffc0000 [ 945.410561][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.438647][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 945.751237][ T30] audit: type=1326 audit(2000000366.646:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8be98efc9 code=0x7ffc0000 [ 945.775120][ T30] audit: type=1326 audit(2000000366.646:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8be98efc9 code=0x7ffc0000 [ 945.847447][ T30] audit: type=1326 audit(2000000366.656:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8be98efc9 code=0x7ffc0000 [ 946.008347][T15131] netlink: 'syz.5.1985': attribute type 1 has an invalid length. [ 946.014114][ T30] audit: type=1326 audit(2000000366.656:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8be98efc9 code=0x7ffc0000 [ 946.278131][T15133] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 946.284648][T15133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 946.292441][T15133] vhci_hcd vhci_hcd.0: Device attached [ 946.311638][T15131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.229875][T15139] vhci_hcd: connection closed [ 947.232622][ T30] audit: type=1326 audit(2000000366.656:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz.3.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb8be98efc9 code=0x7ffc0000 [ 947.261056][ T7215] vhci_hcd: stop threads [ 947.265280][ T7215] vhci_hcd: release socket [ 947.299838][ T7215] vhci_hcd: disconnect device [ 947.329665][ T30] audit: type=1400 audit(2000000366.706:2661): avc: denied { shutdown } for pid=15123 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 947.944145][T15153] syz.4.1989 (15153): drop_caches: 2 [ 948.198475][T15161] netlink: 'syz.0.1990': attribute type 1 has an invalid length. [ 948.265114][T15161] gretap0: entered promiscuous mode [ 948.376764][T15161] macvlan2: entered promiscuous mode [ 948.382228][T15161] macvlan2: entered allmulticast mode [ 948.389360][T15161] bond3: entered promiscuous mode [ 948.396001][T15161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 948.599332][T15161] bond3: left promiscuous mode [ 949.468884][T15167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15167 comm=syz.4.1992 [ 949.914967][T15184] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 949.922921][T15184] netlink: 'syz.0.1995': attribute type 2 has an invalid length. [ 950.424656][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 950.439025][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 950.632223][T15190] netlink: 'syz.5.1997': attribute type 1 has an invalid length. [ 950.640184][T15190] netlink: 'syz.5.1997': attribute type 2 has an invalid length. [ 951.029736][T15188] netlink: 'syz.4.1996': attribute type 21 has an invalid length. [ 951.376737][T15188] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1996'. [ 951.396482][T15188] netlink: 'syz.4.1996': attribute type 5 has an invalid length. [ 951.421931][T15188] netlink: 'syz.4.1996': attribute type 6 has an invalid length. [ 951.429927][T15188] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1996'. [ 951.703954][T15208] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 951.711763][T15208] netlink: 'syz.3.2001': attribute type 2 has an invalid length. [ 952.464386][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'. [ 953.320023][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 953.409320][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 953.409334][ T30] audit: type=1400 audit(2000000374.676:2668): avc: denied { name_bind } for pid=15193 comm="syz.2.1999" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 953.479689][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 953.486715][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.523939][ T5927] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 953.537540][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 953.551831][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.582640][ T5927] usb 4-1: config 0 descriptor?? [ 953.730448][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 953.950024][ T30] audit: type=1326 audit(2000000375.226:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.009826][ T30] audit: type=1326 audit(2000000375.226:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.039933][ T30] audit: type=1326 audit(2000000375.226:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.112196][ T30] audit: type=1326 audit(2000000375.226:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.235382][ T30] audit: type=1326 audit(2000000375.226:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.284591][ T30] audit: type=1326 audit(2000000375.226:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.317584][ T30] audit: type=1326 audit(2000000375.226:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.341988][ T30] audit: type=1326 audit(2000000375.226:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.394227][ T30] audit: type=1326 audit(2000000375.226:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 954.656137][T15238] pim6reg: entered allmulticast mode [ 954.752578][T15248] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 954.844706][T15248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 954.895071][T15251] bond4: (slave veth5): Enslaving as an active interface with a down link [ 954.961309][T15248] vlan2: entered allmulticast mode [ 954.976567][T15248] veth1: entered allmulticast mode [ 955.017102][T15248] bond4: (slave vlan2): Opening slave failed [ 955.890090][T14558] usb 4-1: USB disconnect, device number 18 [ 956.482437][T15263] veth0_to_team: left promiscuous mode [ 956.487978][T15263] veth0_to_team: left allmulticast mode [ 956.769860][ T5927] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 956.951369][ T5927] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 956.959799][ T5927] usb 4-1: config 0 has no interface number 0 [ 956.974641][ T5927] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 957.012438][ T5927] usb 4-1: config 0 interface 235 has no altsetting 0 [ 957.144393][ T5927] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 957.154306][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.162937][ T5927] usb 4-1: Product: syz [ 957.167076][ T5927] usb 4-1: Manufacturer: syz [ 957.172087][ T5927] usb 4-1: SerialNumber: syz [ 957.177939][ T5927] usb 4-1: config 0 descriptor?? [ 957.184332][ T5927] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 957.192142][ T5927] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 957.587939][ T5927] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 957.614345][ T5927] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 957.623033][ T5927] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 957.632808][ T5927] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 957.641866][ T5927] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 958.983334][ T5927] usb 4-1: USB disconnect, device number 19 [ 959.020268][ T5927] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 959.030305][ T5927] keyspan 4-1:0.235: device disconnected [ 959.465477][T14558] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 960.286453][T14558] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 960.299668][T14558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.336307][T14558] usb 6-1: config 0 has no interfaces? [ 960.341861][T14558] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 960.350940][T14558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.432902][T14558] usb 6-1: config 0 descriptor?? [ 960.918085][T15307] siw: device registration error -23 [ 961.380875][T15287] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2018'. [ 962.419686][T14558] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 962.829654][T14558] usb 3-1: Using ep0 maxpacket: 32 [ 962.946156][T14558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.610093][T14558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.709776][T14558] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 963.718821][T14558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.913941][T14558] usb 3-1: config 0 descriptor?? [ 964.210547][T15334] overlayfs: overlapping lowerdir path [ 965.495428][T14558] usbhid 3-1:0.0: can't add hid device: -71 [ 965.501500][T14558] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 965.571305][T14558] usb 3-1: USB disconnect, device number 26 [ 965.595529][ T5927] usb 6-1: USB disconnect, device number 21 [ 966.566585][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 966.566601][ T30] audit: type=1400 audit(2000000387.836:2684): avc: denied { mounton } for pid=15343 comm="syz.5.2034" path="/proc/1703/task" dev="proc" ino=51496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 967.037728][T15373] netlink: 'syz.2.2036': attribute type 1 has an invalid length. [ 967.045542][T15373] netlink: 'syz.2.2036': attribute type 2 has an invalid length. [ 967.276407][T15376] netlink: 'syz.0.2037': attribute type 4 has an invalid length. [ 968.346084][T15383] overlayfs: failed to clone lowerpath [ 968.430229][T15384] overlayfs: failed to clone upperpath [ 970.189077][ T30] audit: type=1400 audit(2000000391.326:2685): avc: denied { kexec_image_load } for pid=15398 comm="syz.0.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 970.422233][T15410] tipc: Started in network mode [ 970.427211][T15410] tipc: Node identity 4, cluster identity 4711 [ 970.433497][T15410] tipc: Node number set to 4 [ 971.378358][T15424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15424 comm=syz.4.2046 [ 972.713911][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 974.086459][T15452] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 974.105315][T15452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2052'. [ 974.125555][T15452] batadv0: entered promiscuous mode [ 974.132007][T15452] batadv0: entered allmulticast mode [ 974.141061][T15452] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 974.157386][ T30] audit: type=1400 audit(2000000395.426:2686): avc: denied { accept } for pid=15450 comm="syz.0.2052" lport=45008 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 974.216017][ T30] audit: type=1400 audit(2000000395.486:2687): avc: denied { write } for pid=15450 comm="syz.0.2052" lport=45008 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 974.286377][T15458] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2050'. [ 974.308751][ T30] audit: type=1400 audit(2000000395.486:2688): avc: denied { setopt } for pid=15450 comm="syz.0.2052" lport=45008 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 974.340760][T14558] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 974.579644][T14558] usb 3-1: Using ep0 maxpacket: 32 [ 974.579911][ T5927] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 974.611555][T14558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.635884][T14558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.672457][T14558] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 974.701877][T14558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.750843][ T5927] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 974.760390][ T5927] usb 5-1: config 0 has no interface number 0 [ 974.781242][T14558] usb 3-1: config 0 descriptor?? [ 974.871277][ T5927] usb 5-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 974.895308][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.914723][ T5927] usb 5-1: Product: syz [ 974.918992][ T5927] usb 5-1: Manufacturer: syz [ 974.923981][ T5927] usb 5-1: SerialNumber: syz [ 974.930405][ T5927] usb 5-1: config 0 descriptor?? [ 974.943867][ T5927] qmi_wwan 5-1:0.172: bogus CDC Union: master=0, slave=0 [ 975.343946][T15474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=15474 comm=syz.5.2056 [ 975.462762][ T5927] qmi_wwan 5-1:0.172: probe with driver qmi_wwan failed with error -22 [ 975.643232][T14558] usbhid 3-1:0.0: can't add hid device: -71 [ 975.689770][T14558] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 975.809789][T15479] siw: device registration error -23 [ 975.828623][T14558] usb 3-1: USB disconnect, device number 27 [ 976.260566][T15480] lo speed is unknown, defaulting to 1000 [ 976.638179][ T30] audit: type=1400 audit(2000000397.906:2689): avc: denied { ioctl } for pid=15484 comm="syz.0.2058" path="socket:[51787]" dev="sockfs" ino=51787 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 977.232044][T15498] lo speed is unknown, defaulting to 1000 [ 978.634784][T14558] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 979.586644][ T5927] usb 5-1: USB disconnect, device number 34 [ 979.720023][T15515] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 979.782678][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2064'. [ 979.826022][T14558] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 979.870443][T14558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.898746][ T30] audit: type=1400 audit(2000000401.166:2690): avc: denied { getopt } for pid=15521 comm="syz.0.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 979.899293][T14558] usb 3-1: config 0 descriptor?? [ 979.967845][T14558] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 979.973148][ T30] audit: type=1400 audit(2000000401.246:2691): avc: denied { write } for pid=15516 comm="syz.4.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 980.176376][T15530] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 980.232372][ T5927] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 980.287030][T15531] gretap1: entered promiscuous mode [ 980.374495][T15507] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 980.385559][T15507] cramfs: wrong magic [ 980.565203][ T5927] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.602666][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 980.616490][ T5927] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 980.680994][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.711323][ T5927] usb 5-1: config 0 descriptor?? [ 981.187266][ T5927] nintendo 0003:057E:2009.0008: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 981.203359][T14558] gspca_cpia1: usb_control_msg 03, error -110 [ 981.226137][T14558] gspca_cpia1: usb_control_msg 01, error -32 [ 981.250076][T14558] gspca_cpia1: usb_control_msg 01, error -32 [ 981.280484][ T5927] nintendo 0003:057E:2009.0008: Failed to get joycon info; ret=-38 [ 981.293869][ T5927] nintendo 0003:057E:2009.0008: Failed to retrieve controller info; ret=-38 [ 981.303837][T14558] gspca_cpia1: usb_control_msg 01, error -32 [ 981.316052][ T5927] nintendo 0003:057E:2009.0008: Failed to initialize controller; ret=-38 [ 981.334873][ T5927] nintendo 0003:057E:2009.0008: probe - fail = -38 [ 981.346934][ T5927] nintendo 0003:057E:2009.0008: probe with driver nintendo failed with error -38 [ 981.363399][T14558] gspca_cpia1: usb_control_msg 01, error -32 [ 981.385183][T14558] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 982.435657][T14558] usb 5-1: USB disconnect, device number 35 [ 982.574288][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 982.583218][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2082'. [ 982.673816][ T5927] usb 3-1: USB disconnect, device number 28 [ 982.736470][T15560] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 982.761680][T15560] 8021q: adding VLAN 0 to HW filter on device bond5 [ 982.821564][T15560] bond5: (slave veth5): Enslaving as an active interface with a down link [ 982.855152][T15560] vlan0: entered allmulticast mode [ 982.860487][T15560] veth1: entered allmulticast mode [ 982.871029][T15560] bond5: (slave vlan0): Opening slave failed [ 983.019672][ T5927] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 983.183673][ T5927] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 983.208202][ T5927] usb 3-1: config 0 has no interface number 0 [ 983.218525][ T5927] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 983.242747][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.274962][ T5927] usb 3-1: Product: syz [ 983.288984][ T5927] usb 3-1: Manufacturer: syz [ 983.298689][ T5927] usb 3-1: SerialNumber: syz [ 983.312684][ T5927] usb 3-1: config 0 descriptor?? [ 983.367137][ T5927] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 983.433462][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 983.457313][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 983.521561][T15568] netlink: 'syz.5.2075': attribute type 21 has an invalid length. [ 983.531854][T15568] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2075'. [ 983.541319][T15568] netlink: 'syz.5.2075': attribute type 5 has an invalid length. [ 983.549101][T15568] netlink: 'syz.5.2075': attribute type 6 has an invalid length. [ 983.556934][T15568] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2075'. [ 983.708078][ T5927] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 983.863037][T15572] binder: 15567:15572 ioctl 4018620d 0 returned -22 [ 983.879914][ T30] audit: type=1400 audit(2000000405.136:2692): avc: denied { map } for pid=15567 comm="syz.4.2076" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 985.225690][T14558] usb 3-1: USB disconnect, device number 29 [ 986.878875][ T30] audit: type=1400 audit(2000000408.146:2693): avc: denied { module_load } for pid=15595 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 986.881044][T15597] Invalid ELF header magic: != ELF [ 987.171717][T14558] libceph: connect (1)[c::]:6789 error -101 [ 987.177988][T14558] libceph: mon0 (1)[c::]:6789 connect error [ 987.328414][T15610] ceph: No mds server is up or the cluster is laggy [ 988.862312][T15628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2089'. [ 988.893644][T15627] ubi31: attaching mtd0 [ 988.910308][T15627] ubi31: scanning is finished [ 988.915030][T15627] ubi31: empty MTD device detected [ 989.026667][ T30] audit: type=1400 audit(2000000410.156:2694): avc: denied { connect } for pid=15624 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 989.164878][T15627] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 989.172479][T15627] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 989.179805][T15627] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 989.186799][T15627] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 989.194277][T15627] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 989.201421][T15627] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 989.209458][T15627] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 335789567 [ 989.219470][T15627] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 989.243498][T15630] ubi31: background thread "ubi_bgt31d" started, PID 15630 [ 990.534912][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 991.868115][T15666] Invalid ELF header magic: != ELF [ 992.653221][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.662143][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.679661][ T5927] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 994.812138][ T30] audit: type=1400 audit(2000000416.089:2695): avc: denied { write } for pid=15700 comm="syz.3.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 994.840288][T15697] loop2: detected capacity change from 0 to 7 [ 994.860961][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 994.874056][T15697] Dev loop2: unable to read RDB block 7 [ 994.883463][T15697] loop2: unable to read partition table [ 994.903497][T15697] loop2: partition table beyond EOD, truncated [ 995.138427][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 995.297228][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 995.333545][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 995.429148][ T5927] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 995.438303][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.446386][ T5927] usb 3-1: Product: syz [ 995.450760][ T5927] usb 3-1: Manufacturer: syz [ 995.456523][ T5927] usb 3-1: SerialNumber: syz [ 995.509925][ T5927] usb 3-1: config 0 descriptor?? [ 995.518005][ T5927] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 995.565308][T15697] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 996.076424][ T30] audit: type=1400 audit(2000000417.349:2696): avc: denied { map } for pid=15686 comm="syz.2.2102" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 996.100083][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.209653][ T30] audit: type=1400 audit(2000000417.349:2697): avc: denied { execute } for pid=15686 comm="syz.2.2102" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 996.233639][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.733072][T15753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.491163][T15753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.749840][T14558] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 998.057328][T14558] usb 6-1: Using ep0 maxpacket: 16 [ 998.066704][T14558] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 998.089684][T14558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.102414][T14558] usb 6-1: Product: syz [ 998.106585][T14558] usb 6-1: Manufacturer: syz [ 998.117876][T14558] usb 6-1: SerialNumber: syz [ 998.131324][T14558] r8152-cfgselector 6-1: Unknown version 0x0000 [ 998.273041][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 998.509862][T14558] r8152-cfgselector 6-1: config 0 descriptor?? [ 998.559699][ T30] audit: type=1326 audit(2000000419.479:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.593219][ T30] audit: type=1326 audit(2000000419.479:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.622565][ T30] audit: type=1326 audit(2000000419.489:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.651315][ T30] audit: type=1326 audit(2000000419.489:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.674672][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.681281][ T30] audit: type=1326 audit(2000000419.489:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.705698][ T30] audit: type=1326 audit(2000000419.489:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.729822][ T30] audit: type=1326 audit(2000000419.559:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 998.755378][T14558] r8152-cfgselector 6-1: Unknown version 0x0020 [ 998.762547][T14558] r8152-cfgselector 6-1: bad CDC descriptors [ 1000.128590][ T5927] scsi host1: usb-storage 3-1:0.0 [ 1000.162528][ T5927] usb 3-1: USB disconnect, device number 30 [ 1000.291066][T15784] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 1000.298803][T15784] netlink: 'syz.3.2115': attribute type 2 has an invalid length. [ 1000.703269][ T5882] r8152-cfgselector 6-1: USB disconnect, device number 22 [ 1000.779226][T15786] 9pnet_fd: Insufficient options for proto=fd [ 1001.284143][T15796] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1001.305653][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2120'. [ 1001.327770][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2120'. [ 1001.349774][ T5882] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1001.549649][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 1001.619334][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1001.858129][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1001.858163][ T30] audit: type=1400 audit(2000000423.089:2706): avc: denied { setopt } for pid=15803 comm="syz.0.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1002.113662][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1002.125030][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1002.135040][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.192927][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1002.488220][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.971334][ T5882] usb 3-1: GET_CAPABILITIES returned 0 [ 1002.987010][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 1003.257128][T15792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2118'. [ 1003.292547][T15792] IPv6: sit2: Disabled Multicast RS [ 1003.450840][ T30] audit: type=1400 audit(2000000424.729:2707): avc: denied { ioctl } for pid=15790 comm="syz.2.2118" path="socket:[54540]" dev="sockfs" ino=54540 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1003.475513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.559060][ T30] audit: type=1400 audit(2000000424.749:2708): avc: denied { write } for pid=15790 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1003.637604][T15792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.640685][ T30] audit: type=1400 audit(2000000424.859:2709): avc: denied { search } for pid=15829 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.719674][ T30] audit: type=1400 audit(2000000424.859:2710): avc: denied { search } for pid=15829 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.781480][ T30] audit: type=1400 audit(2000000424.859:2711): avc: denied { search } for pid=15829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.877182][ T30] audit: type=1400 audit(2000000424.859:2712): avc: denied { search } for pid=15829 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.921436][ T30] audit: type=1400 audit(2000000424.859:2713): avc: denied { read open } for pid=15830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.947220][ T30] audit: type=1400 audit(2000000424.859:2714): avc: denied { getattr } for pid=15830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.070496][T15792] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1004.109657][ T30] audit: type=1400 audit(2000000424.859:2715): avc: denied { getattr } for pid=15830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1004.217524][ T5882] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1004.401307][ C1] llc_conn_state_process: llc_conn_service failed [ 1004.680587][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 1004.692241][ T5882] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1004.707698][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.731782][ T5882] usb 6-1: config 0 descriptor?? [ 1004.870960][T15851] Invalid ELF header magic: != ELF [ 1005.095228][T15837] loop7: detected capacity change from 0 to 16384 [ 1005.102386][T15856] netlink: 'syz.4.2129': attribute type 10 has an invalid length. [ 1005.264355][T15870] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 1005.272145][T15870] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 1005.439837][ C1] llc_conn_state_process: llc_conn_service failed [ 1005.771435][ T5882] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1005.860063][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1005.889794][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1005.896953][ T5882] usb 6-1: media controller created [ 1005.910096][T14558] usb 3-1: USB disconnect, device number 31 [ 1005.951664][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.980292][T15867] loop7: detected capacity change from 16384 to 0 [ 1006.164642][ T5882] az6027: usb out operation failed. (-71) [ 1006.190007][ T5882] az6027: usb out operation failed. (-71) [ 1006.214377][ T5882] stb0899_attach: Driver disabled by Kconfig [ 1006.239328][ T5882] az6027: no front-end attached [ 1006.239328][ T5882] [ 1006.261699][ T5882] az6027: usb out operation failed. (-71) [ 1006.269188][ T5882] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1006.298964][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 1006.320966][ T5882] dvb-usb: schedule remote query interval to 400 msecs. [ 1006.327917][ T5882] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1006.337687][ T5882] usb 6-1: USB disconnect, device number 23 [ 1006.372128][T15887] netem: change failed [ 1006.545227][ T5882] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1008.449649][T14558] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1009.865601][T14558] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.899651][T14558] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1009.952905][T14558] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.972837][T14558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1010.098485][T14558] usb 6-1: SerialNumber: syz [ 1010.154353][T14558] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1010.932414][T14558] usb 6-1: USB disconnect, device number 24 [ 1011.125565][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2145'. [ 1011.156750][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1011.156764][ T30] audit: type=1400 audit(2000000432.429:2727): avc: denied { accept } for pid=15946 comm="syz.5.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1011.232203][T15950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1012.005251][T15961] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 1013.445710][ T30] audit: type=1400 audit(2000000434.719:2728): avc: denied { read } for pid=15963 comm="syz.4.2148" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1013.530379][ T30] audit: type=1400 audit(2000000434.749:2729): avc: denied { open } for pid=15963 comm="syz.4.2148" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1013.580369][ T30] audit: type=1400 audit(2000000434.749:2730): avc: denied { ioctl } for pid=15963 comm="syz.4.2148" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1016.002512][T16011] netlink: 'syz.0.2156': attribute type 5 has an invalid length. [ 1016.173706][T16011] ip6erspan0: entered promiscuous mode [ 1016.340473][T16017] netlink: 'syz.5.2158': attribute type 1 has an invalid length. [ 1016.348247][T16017] netlink: 'syz.5.2158': attribute type 2 has an invalid length. [ 1017.294408][T14558] Process accounting resumed [ 1019.483591][ T30] audit: type=1326 audit(2000000440.759:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1019.711199][T16053] Cannot find add_set index 65532 as target [ 1020.045764][T16057] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 1020.053626][T16057] netlink: 'syz.3.2167': attribute type 2 has an invalid length. [ 1020.499627][ T30] audit: type=1326 audit(2000000440.789:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.573792][ T30] audit: type=1326 audit(2000000441.759:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.611688][ T30] audit: type=1326 audit(2000000441.759:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.662736][ T30] audit: type=1326 audit(2000000441.759:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.686494][ T30] audit: type=1326 audit(2000000441.869:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.711821][ T30] audit: type=1326 audit(2000000441.869:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.779758][ T30] audit: type=1326 audit(2000000441.949:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.920900][ T30] audit: type=1326 audit(2000000441.949:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.969142][ T30] audit: type=1326 audit(2000000441.949:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1020.999623][T14558] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1021.225808][T14558] usb 3-1: Using ep0 maxpacket: 32 [ 1021.337618][T14558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.362871][T14558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.378801][T14558] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1021.387883][T14558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.490283][T14558] usb 3-1: config 0 descriptor?? [ 1022.116087][T16060] sctp: [Deprecated]: syz.2.2168 (pid 16060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1022.116087][T16060] Use struct sctp_sack_info instead [ 1022.313368][T14558] ft260 0003:0403:6030.0009: collection stack underflow [ 1022.322293][T14558] ft260 0003:0403:6030.0009: item 0 1 0 12 parsing failed [ 1022.339955][T14558] ft260 0003:0403:6030.0009: failed to parse HID [ 1022.373753][T14558] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -22 [ 1022.592062][T14558] usb 3-1: USB disconnect, device number 32 [ 1024.919093][T16125] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 1024.927030][T16125] netlink: 'syz.0.2179': attribute type 2 has an invalid length. [ 1025.881910][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1025.881943][ T30] audit: type=1400 audit(2000000447.139:2764): avc: denied { setopt } for pid=16126 comm="syz.5.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1026.769697][T16142] overlayfs: overlapping lowerdir path [ 1026.823389][T16142] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1027.178167][T16143] netlink: 'syz.5.2185': attribute type 10 has an invalid length. [ 1027.186318][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2185'. [ 1027.889202][T16154] input: syz1 as /devices/virtual/input/input18 [ 1028.244585][T16153] ceph: No mds server is up or the cluster is laggy [ 1028.453725][ T5882] libceph: connect (1)[c::]:6789 error -22 [ 1028.481660][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1028.851336][T16150] bond4: Unable to set up delay as MII monitoring is disabled [ 1028.959590][ T30] audit: type=1400 audit(2000000450.229:2765): avc: denied { listen } for pid=16160 comm="syz.3.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1029.330705][T16150] bond4 (unregistering): Released all slaves [ 1029.738356][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 1029.758163][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 1029.768168][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 1029.780013][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 1029.789601][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 1030.573486][T11244] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1030.879800][T11244] usb 5-1: Using ep0 maxpacket: 32 [ 1030.887306][T11244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.898668][T11244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.911741][T11244] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1031.006624][T11244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.021130][T11244] usb 5-1: config 0 descriptor?? [ 1031.175010][T16192] netlink: 'syz.5.2194': attribute type 1 has an invalid length. [ 1031.182793][T16192] netlink: 'syz.5.2194': attribute type 2 has an invalid length. [ 1031.657417][T16190] Invalid ELF header magic: != ELF [ 1032.097956][T11244] ft260 0003:0403:6030.000A: collection stack underflow [ 1032.112870][T11244] ft260 0003:0403:6030.000A: item 0 1 0 12 parsing failed [ 1032.130100][T11244] ft260 0003:0403:6030.000A: failed to parse HID [ 1032.136568][T11244] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -22 [ 1032.427476][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 1032.753425][ T5882] usb 5-1: USB disconnect, device number 36 [ 1033.788153][T16227] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1033.797997][T16227] SELinux: failed to load policy [ 1033.829988][ T30] audit: type=1400 audit(2000000455.059:2766): avc: denied { load_policy } for pid=16225 comm="syz.5.2203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1034.247821][T16231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2201'. [ 1034.342496][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2201'. [ 1034.424134][T16237] Invalid ELF header magic: != ELF [ 1036.518785][T16264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1039.747751][ T30] audit: type=1326 audit(2000000461.019:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1039.923319][ T30] audit: type=1326 audit(2000000461.029:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1039.954036][ T30] audit: type=1326 audit(2000000461.059:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.002598][ T30] audit: type=1326 audit(2000000461.059:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.027890][ T30] audit: type=1326 audit(2000000461.059:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.054414][ T30] audit: type=1326 audit(2000000461.199:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.082006][ T30] audit: type=1326 audit(2000000461.199:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.239381][ T30] audit: type=1326 audit(2000000461.199:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.281756][ T30] audit: type=1326 audit(2000000461.199:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.349753][ T30] audit: type=1326 audit(2000000461.199:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3b78efc9 code=0x7ffc0000 [ 1040.624407][T16269] lo speed is unknown, defaulting to 1000 [ 1041.162983][T16303] binder: 16289:16303 ioctl 4018620d 0 returned -22 [ 1045.240219][T16349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 1045.670735][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 1045.721259][T16361] C: renamed from team_slave_0 [ 1045.731602][T16361] netlink: 'syz.2.2229': attribute type 3 has an invalid length. [ 1045.740163][T16361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2229'. [ 1045.750160][T16361] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1047.068444][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1047.068458][ T30] audit: type=1400 audit(2000000468.029:2784): avc: denied { setopt } for pid=16375 comm="syz.2.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1048.108648][ T30] audit: type=1326 audit(2000000469.379:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1048.168952][T16387] bond1: entered promiscuous mode [ 1048.174208][T16387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.215492][ T30] audit: type=1326 audit(2000000469.379:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1048.389702][ T30] audit: type=1326 audit(2000000469.379:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1048.544600][ T30] audit: type=1326 audit(2000000469.379:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1048.571858][ T30] audit: type=1326 audit(2000000469.379:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1048.596923][ T30] audit: type=1326 audit(2000000469.379:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1048.640312][T16395] qnx4: no qnx4 filesystem (no root dir). [ 1048.953969][ T30] audit: type=1326 audit(2000000469.379:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1049.035614][ T30] audit: type=1326 audit(2000000469.379:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1049.281925][ T30] audit: type=1326 audit(2000000469.379:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e0698efc9 code=0x7ffc0000 [ 1051.410460][T16419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1052.029820][T16429] ubi: mtd0 is already attached to ubi31 [ 1053.009930][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1053.009944][ T30] audit: type=1326 audit(2000000474.249:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.058504][ T30] audit: type=1326 audit(2000000474.249:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.081981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.098291][ T30] audit: type=1326 audit(2000000474.249:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.122347][ T30] audit: type=1326 audit(2000000474.249:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.191887][ T30] audit: type=1326 audit(2000000474.249:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.215338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.224790][ T30] audit: type=1326 audit(2000000474.249:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.248266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.302939][ T30] audit: type=1326 audit(2000000474.249:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.345251][ T30] audit: type=1326 audit(2000000474.249:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.368689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.376303][ T30] audit: type=1400 audit(2000000474.399:2809): avc: denied { bind } for pid=16442 comm="syz.2.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1053.396364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.463368][ T30] audit: type=1326 audit(2000000474.429:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f359658efc9 code=0x7ffc0000 [ 1053.715400][T16457] binder: 16454:16457 ioctl c018620c 2000000002c0 returned -1 [ 1053.923194][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.929494][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.687071][T16479] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 1055.700161][T16479] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 1055.708608][T16479] ALSA: mixer_oss: invalid OSS volume 'lg' [ 1055.714603][T16479] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 1056.344744][T16476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2255'. [ 1056.487362][T16486] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 1056.495238][T16486] netlink: 'syz.3.2257': attribute type 2 has an invalid length. [ 1056.868722][T16476] libceph: resolve '0..' (ret=-3): failed [ 1056.917321][T16491] siw: device registration error -23 [ 1057.064620][T16493] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 1057.870388][T16511] Invalid ELF header magic: != ELF [ 1060.303783][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1060.303799][ T30] audit: type=1400 audit(2000000481.549:2813): avc: denied { read write } for pid=16526 comm="syz.2.2266" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1060.332415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.402568][ T30] audit: type=1400 audit(2000000481.549:2814): avc: denied { open } for pid=16526 comm="syz.2.2266" path="/401/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1060.878527][T16541] 0{X: left allmulticast mode [ 1060.957328][T16541] syz_tun: left promiscuous mode [ 1060.993259][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.095902][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.156241][T16539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1061.181595][T16541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.495390][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 1062.396940][T11244] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1062.404653][ T30] audit: type=1400 audit(2000000483.599:2815): avc: denied { ioctl } for pid=16557 comm="syz.3.2272" path="socket:[57018]" dev="sockfs" ino=57018 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1062.429381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.609676][T11244] usb 6-1: Using ep0 maxpacket: 32 [ 1062.615296][T16559] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.2272'. [ 1062.616487][T11244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.636414][T16559] overlay: Unknown parameter 'fowner<00000000000000000000' [ 1062.645576][T11244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.693081][T11244] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1062.708188][T11244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.717701][T16565] siw: device registration error -23 [ 1062.732565][T11244] usb 6-1: config 0 descriptor?? [ 1063.998850][T11244] ft260 0003:0403:6030.000B: collection stack underflow [ 1064.005916][T11244] ft260 0003:0403:6030.000B: item 0 1 0 12 parsing failed [ 1064.013668][T11244] ft260 0003:0403:6030.000B: failed to parse HID [ 1064.020227][T11244] ft260 0003:0403:6030.000B: probe with driver ft260 failed with error -22 [ 1064.031961][T11244] usb 6-1: USB disconnect, device number 25 [ 1065.296888][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1065.343571][T16596] mkiss: ax0: crc mode is auto. [ 1065.354722][ T30] audit: type=1400 audit(2000000486.629:2816): avc: denied { accept } for pid=16590 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1065.432838][T16597] netlink: 'syz.5.2280': attribute type 2 has an invalid length. [ 1067.314398][T16615] siw: device registration error -23 [ 1068.260141][ T30] audit: type=1400 audit(2000000489.539:2817): avc: denied { bind } for pid=16622 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1069.079620][ T5882] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1069.105330][T16639] netlink: 'syz.5.2290': attribute type 1 has an invalid length. [ 1069.113120][T16639] netlink: 'syz.5.2290': attribute type 2 has an invalid length. [ 1069.290493][ T5882] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 1069.305029][ T5882] usb 3-1: config 0 has no interface number 0 [ 1069.321931][ T5882] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 1069.347484][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.375887][ T5882] usb 3-1: Product: syz [ 1069.389734][ T5882] usb 3-1: Manufacturer: syz [ 1069.403180][ T5882] usb 3-1: SerialNumber: syz [ 1069.421108][ T5882] usb 3-1: config 0 descriptor?? [ 1069.440731][ T5882] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 1069.526995][T16641] Invalid ELF header magic: != ELF [ 1069.751089][ T5882] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 1070.366392][T16658] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 1070.374214][T16658] netlink: 'syz.3.2293': attribute type 2 has an invalid length. [ 1071.254914][ T5882] usb 3-1: USB disconnect, device number 33 [ 1074.464877][T16690] binder: 16680:16690 ioctl c018620c 2000000002c0 returned -1 [ 1074.712322][T16696] Invalid ELF header magic: != ELF [ 1075.560096][ T5882] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1075.582577][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 1075.592640][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 1075.712029][ T5882] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 1075.732933][ T5882] usb 6-1: config 0 has no interface number 0 [ 1075.745366][ T5882] usb 6-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 1075.756242][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.764571][ T5882] usb 6-1: Product: syz [ 1075.769080][ T5882] usb 6-1: Manufacturer: syz [ 1075.774682][ T5882] usb 6-1: SerialNumber: syz [ 1075.782711][ T5882] usb 6-1: config 0 descriptor?? [ 1075.790421][ T5882] qmi_wwan 6-1:0.172: bogus CDC Union: master=0, slave=0 [ 1075.992390][ T5882] qmi_wwan 6-1:0.172: probe with driver qmi_wwan failed with error -22 [ 1076.000833][ T5927] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1076.161335][ T5927] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1076.172786][ T5927] usb 4-1: config 0 has no interface number 0 [ 1076.188499][ T5927] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 1076.272399][T16723] siw: device registration error -23 [ 1076.452770][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.464659][T14558] usb 6-1: USB disconnect, device number 26 [ 1076.481164][ T5927] usb 4-1: Product: syz [ 1076.491221][ T5927] usb 4-1: Manufacturer: syz [ 1076.502089][ T5927] usb 4-1: SerialNumber: syz [ 1076.516710][ T5927] usb 4-1: config 0 descriptor?? [ 1076.529865][ T5927] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0 [ 1076.766321][ T5927] qmi_wwan 4-1:0.172: probe with driver qmi_wwan failed with error -22 [ 1077.025512][T16729] siw: device registration error -23 [ 1077.551375][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1077.831216][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.848260][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.848317][T11244] usb 4-1: USB disconnect, device number 20 [ 1077.859010][ T5927] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1077.887367][ T5927] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1077.897502][ T5927] usb 3-1: Manufacturer: syz [ 1077.914079][ T5927] usb 3-1: config 0 descriptor?? [ 1078.598042][T16740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2312'. [ 1078.722877][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.732952][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.775604][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.785304][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.159801][ T30] audit: type=1400 audit(2000000500.429:2818): avc: denied { getopt } for pid=16745 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1080.104099][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 1080.131784][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1080.193017][ T5927] usb 3-1: USB disconnect, device number 34 [ 1081.893447][T16783] sctp: [Deprecated]: syz.4.2325 (pid 16783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1081.893447][T16783] Use struct sctp_sack_info instead [ 1082.809606][T11244] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1082.932217][ T30] audit: type=1400 audit(2000000504.209:2819): avc: denied { create } for pid=16791 comm="syz.0.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1082.962276][T16792] siw: device registration error -23 [ 1082.968756][T16792] smc: removing ib device syz2 [ 1083.377242][T16792] ------------[ cut here ]------------ [ 1083.382722][T16792] WARNING: CPU: 0 PID: 16792 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 1083.393502][T16792] Modules linked in: [ 1083.397623][T16792] CPU: 0 UID: 0 PID: 16792 Comm: syz.0.2329 Not tainted syzkaller #0 PREEMPT(full) [ 1083.407122][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.417166][T16792] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1083.422609][T16792] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 2e 38 f9 e8 a0 2e 38 f9 90 <0f> 0b 90 5b e9 96 2e 38 f9 e8 41 bb a0 f9 eb da 66 66 2e 0f 1f 84 [ 1083.442600][T16792] RSP: 0018:ffffc9000f1271b8 EFLAGS: 00010246 [ 1083.448647][T16792] RAX: 0000000000080000 RBX: ffff888051d65358 RCX: ffffc90004882000 [ 1083.456603][T16792] RDX: 0000000000080000 RSI: ffffffff8884dbb0 RDI: ffff888051d653d8 [ 1083.464581][T16792] RBP: ffffffff88834050 R08: 0000000000000005 R09: 0000000000000001 [ 1083.472542][T16792] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888051d64698 [ 1083.480503][T16792] R13: ffff888051d63fe0 R14: ffff888051d63fe0 R15: ffff888051d650b8 [ 1083.488449][T16792] FS: 00007f1e077866c0(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 1083.497486][T16792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1083.504118][T16792] CR2: 0000000000000000 CR3: 000000005401a000 CR4: 00000000003526f0 [ 1083.512086][T16792] Call Trace: [ 1083.515341][T16792] [ 1083.518245][T16792] rxe_dealloc+0x25/0xc0 [ 1083.522487][T16792] ib_dealloc_device+0x49/0x230 [ 1083.527326][T16792] __ib_unregister_device+0x396/0x480 [ 1083.532685][T16792] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1083.538553][T16792] ib_unregister_device_and_put+0x5a/0x80 [ 1083.544256][T16792] nldev_dellink+0x21f/0x320 [ 1083.548818][T16792] ? __pfx_nldev_dellink+0x10/0x10 [ 1083.553942][T16792] ? cap_capable+0xb3/0x250 [ 1083.558427][T16792] ? bpf_lsm_capable+0x9/0x10 [ 1083.563108][T16792] ? security_capable+0x7e/0x260 [ 1083.568026][T16792] ? ns_capable+0xd7/0x110 [ 1083.572425][T16792] ? __pfx_nldev_dellink+0x10/0x10 [ 1083.577512][T16792] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1083.582274][T16792] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1083.587535][T16792] ? __lock_acquire+0x622/0x1c90 [ 1083.592482][T16792] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1083.598868][T16792] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1083.605795][T16792] ? netlink_deliver_tap+0x1ae/0xd30 [ 1083.611079][T16792] netlink_unicast+0x5aa/0x870 [ 1083.615820][T16792] ? __pfx_netlink_unicast+0x10/0x10 [ 1083.621105][T16792] netlink_sendmsg+0x8c8/0xdd0 [ 1083.625859][T16792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.631145][T16792] ____sys_sendmsg+0xa98/0xc70 [ 1083.635885][T16792] ? copy_msghdr_from_user+0x10a/0x160 [ 1083.641337][T16792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.646601][T16792] ? __pfx_futex_wake_mark+0x10/0x10 [ 1083.651871][T16792] ___sys_sendmsg+0x134/0x1d0 [ 1083.656521][T16792] ? futex_private_hash_put+0x176/0x300 [ 1083.662066][T16792] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.667270][T16792] ? __lock_acquire+0x622/0x1c90 [ 1083.672241][T16792] __sys_sendmsg+0x16d/0x220 [ 1083.676808][T16792] ? __pfx___sys_sendmsg+0x10/0x10 [ 1083.682924][T16792] ? __x64_sys_futex+0x1e0/0x4c0 [ 1083.687850][T16792] do_syscall_64+0xcd/0xfa0 [ 1083.692344][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.698216][T16792] RIP: 0033:0x7f1e0698efc9 [ 1083.702623][T16792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.722235][T16792] RSP: 002b:00007f1e07786038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.730643][T16792] RAX: ffffffffffffffda RBX: 00007f1e06be5fa0 RCX: 00007f1e0698efc9 [ 1083.738584][T16792] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1083.746541][T16792] RBP: 00007f1e06a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1083.754492][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.762460][T16792] R13: 00007f1e06be6038 R14: 00007f1e06be5fa0 R15: 00007ffef6935a38 [ 1083.770453][T16792] [ 1083.773447][T16792] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1083.780708][T16792] CPU: 0 UID: 0 PID: 16792 Comm: syz.0.2329 Not tainted syzkaller #0 PREEMPT(full) [ 1083.790043][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1083.800065][T16792] Call Trace: [ 1083.803315][T16792] [ 1083.806216][T16792] dump_stack_lvl+0x3d/0x1f0 [ 1083.810792][T16792] vpanic+0x640/0x6f0 [ 1083.814750][T16792] ? rxe_pool_cleanup+0x41/0x60 [ 1083.819569][T16792] panic+0xca/0xd0 [ 1083.823263][T16792] ? __pfx_panic+0x10/0x10 [ 1083.827660][T16792] check_panic_on_warn+0xab/0xb0 [ 1083.832570][T16792] __warn+0xf6/0x3c0 [ 1083.836434][T16792] ? rxe_pool_cleanup+0x41/0x60 [ 1083.841253][T16792] report_bug+0x3c3/0x580 [ 1083.845558][T16792] ? rxe_pool_cleanup+0x41/0x60 [ 1083.850379][T16792] handle_bug+0x184/0x210 [ 1083.854677][T16792] exc_invalid_op+0x17/0x50 [ 1083.859149][T16792] asm_exc_invalid_op+0x1a/0x20 [ 1083.863967][T16792] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1083.869394][T16792] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 2e 38 f9 e8 a0 2e 38 f9 90 <0f> 0b 90 5b e9 96 2e 38 f9 e8 41 bb a0 f9 eb da 66 66 2e 0f 1f 84 [ 1083.888969][T16792] RSP: 0018:ffffc9000f1271b8 EFLAGS: 00010246 [ 1083.895006][T16792] RAX: 0000000000080000 RBX: ffff888051d65358 RCX: ffffc90004882000 [ 1083.902946][T16792] RDX: 0000000000080000 RSI: ffffffff8884dbb0 RDI: ffff888051d653d8 [ 1083.910895][T16792] RBP: ffffffff88834050 R08: 0000000000000005 R09: 0000000000000001 [ 1083.918833][T16792] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888051d64698 [ 1083.926770][T16792] R13: ffff888051d63fe0 R14: ffff888051d63fe0 R15: ffff888051d650b8 [ 1083.934711][T16792] ? __pfx_rxe_dealloc+0x10/0x10 [ 1083.939627][T16792] ? rxe_pool_cleanup+0x40/0x60 [ 1083.944450][T16792] ? rxe_pool_cleanup+0x40/0x60 [ 1083.949269][T16792] rxe_dealloc+0x25/0xc0 [ 1083.953483][T16792] ib_dealloc_device+0x49/0x230 [ 1083.958304][T16792] __ib_unregister_device+0x396/0x480 [ 1083.963643][T16792] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1083.969513][T16792] ib_unregister_device_and_put+0x5a/0x80 [ 1083.975216][T16792] nldev_dellink+0x21f/0x320 [ 1083.979777][T16792] ? __pfx_nldev_dellink+0x10/0x10 [ 1083.984894][T16792] ? cap_capable+0xb3/0x250 [ 1083.989372][T16792] ? bpf_lsm_capable+0x9/0x10 [ 1083.994017][T16792] ? security_capable+0x7e/0x260 [ 1083.998928][T16792] ? ns_capable+0xd7/0x110 [ 1084.003320][T16792] ? __pfx_nldev_dellink+0x10/0x10 [ 1084.008409][T16792] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1084.013146][T16792] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1084.018405][T16792] ? __lock_acquire+0x622/0x1c90 [ 1084.023327][T16792] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1084.029716][T16792] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1084.036632][T16792] ? netlink_deliver_tap+0x1ae/0xd30 [ 1084.041898][T16792] netlink_unicast+0x5aa/0x870 [ 1084.046645][T16792] ? __pfx_netlink_unicast+0x10/0x10 [ 1084.051909][T16792] netlink_sendmsg+0x8c8/0xdd0 [ 1084.056653][T16792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.061914][T16792] ____sys_sendmsg+0xa98/0xc70 [ 1084.066659][T16792] ? copy_msghdr_from_user+0x10a/0x160 [ 1084.072091][T16792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.077354][T16792] ? __pfx_futex_wake_mark+0x10/0x10 [ 1084.082614][T16792] ___sys_sendmsg+0x134/0x1d0 [ 1084.087263][T16792] ? futex_private_hash_put+0x176/0x300 [ 1084.092782][T16792] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.097949][T16792] ? __lock_acquire+0x622/0x1c90 [ 1084.102876][T16792] __sys_sendmsg+0x16d/0x220 [ 1084.107436][T16792] ? __pfx___sys_sendmsg+0x10/0x10 [ 1084.112516][T16792] ? __x64_sys_futex+0x1e0/0x4c0 [ 1084.117429][T16792] do_syscall_64+0xcd/0xfa0 [ 1084.121907][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.127772][T16792] RIP: 0033:0x7f1e0698efc9 [ 1084.132154][T16792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.151729][T16792] RSP: 002b:00007f1e07786038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.160109][T16792] RAX: ffffffffffffffda RBX: 00007f1e06be5fa0 RCX: 00007f1e0698efc9 [ 1084.168051][T16792] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1084.175989][T16792] RBP: 00007f1e06a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1084.183930][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.191870][T16792] R13: 00007f1e06be6038 R14: 00007f1e06be5fa0 R15: 00007ffef6935a38 [ 1084.199826][T16792] [ 1084.203033][T16792] Kernel Offset: disabled [ 1084.207332][T16792] Rebooting in 86400 seconds..