last executing test programs: 18.670005899s ago: executing program 3 (id=759): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @empty}, 0x2a0}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="560197717198e701046f8592a5eeab7cda3416817904e92d51156a7eda1b0ae2567e78b9168932c0f0181adda8e5a5d79b7a77d7f90c38971c1cea753275e5c9171e5343c97d94e859ee2c4e93d0440a8e39b2709fab2693ac2b1e40285a223123c4c93cffc9aba4b452fe75ac2db24c1dc8774d5a855013537ceca68745507a77264187f043009b4d121ef0c60274e1cc3061600e08ae95f51805d2311bd2e3235ba2691d4a604e73ddcb56c75c09b5ee627f66b7532659ec0e397569b8824db56e1d82604c16a2abbc8aeb50aa5756711427f47e2605de53710728", 0xdc) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1014, 0x4, 0xc, 0x0, 0x5, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48080) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) link(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x850) 16.552394555s ago: executing program 4 (id=764): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0xa}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000, 0x80}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200}}, 0x10) 14.890695769s ago: executing program 3 (id=768): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(0x0, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) mkdirat(r3, &(0x7f0000000440)='./file0\x00', 0x45) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000be9149001000090c000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700ac1e00010a000100aaaaaaaaaaaa0000"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13.953072658s ago: executing program 1 (id=769): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x101, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x25}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_raw(r5, &(0x7f0000000480), 0x10) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000007c0)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x3a, 0x5, '\x00', [@enc_lim, @pad1, @generic={0xb6, 0x1b, "a2456093d706351fcb13171bfcccfedab5085c476d77340b434f40"}, @calipso={0x7, 0x8, {0x0, 0x0, 0xb4}}]}, 0x38) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140), 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r6}, 0x38) 12.554377242s ago: executing program 1 (id=770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r5, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001600)={&(0x7f0000000280)='percpu_alloc_percpu_fail\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getpid() sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 12.506207625s ago: executing program 4 (id=771): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) 11.660781625s ago: executing program 3 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6}]}, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) 11.465936336s ago: executing program 1 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r3, 0x0, 0x0, 0x3c) openat(r3, &(0x7f0000000080)='./file0\x00', 0x80380, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='c8:;\x00\x81\x85\xd8\xa6\x00\xf0@\x90\x94D\x8fq\xc9\x9e\xfb\x96T\xf6y\x1d\xee\xa5\x81d4\x02\r\x95\x96hCu\xed\xdd\x04\x1b/@\xd7\xa1\xc8\xacA\xd4\xc3\xfd\xad/\x0e\vH\xb4%I\xd9\xeb\xafCV\x87S\x99\xa4\x81\xde\x81\x1bK|K\xf8U\xe9\x88\xbd\xe1\x03\xea\xcf\x81\x17\x9f\xf6\xa5\x95\x10f\x13\xfbt\xfd\x18\x02\xa3\xea\xb3~\xb1\xc2j\x1c\xba\xa9\xc4\x90\xa8%2\x12Q{N\xa0 \x00\xec\x16Gk\xf1\xea\xd0\x89gY\x88\xf8\xcf[\x10\xc6C\xac\xf4s\xa4\x9a\xbdx;`\x1a\x1b\x03\xd7\xf9X\xbbDR4IO\x80\xf9-\x9f\xd9\xb7\xa0\xe3I\xcf\x15o>\x16In\'0\xa4\xde\xcdD\x83H\x83\xf5\xf9Z_\xfevY\x99\x01-\x8c|H\x80H\xc0\x981\x89\xa9>C-\x98sH\x8cp\xbb\x96\"4\x9e\x84.\xb5\x14<\x0f[\xfb^\xaa\x11\x9eW\xcd$\xff>e\xc6u]\xec\xb1:\xc0\xe5\xd5^\xf7B\\\xaa\xbb\x9bQj\t\x11i\x8b\xf5\xe6A\xb3\r\x8c\xa0U\x13\x13\xae\xaa3\xd4\x88\x1b\x03\xd2\x06d\t);\x99\x86\xb90\x81\x1f\xf4].h\x8dUU\xc2e|\x18\xfc\x8e\x1a\xa2\xbe&ZK\x19\xee_\xe5\xa1#\xfb\xad\x92\x90\xf9\xcd\xb1\xd2\xe6d!\xb5\xf68N\x8d\xf5\xd3f!l\xd3\xcb\xcb\x11\x19\x84\xcd%P\x86\xbf\x99\xba\x16,\xfb\x93\x8f\x1c\xc4\x11\xa5\xbf\x97\xff\x00\xc2^\xe2\x15\xa79\xf3\xb3flJ\xb0\xbf\xe6\xfbC\xdf\a<2}\xc2\xb8`sf\xe4\x1d\x9cU<\x8f\xdc^\xb2\\\x0eKX\xd7\xe3\xa91H\x93\fdD\x13i\xf1\"C', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x803, 0x0) r7 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x3ff, 0x0, 0x100000, 0x0, 0x1, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.394961881s ago: executing program 2 (id=774): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) recvmsg$can_raw(r9, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10.207980615s ago: executing program 2 (id=775): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x45, &(0x7f0000001ac0)=[{&(0x7f00000004c0)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x3ff9, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="395d1d5e99b378865650ee72696fdd925abdd47ee59733d126068fa39d424f81d258997cb4c6c3dc55e217d99a4fb1c3864204018709c04ea64b797b46fa17a9fe315e1fbca6ba919485b08ef1d4c8ef95fbd9af12263fc6698b772579a49f18023acc3d7cb33558df262b062463116a8f1c6680a688569a2ff02938f0383bbd647139d9d6b7d434f3a2c0e18d915d256efc077e60770c3eb1f1b761a364d6e73f4cdcfe9401b940fac0961aed6c7500e657e73438221db53a20120526ec969ce51a560bd074a916ce57ef54a821f121fd354f2cb6ce48317133f3437129e2838a445d1f44b184e56eee6bcdde65b539", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc013529ec47d7f69f514408049fc119a74fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x14) readv(r3, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000edb000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000a, 0x10, r3, 0xfffff000) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002640)=ANY=[@ANYBLOB="2800ffff", @ANYRES16=r7, @ANYBLOB="11032bbd7000fddbdf25000000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 9.599233313s ago: executing program 1 (id=777): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setlink={0x3b, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x21a2}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)={0x1, '}'}, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) syz_usb_disconnect(r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r6, &(0x7f0000001400)='\x00', 0x0, 0x1100) 9.080639703s ago: executing program 0 (id=778): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000076c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 8.451045632s ago: executing program 4 (id=779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000300)={{0x3001, 0xdddd1000, 0xd, 0x7, 0x2, 0x7, 0xc, 0x82, 0x0, 0xd, 0x1f, 0x5}, {0xeeee0000, 0x4000, 0xa, 0xa, 0x7, 0xf5, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x9}, {0x64c38916b49bda64, 0xffff1000, 0x8, 0x8, 0x7, 0x2d, 0x3, 0x7f, 0x7, 0x6, 0x9, 0x80}, {0xeeee8000, 0x3000, 0xc, 0x4, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x6, 0xe7}, {0x80a0000, 0x6000, 0x10, 0xbb, 0x7f, 0xad, 0x2, 0xfc, 0x10, 0x3, 0x1, 0x6}, {0x1, 0x8000000, 0xa, 0x9, 0x7f, 0xe8, 0x5, 0x7, 0x2, 0x25, 0x6, 0x9}, {0x8000000, 0xdddd0000, 0xb, 0x0, 0x6, 0x4, 0x2, 0xfc, 0xc6, 0x20, 0x0, 0x81}, {0xeeee0000, 0x2, 0xb, 0x51, 0x7f, 0x0, 0x2, 0x0, 0x5, 0x8, 0x5, 0x3}, {0xeeee0000, 0xebed}, {0xd000, 0x43}, 0x80000000, 0x0, 0x1, 0x0, 0x9, 0xb100, 0xdddd1000, 0x0, [0x40, 0xd4df, 0x8, 0x6bbb]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, 0x0) r5 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000000)="e6", 0x1, 0x24048000, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="01002dbd7000fddbdf2508000000b9bef018f66f40614c4bfaec05c5b1442949b75f0617073720bae6c9499c048158d3c604c9c4c2061f8f05f6bb0532233912fc47ac8d0f7324c4cbf633ddd2a2378a20e71af865490858488c3c76ca6e319b4197f98130ba964f7bb2b3a63663be3302b9cadb63614b354012cac422c4089379dc31dae3fbf9537bcf9ecdc8bb8310154be2ed3378c569f6d70e3d746fc9b43fe332ed5bbe48e5d40b402d6bdad328c2b2917990", @ANYRES16=r9, @ANYBLOB="14000000", @ANYRES8=r0, @ANYRES8=r4, @ANYRESOCT, @ANYRES16=r9, @ANYRES64=r9, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) shutdown(r8, 0x1) recvfrom(r8, 0x0, 0x0, 0x61, 0x0, 0x0) 8.404407637s ago: executing program 3 (id=780): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r2, 0x0, 0x7, 0x1}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x300}, 0x8040) sendfile(r4, r4, 0x0, 0x4800000009) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) 7.748874739s ago: executing program 2 (id=781): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x5c, 0x6, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x4, 0x1000000100, 0x0, 0x0, 0x7fffffe, 0x8000, 0x200, 0x8000, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r3) fanotify_init(0x40, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x300, 0x0, 0x0, 0xc09b546}, 0x0, &(0x7f00000003c0)={0x8, 0xff, 0x0, 0x0, 0x80000000000, 0x0, 0x4}, 0x0, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r7, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) 6.679331226s ago: executing program 0 (id=782): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d40)=ANY=[@ANYRES16=r2, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x20000001}, 0x20011090) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRES16]) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0xffff}}, './file0\x00'}) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) io_uring_setup(0x4a47, 0x0) 6.564854281s ago: executing program 4 (id=783): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r7}, @val={0x0, 0x99, {0x4, 0x2b}}}}}, 0xb}, 0x1, 0x0, 0x0, 0x4044041}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 5.447948385s ago: executing program 4 (id=784): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x40048850) syz_init_net_socket$ax25(0x3, 0x7, 0xce) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 5.409372762s ago: executing program 1 (id=785): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a2100) poll(&(0x7f00000000c0)=[{r0, 0x9746}], 0x1, 0x0) close(r0) lsm_set_self_attr(0x65, &(0x7f0000000800)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x0, 0xb}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x14b501) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r5 = epoll_create1(0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) 5.191034019s ago: executing program 3 (id=786): prctl$PR_SET_THP_DISABLE(0x42, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x1000000000000009, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r7 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a0000", 0x3) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080049c000240000000000739078ac1414bbac14142c8907efe0000001860800000000050200b3ca31235fd23b7c717dfc573b7f419ed64eceb619115eff2aeccc41eb2732d28664f36a1d889789a2892cfce8fb481797ab7a8001e10857a10d9cc0"], 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4}}) 5.162951357s ago: executing program 2 (id=787): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$dupfd(r7, 0x0, r4) ioctl$TCFLSH(r8, 0x400455c8, 0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0x19) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000000)={0x0, 0x3234000, 0x10000, 0x2, 0xc, 0x7fff, 0x5}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 5.114743401s ago: executing program 0 (id=788): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') lseek(r2, 0xae7d, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="84000000", @ANYRES8, @ANYBLOB="01042dbd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB="08000100706369300000000008008b000000000000000000000000000000000001d4a9880749a97370008920f077df72b0fd6020ed157160f676272c6b0ec8491a43c50491e8d6b649af992c6a6c8c19313acd09869227d208", @ANYRES16=r4, @ANYRES32=r2, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x200c000}, 0x20040801) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20004001}, 0x4010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0xcc, 0x5}, {0x6, 0x9, 0x2, 0x7}, {0xd, 0x7, 0x3c, 0x40}, {0x6, 0xa, 0x10}]}, 0x10) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x11f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xc2, 0x22, &(0x7f0000000540)="f107f4f79202202ca28c9fe08862f8794e1b46e5f08cf7c6c568321b2b7b1b332555b951534815c7217a63042f38d6f2ea52997c2f62dbe82573fd6711092c097fb8ebdcf2279733759ded45fb5d8d4c00ca11cc80caf5abda01775b15dac058d7070d1eb26860380207879af486b51923f23d1946859818032aa57b5f34f38568470bc5914131c22fc232bc4201ba1cf269432f92d3fc8b7742233991bf3549553c3ca995ed2915e5aec6e250b27115a859f21a83293973d9fffe5895f36399e88c", &(0x7f0000000640)=""/34, 0xb4b, 0x0, 0x0, 0x3c, 0x0, &(0x7f00000006c0)="ea99394a5f49cab8cef339b7f0def184c373ac8c50a2f4c7f39c9f9db92be8e16dde31179a29927a4c4c7e892c5eda9eec7dfb4bb198d6e470fa3d38", 0x4}, 0x50) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r8, 0x6e2, 0x600, 0x1, 0x0, 0x0) 3.540929374s ago: executing program 1 (id=789): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = getpid() kcmp(r5, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) fcntl$getflags(r3, 0xb) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x19, 0x6, 0x7}, 0x10) getrlimit(0xd, &(0x7f0000000100)) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000200)="26bf8d78588d642b1cd2376587000000000000a8d1ed1df6b4966402b8d1c5d95a3f9db9e387731545446dd2feb8c33ebabfab49d843b8907a68a8a277aea546c70672127445d6868c0e74e34643ef78e9268aea5f0600c79b2b80bded9338bb02ca7f96299f5def7682a069d252434a99ecbe0dfa75f2", &(0x7f0000000380)=""/66, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x8c}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @exit, @jmp={0x5, 0x1, 0xb, 0xb, 0x3, 0xc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xc, 0x1, 0x7, 0xffffffffffffffe0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) 3.345830268s ago: executing program 4 (id=790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e01000100ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd9878518b069cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d481622000000000000000a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000040)=r5, 0x4) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.32498176s ago: executing program 0 (id=791): socket$alg(0x26, 0x5, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x6014) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='net/udp\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) dup(0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40801) io_uring_setup(0x3eae, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) 2.20654593s ago: executing program 0 (id=792): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$caif_stream(0x25, 0x1, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x9, 0x1, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r6, &(0x7f0000000340)=""/126, 0x7e) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newrule={0x44, 0x20, 0x100, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x10, 0xff, 0x2, 0x0, 0x0, 0x5, 0x10}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc005}, 0x4000001) r7 = fsmount(r6, 0x0, 0x8c) write$vga_arbiter(r7, &(0x7f0000000000), 0xf) 2.080647521s ago: executing program 3 (id=793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x3, 0x1000000008, 0x0, 0x6}, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) socket(0x10, 0x803, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1.846874079s ago: executing program 2 (id=794): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="5cb19e", 0x3, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x62}, 0x94) 824.14665ms ago: executing program 0 (id=795): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) execveat$binfmt(0xffffffffffffffff, r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r7, 0x0) 0s ago: executing program 2 (id=796): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() r3 = socket$nl_audit(0x10, 0x3, 0x9) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bda24d607a5a9e2843fe8ae6632ae2ffd8f9dd4c5e64fc65ac039b7a87c1f", "1c1e66c29869bf688917a2ed3835dc1d9e81b84960aca558453c4565abe3dcd8", "d1156d90637541abeca20b9ca73977b269091c8aca21e3a616010dc43a53ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "bc720fbd51342adaeb4ed100", 0x5, 0xfffffffd, 0x1c, 0x3, 0x6}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_rr_get_interval(r2, &(0x7f00000001c0)) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000ac0)) r9 = dup(r8) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r9}) kernel console output (not intermixed with test programs): face: team0 [ 148.307049][ T7121] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.662207][ T7138] block nbd4: Attempted send on invalid socket [ 148.689148][ T7138] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.793085][ T7138] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 148.846491][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.345'. [ 148.929231][ T7121] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.193107][ T7115] bridge0: port 4(team0) entered disabled state [ 149.235107][ T7115] team0: left allmulticast mode [ 149.243633][ T7115] team_slave_0: left allmulticast mode [ 149.306358][ T7115] team_slave_1: left allmulticast mode [ 149.334347][ T7115] team0: left promiscuous mode [ 149.353989][ T7115] team_slave_0: left promiscuous mode [ 149.556752][ T7115] team_slave_1: left promiscuous mode [ 149.610166][ T7115] bridge0: port 4(team0) entered disabled state [ 150.066575][ T7115] batman_adv: batadv0: Adding interface: team0 [ 150.077253][ T7115] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.102906][ T7115] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 150.138390][ T7125] team0: entered promiscuous mode [ 150.198666][ T7125] team_slave_0: entered promiscuous mode [ 150.219322][ T7125] team_slave_1: entered promiscuous mode [ 150.246884][ T7125] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.266695][ T7125] batman_adv: batadv0: Interface activated: team0 [ 150.285411][ T7125] batman_adv: batadv0: Interface deactivated: team0 [ 150.404555][ T7125] batman_adv: batadv0: Removing interface: team0 [ 150.571485][ T7125] bridge0: port 4(team0) entered blocking state [ 150.625042][ T7125] bridge0: port 4(team0) entered disabled state [ 150.660330][ T7125] team0: entered allmulticast mode [ 150.665479][ T7125] team_slave_0: entered allmulticast mode [ 150.685448][ T7125] team_slave_1: entered allmulticast mode [ 150.697336][ T7125] bridge0: port 4(team0) entered blocking state [ 150.703737][ T7125] bridge0: port 4(team0) entered forwarding state [ 150.713703][ T7120] team0: entered promiscuous mode [ 150.722203][ T7120] team_slave_0: entered promiscuous mode [ 150.731760][ T7120] team_slave_1: entered promiscuous mode [ 150.751965][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.767196][ T7120] batman_adv: batadv0: Interface activated: team0 [ 150.778650][ T7120] batman_adv: batadv0: Interface deactivated: team0 [ 150.785829][ T7120] batman_adv: batadv0: Removing interface: team0 [ 150.795244][ T7120] bridge0: port 4(team0) entered blocking state [ 150.801989][ T7120] bridge0: port 4(team0) entered disabled state [ 150.809339][ T7120] team0: entered allmulticast mode [ 150.814454][ T7120] team_slave_0: entered allmulticast mode [ 150.823520][ T7120] team_slave_1: entered allmulticast mode [ 150.834962][ T7120] bridge0: port 4(team0) entered blocking state [ 150.841382][ T7120] bridge0: port 4(team0) entered forwarding state [ 151.316654][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 151.316672][ T30] audit: type=1400 audit(1757615460.698:511): avc: denied { mount } for pid=7156 comm="syz.2.351" name="/" dev="autofs" ino=12950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 151.469629][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.556283][ T7165] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 151.572632][ T7165] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 151.651178][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 151.673516][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 151.687065][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.700872][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.712531][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.727575][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.739179][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.952771][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 151.958416][ T10] usbtmc 5-1:16.0: can't read capabilities [ 152.278437][ T5912] usb 5-1: USB disconnect, device number 9 [ 152.333211][ T30] audit: type=1400 audit(1757615461.708:512): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 153.427767][ T30] audit: type=1326 audit(1757615462.808:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.2.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x0 [ 155.425109][ T30] audit: type=1400 audit(1757615464.808:514): avc: denied { shutdown } for pid=7222 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.610031][ T30] audit: type=1326 audit(1757615464.978:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 155.683738][ T7219] pim6reg: entered allmulticast mode [ 155.712172][ T30] audit: type=1400 audit(1757615464.988:516): avc: denied { read write } for pid=7222 comm="syz.2.368" name="mouse0" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.845172][ T30] audit: type=1326 audit(1757615465.008:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 155.935941][ T30] audit: type=1326 audit(1757615465.008:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 155.950104][ T7215] pim6reg: left allmulticast mode [ 156.170772][ T30] audit: type=1326 audit(1757615465.008:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 156.196144][ T30] audit: type=1326 audit(1757615465.008:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1209f90ac7 code=0x7ffc0000 [ 156.616876][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 156.616895][ T30] audit: type=1800 audit(1757615465.998:565): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.373" name="file1" dev="tmpfs" ino=423 res=0 errno=0 [ 156.767826][ T30] audit: type=1400 audit(1757615466.148:566): avc: denied { write } for pid=7244 comm="syz.4.374" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.870112][ T7243] pim6reg: entered allmulticast mode [ 157.317123][ T7239] pim6reg: left allmulticast mode [ 157.776622][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 158.217773][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 158.224295][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 158.244876][ T7257] ceph: No mds server is up or the cluster is laggy [ 158.371027][ T7266] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 158.477115][ T7266] bridge0: port 4(team0) entered disabled state [ 158.485890][ T7266] team0: left allmulticast mode [ 158.724551][ T7266] team_slave_0: left allmulticast mode [ 158.730353][ T7266] team_slave_1: left allmulticast mode [ 158.736780][ T7266] team0: left promiscuous mode [ 158.948620][ T30] audit: type=1400 audit(1757615468.318:567): avc: denied { ioctl } for pid=7277 comm="syz.4.385" path="socket:[12226]" dev="sockfs" ino=12226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.077887][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 159.291944][ T30] audit: type=1400 audit(1757615468.678:568): avc: denied { name_connect } for pid=7276 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 159.342140][ T7285] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 159.350656][ T7266] team_slave_0: left promiscuous mode [ 159.357965][ T7285] netlink: 2 bytes leftover after parsing attributes in process `syz.2.379'. [ 159.372226][ T7266] team_slave_1: left promiscuous mode [ 159.383369][ T7266] bridge0: port 4(team0) entered disabled state [ 159.419483][ T30] audit: type=1400 audit(1757615468.728:569): avc: denied { read } for pid=7276 comm="syz.0.384" lport=56632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.446287][ T7266] batman_adv: batadv0: Adding interface: team0 [ 159.454084][ T7266] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.486694][ T7266] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 159.559770][ T7281] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 159.570543][ T7281] macvlan2: entered allmulticast mode [ 159.576300][ T7281] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 159.625441][ T7285] team0: entered promiscuous mode [ 159.650936][ T7285] team_slave_0: entered promiscuous mode [ 159.670045][ T7285] team_slave_1: entered promiscuous mode [ 159.710558][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.718744][ T7285] batman_adv: batadv0: Interface activated: team0 [ 159.726376][ T7285] batman_adv: batadv0: Interface deactivated: team0 [ 159.734904][ T7285] batman_adv: batadv0: Removing interface: team0 [ 159.742764][ T7285] bridge0: port 4(team0) entered blocking state [ 159.750569][ T7285] bridge0: port 4(team0) entered disabled state [ 159.760758][ T7285] team0: entered allmulticast mode [ 159.767081][ T7285] team_slave_0: entered allmulticast mode [ 159.773812][ T7285] team_slave_1: entered allmulticast mode [ 159.804746][ T7285] bridge0: port 4(team0) entered blocking state [ 159.811105][ T7285] bridge0: port 4(team0) entered forwarding state [ 159.962397][ T30] audit: type=1400 audit(1757615469.348:570): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 160.020063][ T5979] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.117548][ T7292] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 160.179237][ T5979] usb 5-1: Using ep0 maxpacket: 32 [ 160.187537][ T5979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.201699][ T5979] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 160.213580][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.222004][ T5979] usb 5-1: Product: syz [ 160.226336][ T5979] usb 5-1: Manufacturer: syz [ 160.238975][ T5979] usb 5-1: SerialNumber: syz [ 160.260436][ T5979] usb 5-1: config 0 descriptor?? [ 160.268416][ T5979] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 160.411635][ T7304] block nbd1: Attempted send on invalid socket [ 160.417889][ T7304] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.427993][ T7304] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 160.478025][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'. [ 160.556251][ T7305] block nbd2: Attempted send on invalid socket [ 160.562846][ T7305] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.574521][ T7305] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 160.662448][ T7307] sp0: Synchronizing with TNC [ 160.779885][ T5979] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 160.839097][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 160.982908][ T5979] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 161.189998][ T7311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.320119][ T30] audit: type=1400 audit(1757615470.558:571): avc: denied { read } for pid=7309 comm="syz.0.392" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 161.327792][ T7311] block device autoloading is deprecated and will be removed. [ 161.374441][ T30] audit: type=1400 audit(1757615470.558:572): avc: denied { open } for pid=7309 comm="syz.0.392" path="/88/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 161.718284][ T30] audit: type=1400 audit(1757615471.098:573): avc: denied { setopt } for pid=7312 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.740562][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 161.774487][ T30] audit: type=1400 audit(1757615471.128:574): avc: denied { connect } for pid=7312 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.806139][ T7318] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 161.939019][ T5979] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.088999][ T5979] usb 2-1: Using ep0 maxpacket: 32 [ 162.096633][ T5979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.112757][ T5979] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.126887][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.135995][ T5979] usb 2-1: Product: syz [ 162.140914][ T5979] usb 2-1: Manufacturer: syz [ 162.164011][ T5979] usb 2-1: SerialNumber: syz [ 162.178256][ T5979] usb 2-1: config 0 descriptor?? [ 162.192188][ T7316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.473709][ T10] usb 2-1: USB disconnect, device number 7 [ 163.162636][ T30] audit: type=1400 audit(1757615472.158:575): avc: denied { setopt } for pid=7333 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.369368][ T5911] usb 5-1: USB disconnect, device number 10 [ 164.458002][ T30] audit: type=1400 audit(1757615472.928:576): avc: denied { write } for pid=7337 comm="syz.4.400" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 164.554710][ T30] audit: type=1400 audit(1757615472.928:577): avc: denied { open } for pid=7337 comm="syz.4.400" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 164.725197][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 164.857041][ T7349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7349 comm=syz.1.402 [ 165.778712][ T7361] block nbd1: Attempted send on invalid socket [ 165.785278][ T7361] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.794656][ T7361] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 165.989771][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 166.379704][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.759001][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 166.800192][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.816882][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.853389][ T30] audit: type=1400 audit(1757615476.238:578): avc: denied { getopt } for pid=7368 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.073046][ T10] usb 3-1: Product: syz [ 167.088365][ T10] usb 3-1: Manufacturer: syz [ 167.097511][ T10] usb 3-1: SerialNumber: syz [ 167.149445][ T10] usb 3-1: config 0 descriptor?? [ 167.498318][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.389264][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.549082][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 168.555539][ T5911] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 168.563873][ T5911] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 168.573596][ T5911] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 168.582737][ T5911] usb 2-1: config 250 has no interface number 0 [ 168.589126][ T5911] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 168.600849][ T5911] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 168.611590][ T5911] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 168.622275][ T5911] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 168.636287][ T5911] usb 2-1: config 250 interface 228 has no altsetting 0 [ 168.644972][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 168.654146][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 168.662488][ T5911] usb 2-1: Product: syz [ 168.666653][ T5911] usb 2-1: SerialNumber: syz [ 168.678528][ T5911] hub 2-1:250.228: bad descriptor, ignoring hub [ 168.684882][ T5911] hub 2-1:250.228: probe with driver hub failed with error -5 [ 168.885102][ T5911] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 168.955539][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 168.970342][ T10] usb 3-1: USB disconnect, device number 5 [ 169.098626][ T30] audit: type=1400 audit(1757615478.478:579): avc: denied { read write } for pid=7386 comm="syz.1.414" name="lp0" dev="devtmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 169.123317][ T30] audit: type=1400 audit(1757615478.478:580): avc: denied { open } for pid=7386 comm="syz.1.414" path="/dev/usb/lp0" dev="devtmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 169.484632][ T7409] fuse: Bad value for 'fd' [ 169.560108][ T7388] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 169.587387][ T7410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.422'. [ 170.025337][ T7414] kvm: pic: non byte write [ 170.030923][ T7414] kvm: pic: non byte write [ 170.031253][ C1] usblp0: nonzero read bulk status received: -71 [ 170.035855][ T7414] kvm: pic: single mode not supported [ 170.043843][ T7414] kvm: pic: non byte write [ 170.109321][ T7414] kvm: pic: non byte write [ 170.200190][ T30] audit: type=1400 audit(1757615479.588:581): avc: denied { append } for pid=7411 comm="syz.2.423" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.256128][ T7414] kvm: pic: non byte write [ 170.261383][ T7414] kvm: pic: non byte write [ 170.269464][ T7414] kvm: pic: non byte write [ 170.372947][ T7421] pim6reg: entered allmulticast mode [ 170.474059][ T7414] kvm: pic: non byte write [ 170.544328][ T24] usb 2-1: USB disconnect, device number 8 [ 170.549020][ T30] audit: type=1400 audit(1757615479.628:582): avc: denied { ioctl } for pid=7386 comm="syz.1.414" path="/dev/usb/lp0" dev="devtmpfs" ino=2888 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 170.553223][ T7414] kvm: pic: single mode not supported [ 170.581300][ T24] usblp0: removed [ 170.604090][ T30] audit: type=1326 audit(1757615479.728:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 170.780858][ T30] audit: type=1326 audit(1757615479.738:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 170.828044][ T7415] pim6reg: left allmulticast mode [ 170.861715][ T30] audit: type=1326 audit(1757615479.738:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1209f8eba9 code=0x7ffc0000 [ 171.013378][ T30] audit: type=1326 audit(1757615479.738:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1209f90ac7 code=0x7ffc0000 [ 171.263665][ T30] audit: type=1326 audit(1757615479.738:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1209f90a3c code=0x7ffc0000 [ 171.592224][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 172.032754][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 172.032770][ T30] audit: type=1400 audit(1757615481.398:622): avc: denied { create } for pid=7432 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.268438][ T7436] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.429'. [ 172.618517][ T30] audit: type=1400 audit(1757615481.998:623): avc: denied { call } for pid=7442 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 173.739434][ T5911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 173.900873][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.919785][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 174.146019][ T5911] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.155761][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.164671][ T7466] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 174.175519][ T5911] usb 1-1: config 0 descriptor?? [ 174.183338][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 174.253353][ T7461] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 174.271839][ T7461] bridge0: port 4(team0) entered disabled state [ 174.322851][ T7472] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 174.332451][ T7472] netlink: 2 bytes leftover after parsing attributes in process `syz.1.439'. [ 174.343982][ T7461] team0: left allmulticast mode [ 174.365700][ T7461] team_slave_0: left allmulticast mode [ 174.671000][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 174.679485][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 174.687440][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 174.694956][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 174.695663][ T7471] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 174.832281][ T7461] team_slave_1: left allmulticast mode [ 174.838510][ T7461] team0: left promiscuous mode [ 174.849142][ T7461] team_slave_0: left promiscuous mode [ 174.854969][ T7471] netlink: 2 bytes leftover after parsing attributes in process `syz.2.436'. [ 174.869027][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 174.869355][ T7461] team_slave_1: left promiscuous mode [ 174.885483][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 174.894648][ T7461] bridge0: port 4(team0) entered disabled state [ 174.927096][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 174.989462][ T7461] batman_adv: batadv0: Adding interface: team0 [ 174.995877][ T7461] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.034890][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 175.061873][ T5911] pwc: recv_control_msg error -32 req 04 val 1500 [ 175.083652][ T5911] pwc: recv_control_msg error -32 req 02 val 2500 [ 175.095366][ T7461] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.107792][ T5911] pwc: recv_control_msg error -32 req 02 val 2400 [ 175.124462][ T7466] bridge0: port 3(team0) entered disabled state [ 175.134490][ T7466] team0: left allmulticast mode [ 175.139799][ T7466] team_slave_0: left allmulticast mode [ 175.145797][ T7466] team_slave_1: left allmulticast mode [ 175.151454][ T7466] team0: left promiscuous mode [ 175.158449][ T7466] team_slave_0: left promiscuous mode [ 175.165531][ T7466] team_slave_1: left promiscuous mode [ 175.177118][ T7466] bridge0: port 3(team0) entered disabled state [ 175.206860][ T7466] batman_adv: batadv0: Adding interface: team0 [ 175.223312][ T7466] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.252062][ T7466] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.264649][ T7472] team0: entered promiscuous mode [ 175.278366][ T7472] team_slave_0: entered promiscuous mode [ 175.288112][ T7472] team_slave_1: entered promiscuous mode [ 175.297182][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.304777][ T7472] batman_adv: batadv0: Interface activated: team0 [ 175.311573][ T7472] batman_adv: batadv0: Interface deactivated: team0 [ 175.318606][ T7472] batman_adv: batadv0: Removing interface: team0 [ 175.318998][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 175.335702][ T7472] bridge0: port 3(team0) entered blocking state [ 175.344559][ T7472] bridge0: port 3(team0) entered disabled state [ 175.351522][ T7472] team0: entered allmulticast mode [ 175.356856][ T7472] team_slave_0: entered allmulticast mode [ 175.359614][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 175.369450][ T7472] team_slave_1: entered allmulticast mode [ 175.376735][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 175.377525][ T7472] bridge0: port 3(team0) entered blocking state [ 175.384059][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 175.389671][ T7472] bridge0: port 3(team0) entered forwarding state [ 175.400420][ T5911] pwc: Registered as video103. [ 175.411561][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 175.428579][ T5911] usb 1-1: USB disconnect, device number 2 [ 175.449545][ T7470] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 175.460600][ T7471] team0: entered promiscuous mode [ 175.489382][ T7471] team_slave_0: entered promiscuous mode [ 175.541231][ T7471] team_slave_1: entered promiscuous mode [ 175.577588][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.610976][ T7471] batman_adv: batadv0: Interface activated: team0 [ 175.618224][ T7471] batman_adv: batadv0: Interface deactivated: team0 [ 175.639850][ T7471] batman_adv: batadv0: Removing interface: team0 [ 175.659763][ T7471] bridge0: port 4(team0) entered blocking state [ 175.675141][ T30] audit: type=1400 audit(1757615485.058:624): avc: denied { execute_no_trans } for pid=7477 comm="syz.4.442" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.700529][ T7471] bridge0: port 4(team0) entered disabled state [ 175.713047][ T7471] team0: entered allmulticast mode [ 175.735915][ T7471] team_slave_0: entered allmulticast mode [ 175.746475][ T7471] team_slave_1: entered allmulticast mode [ 175.775444][ T7471] bridge0: port 4(team0) entered blocking state [ 175.781870][ T7471] bridge0: port 4(team0) entered forwarding state [ 175.805043][ T7480] tipc: Started in network mode [ 175.822281][ T7480] tipc: Node identity 467e5ae62e94, cluster identity 4711 [ 175.832533][ T7480] tipc: Enabled bearer , priority 0 [ 175.844743][ T7480] syzkaller0: entered promiscuous mode [ 175.869161][ T7480] syzkaller0: entered allmulticast mode [ 175.893563][ T7480] tipc: Resetting bearer [ 175.912813][ T7479] tipc: Resetting bearer [ 175.944534][ T7479] tipc: Disabling bearer [ 176.014176][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 176.368521][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 176.377544][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 176.732381][ T7489] netlink: 'syz.2.445': attribute type 10 has an invalid length. [ 176.879872][ T30] audit: type=1400 audit(1757615486.198:625): avc: denied { connect } for pid=7495 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.937101][ T30] audit: type=1400 audit(1757615486.318:626): avc: denied { create } for pid=7498 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.964005][ T7489] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.306769][ T7496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.424991][ T7496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.598779][ T30] audit: type=1400 audit(1757615486.948:627): avc: denied { cmd } for pid=7503 comm="syz.0.450" path="socket:[13763]" dev="sockfs" ino=13763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.012082][ T7496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.506700][ T7496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.525146][ T30] audit: type=1400 audit(1757615487.908:628): avc: denied { mounton } for pid=7508 comm="syz.2.452" path="/90/file0" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 178.598488][ T30] audit: type=1400 audit(1757615487.938:629): avc: denied { mounton } for pid=7508 comm="syz.2.452" path="/90/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 178.634031][ T30] audit: type=1400 audit(1757615487.948:630): avc: denied { read write } for pid=7508 comm="syz.2.452" dev="9p" ino=1708457985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.660480][ T30] audit: type=1400 audit(1757615487.948:631): avc: denied { open } for pid=7508 comm="syz.2.452" path="/90/file0" dev="9p" ino=1708457985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.721826][ T30] audit: type=1800 audit(1757615487.958:632): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.452" name="/" dev="9p" ino=1708457985 res=0 errno=0 [ 178.836990][ T1146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.911244][ T7518] netlink: 'syz.4.455': attribute type 4 has an invalid length. [ 178.945498][ T1146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.955892][ T7518] netlink: 'syz.4.455': attribute type 4 has an invalid length. [ 178.992461][ T1146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.048451][ T7516] syzkaller0: entered promiscuous mode [ 179.080546][ T7516] syzkaller0: entered allmulticast mode [ 179.096467][ T1146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.379613][ T7527] block nbd1: Attempted send on invalid socket [ 179.385846][ T7527] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.505585][ T7524] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 179.538205][ T7527] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 179.653342][ T7524] bridge0: port 4(team0) entered disabled state [ 179.670926][ T7524] team0: left allmulticast mode [ 179.676292][ T7524] team_slave_0: left allmulticast mode [ 179.754131][ T7524] team_slave_1: left allmulticast mode [ 179.807052][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 179.818766][ T7524] team0: left promiscuous mode [ 179.820656][ T7533] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 179.876201][ T7524] team_slave_0: left promiscuous mode [ 179.882217][ T7524] team_slave_1: left promiscuous mode [ 179.888596][ T7524] bridge0: port 4(team0) entered disabled state [ 179.901631][ T7533] netlink: 2 bytes leftover after parsing attributes in process `syz.0.456'. [ 180.032572][ T7524] batman_adv: batadv0: Adding interface: team0 [ 180.061470][ T7524] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.123227][ T7524] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 180.708135][ T7533] team0: entered promiscuous mode [ 180.786969][ T30] audit: type=1400 audit(1757615490.168:633): avc: denied { ioctl } for pid=7536 comm="syz.1.459" path="socket:[14730]" dev="sockfs" ino=14730 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.195041][ T7533] team_slave_0: entered promiscuous mode [ 181.216468][ T7533] team_slave_1: entered promiscuous mode [ 181.275309][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.326236][ T7533] batman_adv: batadv0: Interface activated: team0 [ 181.347026][ T7533] batman_adv: batadv0: Interface deactivated: team0 [ 181.362664][ T7533] batman_adv: batadv0: Removing interface: team0 [ 181.818141][ T7533] bridge0: port 4(team0) entered blocking state [ 181.825614][ T7533] bridge0: port 4(team0) entered disabled state [ 181.898634][ T7533] team0: entered allmulticast mode [ 182.022293][ T7533] team_slave_0: entered allmulticast mode [ 182.028337][ T7533] team_slave_1: entered allmulticast mode [ 182.249150][ T30] audit: type=1326 audit(1757615491.608:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 182.275921][ T7533] bridge0: port 4(team0) entered blocking state [ 182.282423][ T7533] bridge0: port 4(team0) entered forwarding state [ 182.425810][ T30] audit: type=1326 audit(1757615491.618:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 182.455101][ T7553] pim6reg: entered allmulticast mode [ 182.509255][ T30] audit: type=1326 audit(1757615491.838:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 182.601967][ T30] audit: type=1326 audit(1757615491.858:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 182.956404][ T30] audit: type=1326 audit(1757615491.868:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 182.989080][ T30] audit: type=1326 audit(1757615491.868:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.015938][ T30] audit: type=1326 audit(1757615491.868:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.039864][ T30] audit: type=1326 audit(1757615491.868:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.082114][ T30] audit: type=1326 audit(1757615491.868:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.105841][ T30] audit: type=1326 audit(1757615491.868:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.141161][ T30] audit: type=1326 audit(1757615491.868:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.569223][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 183.578128][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 183.591189][ T30] audit: type=1326 audit(1757615491.868:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 183.615136][ T30] audit: type=1326 audit(1757615491.868:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.2.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 184.449642][ T5911] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 184.602491][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.615140][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.712207][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 184.772884][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.173990][ T5911] usb 2-1: config 0 descriptor?? [ 185.628504][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 185.635053][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.648366][ T5911] usb 2-1: USB disconnect, device number 9 [ 185.960415][ T7595] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 186.098400][ T7595] bridge0: port 4(team0) entered disabled state [ 186.236079][ T7597] XFS (nullb0): Invalid superblock magic number [ 186.323613][ T7595] team0: left allmulticast mode [ 186.342435][ T7595] team_slave_0: left allmulticast mode [ 186.352039][ T7595] team_slave_1: left allmulticast mode [ 186.463469][ T7595] team0: left promiscuous mode [ 186.915012][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 186.938722][ T7606] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 186.949310][ T7606] netlink: 2 bytes leftover after parsing attributes in process `syz.2.475'. [ 186.978646][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 187.395477][ T7595] team_slave_0: left promiscuous mode [ 187.412410][ T7595] team_slave_1: left promiscuous mode [ 187.470991][ T7595] bridge0: port 4(team0) entered disabled state [ 187.512518][ T7595] batman_adv: batadv0: Adding interface: team0 [ 187.528936][ T7595] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.559917][ T7595] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.625750][ T7618] netlink: 'syz.4.478': attribute type 10 has an invalid length. [ 187.675121][ T7618] bridge0: port 3(team0) entered disabled state [ 187.696657][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 187.696668][ T30] audit: type=1400 audit(1757615497.078:656): avc: denied { map } for pid=7617 comm="syz.1.479" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.749865][ T7620] netlink: 'syz.4.478': attribute type 10 has an invalid length. [ 187.768222][ T7618] team0: left allmulticast mode [ 187.778060][ T7620] netlink: 2 bytes leftover after parsing attributes in process `syz.4.478'. [ 187.796022][ T7618] team_slave_0: left allmulticast mode [ 187.804354][ T7618] team_slave_1: left allmulticast mode [ 187.907738][ T7622] /dev/nullb0: Can't open blockdev [ 187.970979][ T30] audit: type=1400 audit(1757615497.118:657): avc: denied { execute } for pid=7617 comm="syz.1.479" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.005479][ T7618] team0: left promiscuous mode [ 188.018371][ T7618] team_slave_0: left promiscuous mode [ 188.023626][ T7625] Trying to write to read-only block-device nullb0 [ 188.053317][ T30] audit: type=1800 audit(1757615497.138:658): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.479" name="memory.events" dev="tmpfs" ino=576 res=0 errno=0 [ 188.195387][ T7618] team_slave_1: left promiscuous mode [ 188.201548][ T7618] bridge0: port 3(team0) entered disabled state [ 188.213113][ T7618] batman_adv: batadv0: Adding interface: team0 [ 188.219565][ T7618] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.761245][ T30] audit: type=1804 audit(1757615497.138:659): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.479" name="/newroot/105/memory.events" dev="tmpfs" ino=576 res=1 errno=0 [ 188.788093][ T7618] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.801084][ T7606] team0: entered promiscuous mode [ 188.810154][ T7606] team_slave_0: entered promiscuous mode [ 188.835739][ T7606] team_slave_1: entered promiscuous mode [ 188.853458][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.864116][ T7606] batman_adv: batadv0: Interface activated: team0 [ 188.882010][ T7606] batman_adv: batadv0: Interface deactivated: team0 [ 188.889893][ T7606] batman_adv: batadv0: Removing interface: team0 [ 188.975364][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 188.990685][ T7606] bridge0: port 4(team0) entered blocking state [ 189.020896][ T7606] bridge0: port 4(team0) entered disabled state [ 189.033311][ T7606] team0: entered allmulticast mode [ 189.043721][ T7606] team_slave_0: entered allmulticast mode [ 189.055753][ T7606] team_slave_1: entered allmulticast mode [ 189.063720][ T7606] bridge0: port 4(team0) entered blocking state [ 189.070106][ T7606] bridge0: port 4(team0) entered forwarding state [ 189.111581][ T7620] team0: entered promiscuous mode [ 189.121003][ T7620] team_slave_0: entered promiscuous mode [ 189.130866][ T7620] team_slave_1: entered promiscuous mode [ 189.147924][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.158470][ T7620] batman_adv: batadv0: Interface activated: team0 [ 189.174199][ T7620] batman_adv: batadv0: Interface deactivated: team0 [ 189.192528][ T7620] batman_adv: batadv0: Removing interface: team0 [ 189.212627][ T7620] bridge0: port 3(team0) entered blocking state [ 189.219465][ T7620] bridge0: port 3(team0) entered disabled state [ 189.239715][ T7620] team0: entered allmulticast mode [ 189.244940][ T7620] team_slave_0: entered allmulticast mode [ 189.251233][ T7620] team_slave_1: entered allmulticast mode [ 189.260655][ T7620] bridge0: port 3(team0) entered blocking state [ 189.267195][ T7620] bridge0: port 3(team0) entered forwarding state [ 191.005427][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 191.006856][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 191.017688][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 191.184828][ T7661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.370808][ T7661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.074656][ T7675] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 192.181262][ T7675] bridge0: port 4(team0) entered disabled state [ 192.386442][ T7675] team0: left allmulticast mode [ 192.447930][ T7675] team_slave_0: left allmulticast mode [ 192.478590][ T7675] team_slave_1: left allmulticast mode [ 192.516830][ T7675] team0: left promiscuous mode [ 192.528823][ T7681] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 192.540407][ T7675] team_slave_0: left promiscuous mode [ 192.559141][ T7675] team_slave_1: left promiscuous mode [ 192.569192][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.586093][ T7681] netlink: 2 bytes leftover after parsing attributes in process `syz.2.492'. [ 192.622112][ T7675] bridge0: port 4(team0) entered disabled state [ 192.791032][ T5911] usb 2-1: too many configurations: 177, using maximum allowed: 8 [ 192.809822][ T7675] batman_adv: batadv0: Adding interface: team0 [ 192.852856][ T7675] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.898777][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.918123][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.947385][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.960956][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.028695][ T7675] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 193.146613][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.169128][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.192469][ T7681] team0: entered promiscuous mode [ 193.192871][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.200976][ T7681] team_slave_0: entered promiscuous mode [ 193.212221][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.225144][ T7681] team_slave_1: entered promiscuous mode [ 193.235751][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.264956][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.291719][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.367214][ T7681] batman_adv: batadv0: Interface activated: team0 [ 193.379489][ T7681] batman_adv: batadv0: Interface deactivated: team0 [ 193.386410][ T7681] batman_adv: batadv0: Removing interface: team0 [ 193.405759][ T7681] bridge0: port 4(team0) entered blocking state [ 193.418567][ T7681] bridge0: port 4(team0) entered disabled state [ 193.418768][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.438195][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.452682][ T7681] team0: entered allmulticast mode [ 193.472976][ T7681] team_slave_0: entered allmulticast mode [ 193.494049][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.504373][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.516030][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.534190][ T7681] team_slave_1: entered allmulticast mode [ 193.544270][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.562666][ T7681] bridge0: port 4(team0) entered blocking state [ 193.569449][ T7681] bridge0: port 4(team0) entered forwarding state [ 193.579843][ T5911] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 193.594617][ T5911] usb 2-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 193.663758][ T7694] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 193.678389][ T5911] usb 2-1: Product: syz [ 193.687552][ T5911] usb 2-1: Manufacturer: syz [ 193.693701][ T5911] usb 2-1: SerialNumber: syz [ 193.819694][ T5911] usb 2-1: config 0 descriptor?? [ 193.867243][ T7692] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 193.907581][ T7694] bridge0: port 3(team0) entered disabled state [ 193.922586][ T7692] netlink: 2 bytes leftover after parsing attributes in process `syz.4.498'. [ 193.936495][ T7694] team0: left allmulticast mode [ 193.944461][ T7694] team_slave_0: left allmulticast mode [ 193.952212][ T7694] team_slave_1: left allmulticast mode [ 193.959399][ T7694] team0: left promiscuous mode [ 193.964664][ T7694] team_slave_0: left promiscuous mode [ 193.978353][ T7694] team_slave_1: left promiscuous mode [ 194.002892][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.009696][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.017739][ T7694] bridge0: port 3(team0) entered disabled state [ 194.068250][ T7694] batman_adv: batadv0: Adding interface: team0 [ 194.079717][ T7694] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.108367][ T7694] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 194.166475][ T7692] team0: entered promiscuous mode [ 194.175782][ T7692] team_slave_0: entered promiscuous mode [ 194.183272][ T7692] team_slave_1: entered promiscuous mode [ 194.220421][ T7692] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.233087][ T7692] batman_adv: batadv0: Interface activated: team0 [ 194.245406][ T7692] batman_adv: batadv0: Interface deactivated: team0 [ 194.263893][ T7692] batman_adv: batadv0: Removing interface: team0 [ 194.288243][ T7692] bridge0: port 3(team0) entered blocking state [ 194.316877][ T7692] bridge0: port 3(team0) entered disabled state [ 194.438923][ T30] audit: type=1400 audit(1757615503.818:660): avc: denied { create } for pid=7678 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.443908][ T7692] team0: entered allmulticast mode [ 194.466396][ T7692] team_slave_0: entered allmulticast mode [ 194.477188][ T7692] team_slave_1: entered allmulticast mode [ 194.952928][ T30] audit: type=1400 audit(1757615503.818:661): avc: denied { ioctl } for pid=7678 comm="syz.1.496" path="socket:[14141]" dev="sockfs" ino=14141 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.996165][ T7692] bridge0: port 3(team0) entered blocking state [ 195.002641][ T7692] bridge0: port 3(team0) entered forwarding state [ 195.519219][ T5980] usb 2-1: USB disconnect, device number 10 [ 195.982911][ T7719] netlink: 'syz.1.505': attribute type 10 has an invalid length. [ 196.018463][ T7719] bridge0: port 3(team0) entered disabled state [ 196.106247][ T7719] team0: left allmulticast mode [ 196.797068][ T7724] netlink: 'syz.1.505': attribute type 10 has an invalid length. [ 196.809562][ T7719] team_slave_0: left allmulticast mode [ 196.819950][ T7719] team_slave_1: left allmulticast mode [ 196.826420][ T7724] netlink: 2 bytes leftover after parsing attributes in process `syz.1.505'. [ 196.881629][ T7719] team0: left promiscuous mode [ 196.897426][ T7719] team_slave_0: left promiscuous mode [ 196.905819][ T7719] team_slave_1: left promiscuous mode [ 197.919944][ T7719] bridge0: port 3(team0) entered disabled state [ 198.086365][ T7719] batman_adv: batadv0: Adding interface: team0 [ 198.131098][ T7719] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.190584][ T7719] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 198.281625][ T7724] team0: entered promiscuous mode [ 198.379351][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.510'. [ 198.662756][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 198.671847][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 199.168982][ T7724] team_slave_0: entered promiscuous mode [ 199.174765][ T7724] team_slave_1: entered promiscuous mode [ 199.210329][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.217318][ T7724] batman_adv: batadv0: Interface activated: team0 [ 199.224004][ T7724] batman_adv: batadv0: Interface deactivated: team0 [ 199.230694][ T7724] batman_adv: batadv0: Removing interface: team0 [ 199.265756][ T7724] bridge0: port 3(team0) entered blocking state [ 199.275180][ T7724] bridge0: port 3(team0) entered disabled state [ 199.283055][ T7724] team0: entered allmulticast mode [ 199.289545][ T7724] team_slave_0: entered allmulticast mode [ 199.296548][ T7724] team_slave_1: entered allmulticast mode [ 199.305399][ T7724] bridge0: port 3(team0) entered blocking state [ 199.311841][ T7724] bridge0: port 3(team0) entered forwarding state [ 200.186085][ T7752] block nbd0: Attempted send on invalid socket [ 200.211225][ T7752] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.221344][ T7752] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 200.273328][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 201.587168][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.600401][ T7768] bond0: (slave rose0): Enslaving as an active interface with an up link [ 202.858946][ T30] audit: type=1400 audit(1757615511.738:662): avc: denied { read } for pid=7784 comm="syz.2.522" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 202.917322][ T30] audit: type=1400 audit(1757615511.738:663): avc: denied { open } for pid=7784 comm="syz.2.522" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.096106][ T30] audit: type=1400 audit(1757615512.218:664): avc: denied { lock } for pid=7780 comm="syz.4.521" path="socket:[15246]" dev="sockfs" ino=15246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 203.858975][ T7805] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.400952][ T7813] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 204.462249][ T7806] pim6reg: entered allmulticast mode [ 204.509131][ T30] audit: type=1326 audit(1757615513.818:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4875b8eba9 code=0x7ffc0000 [ 204.546605][ T30] audit: type=1326 audit(1757615513.818:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4875b8eba9 code=0x7ffc0000 [ 204.719508][ T7797] pim6reg: left allmulticast mode [ 205.013672][ T7819] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 205.139078][ T30] audit: type=1326 audit(1757615513.828:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4875b8eba9 code=0x7ffc0000 [ 205.166847][ T30] audit: type=1326 audit(1757615513.828:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4875b8eba9 code=0x7ffc0000 [ 205.304323][ T30] audit: type=1326 audit(1757615513.828:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4875b90ac7 code=0x7ffc0000 [ 205.626813][ T30] audit: type=1326 audit(1757615513.828:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4875b90a3c code=0x7ffc0000 [ 205.809064][ T30] audit: type=1326 audit(1757615513.828:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4875b90974 code=0x7ffc0000 [ 206.097381][ T7847] block nbd0: Attempted send on invalid socket [ 206.118790][ T7847] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.146076][ T7847] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 206.367592][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'. [ 208.420320][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 208.420336][ T30] audit: type=1400 audit(1757615517.808:706): avc: denied { bind } for pid=7872 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.863583][ T30] audit: type=1400 audit(1757615517.848:707): avc: denied { write } for pid=7872 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.329036][ T30] audit: type=1400 audit(1757615517.918:708): avc: denied { override_creds } for pid=7877 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 209.721726][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.538'. [ 211.208516][ T30] audit: type=1400 audit(1757615520.158:709): avc: denied { setopt } for pid=7899 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.270442][ T30] audit: type=1400 audit(1757615520.158:710): avc: denied { connect } for pid=7899 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.292039][ T30] audit: type=1400 audit(1757615520.238:711): avc: denied { write } for pid=7899 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.450736][ T7909] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 211.554845][ T7913] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 212.903683][ T30] audit: type=1400 audit(1757615522.288:712): avc: denied { read } for pid=7924 comm="syz.2.547" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.957290][ T7929] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 212.975972][ T7929] bridge0: port 3(team0) entered disabled state [ 213.013483][ T7929] team0: left allmulticast mode [ 213.045015][ T7929] team_slave_0: left allmulticast mode [ 213.088328][ T30] audit: type=1400 audit(1757615522.288:713): avc: denied { open } for pid=7924 comm="syz.2.547" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.100116][ T7931] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 213.137625][ T7933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.270434][ T7931] netlink: 2 bytes leftover after parsing attributes in process `syz.1.546'. [ 213.280852][ T7929] team_slave_1: left allmulticast mode [ 213.286701][ T7929] team0: left promiscuous mode [ 213.377524][ T7929] team_slave_0: left promiscuous mode [ 213.395388][ T7929] team_slave_1: left promiscuous mode [ 213.421666][ T7929] bridge0: port 3(team0) entered disabled state [ 213.493268][ T7929] batman_adv: batadv0: Adding interface: team0 [ 213.503139][ T7929] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.643396][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 213.951177][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 213.960283][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 214.548273][ T7929] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 214.657773][ T7931] team0: entered promiscuous mode [ 214.679162][ T7931] team_slave_0: entered promiscuous mode [ 214.696940][ T7931] team_slave_1: entered promiscuous mode [ 214.722177][ T30] audit: type=1400 audit(1757615524.108:714): avc: denied { read } for pid=7941 comm="syz.2.551" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 214.751433][ T30] audit: type=1400 audit(1757615524.108:715): avc: denied { open } for pid=7941 comm="syz.2.551" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 214.779363][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.786240][ T7931] batman_adv: batadv0: Interface activated: team0 [ 214.826860][ T7931] batman_adv: batadv0: Interface deactivated: team0 [ 214.834325][ T7931] batman_adv: batadv0: Removing interface: team0 [ 214.841581][ T7931] bridge0: port 3(team0) entered blocking state [ 214.848174][ T7931] bridge0: port 3(team0) entered disabled state [ 214.857930][ T7931] team0: entered allmulticast mode [ 214.863792][ T7931] team_slave_0: entered allmulticast mode [ 214.875658][ T7931] team_slave_1: entered allmulticast mode [ 214.882745][ T7931] bridge0: port 3(team0) entered blocking state [ 214.889089][ T7931] bridge0: port 3(team0) entered forwarding state [ 214.988944][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.149046][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 215.190611][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.260854][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.276300][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.298790][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.316267][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.335921][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.345741][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.395554][ T10] usb 3-1: Manufacturer: syz [ 215.403362][ T7957] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 215.650347][ T10] usb 3-1: config 0 descriptor?? [ 216.158934][ T10] rc_core: IR keymap rc-hauppauge not found [ 216.165967][ T10] Registered IR keymap rc-empty [ 216.191891][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.357697][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.387038][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 216.462039][ T7969] CUSE: unknown device info "l" [ 216.467161][ T7969] CUSE: unknown device info "" [ 216.472523][ T7969] CUSE: unknown device info "" [ 216.477624][ T7969] CUSE: unknown device info "" [ 216.482891][ T7969] CUSE: zero length info key specified [ 216.885398][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 217.023476][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.145582][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.199194][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.255673][ T7973] netlink: 'syz.4.559': attribute type 10 has an invalid length. [ 217.264026][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.299015][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.330644][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.419129][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.439053][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.467368][ T7979] netlink: 'syz.4.559': attribute type 10 has an invalid length. [ 217.475770][ T7979] netlink: 2 bytes leftover after parsing attributes in process `syz.4.559'. [ 217.485842][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.498004][ T7980] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 217.513305][ T7973] bridge0: port 3(team0) entered disabled state [ 217.533017][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.553747][ T7973] team0: left allmulticast mode [ 217.562227][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 217.575380][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.606803][ T7982] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 217.850829][ T7973] team_slave_0: left allmulticast mode [ 217.870943][ T7973] team_slave_1: left allmulticast mode [ 217.906353][ T7973] team0: left promiscuous mode [ 218.117388][ T7973] team_slave_0: left promiscuous mode [ 218.184103][ T7973] team_slave_1: left promiscuous mode [ 218.230860][ T7973] bridge0: port 3(team0) entered disabled state [ 218.297258][ T7973] batman_adv: batadv0: Adding interface: team0 [ 218.322924][ T7973] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.353604][ T24] usb 3-1: USB disconnect, device number 6 [ 218.478944][ T7973] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 218.731554][ T7979] team0: entered promiscuous mode [ 218.765326][ T7979] team_slave_0: entered promiscuous mode [ 218.777707][ T7979] team_slave_1: entered promiscuous mode [ 218.825488][ T7979] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.879629][ T7979] batman_adv: batadv0: Interface activated: team0 [ 218.900850][ T7979] batman_adv: batadv0: Interface deactivated: team0 [ 218.907753][ T7979] batman_adv: batadv0: Removing interface: team0 [ 218.928238][ T7979] bridge0: port 3(team0) entered blocking state [ 218.935209][ T7979] bridge0: port 3(team0) entered disabled state [ 218.943800][ T7979] team0: entered allmulticast mode [ 218.994414][ T7979] team_slave_0: entered allmulticast mode [ 219.021747][ T7979] team_slave_1: entered allmulticast mode [ 219.045108][ T7979] bridge0: port 3(team0) entered blocking state [ 219.051506][ T7979] bridge0: port 3(team0) entered forwarding state [ 221.665013][ T8008] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 222.203557][ T8008] bridge0: port 4(team0) entered disabled state [ 222.247177][ T8008] team0: left allmulticast mode [ 222.267994][ T8008] team_slave_0: left allmulticast mode [ 222.281266][ T8016] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 222.290724][ T8008] team_slave_1: left allmulticast mode [ 222.296404][ T8008] team0: left promiscuous mode [ 222.301710][ T8016] netlink: 2 bytes leftover after parsing attributes in process `syz.0.566'. [ 222.313723][ T8008] team_slave_0: left promiscuous mode [ 222.320768][ T8008] team_slave_1: left promiscuous mode [ 222.343447][ T8008] bridge0: port 4(team0) entered disabled state [ 222.456459][ T8008] batman_adv: batadv0: Adding interface: team0 [ 222.535568][ T8008] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.560966][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.587704][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 223.304877][ T8008] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 223.394806][ T8016] team0: entered promiscuous mode [ 223.477680][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 223.483333][ T8016] team_slave_0: entered promiscuous mode [ 223.517597][ T8016] team_slave_1: entered promiscuous mode [ 223.551894][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.586629][ T8016] batman_adv: batadv0: Interface activated: team0 [ 223.708978][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.717518][ T8016] batman_adv: batadv0: Interface deactivated: team0 [ 223.793165][ T8016] batman_adv: batadv0: Removing interface: team0 [ 223.803645][ T8016] bridge0: port 4(team0) entered blocking state [ 223.811359][ T8016] bridge0: port 4(team0) entered disabled state [ 223.822853][ T8016] team0: entered allmulticast mode [ 223.828315][ T8016] team_slave_0: entered allmulticast mode [ 223.846518][ T8016] team_slave_1: entered allmulticast mode [ 223.865982][ T8016] bridge0: port 4(team0) entered blocking state [ 223.872745][ T8016] bridge0: port 4(team0) entered forwarding state [ 223.919415][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 223.948656][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 223.957334][ T24] usb 3-1: config 0 has no interface number 0 [ 223.992331][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.035610][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 224.129005][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.187292][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.297272][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 224.306880][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.318510][ T24] usb 3-1: config 0 descriptor?? [ 224.342517][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 224.479398][ T8044] sp0: Synchronizing with TNC [ 224.980211][ T8050] netlink: 'syz.0.576': attribute type 4 has an invalid length. [ 225.014691][ T8036] [U] ` [ 225.078010][ T8052] netlink: 'syz.0.576': attribute type 4 has an invalid length. [ 225.410957][ T10] usb 3-1: USB disconnect, device number 7 [ 225.436654][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 225.687028][ T30] audit: type=1326 audit(1757615535.008:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 225.805610][ T30] audit: type=1326 audit(1757615535.008:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 225.913722][ T30] audit: type=1326 audit(1757615535.008:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 225.939627][ T30] audit: type=1326 audit(1757615535.008:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 226.037491][ T30] audit: type=1326 audit(1757615535.008:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaa7b90ac7 code=0x7ffc0000 [ 226.125870][ T30] audit: type=1326 audit(1757615535.008:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ffaa7b90a3c code=0x7ffc0000 [ 226.310520][ T30] audit: type=1326 audit(1757615535.018:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ffaa7b90974 code=0x7ffc0000 [ 226.547252][ T30] audit: type=1326 audit(1757615535.018:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ffaa7b90974 code=0x7ffc0000 [ 226.584208][ T30] audit: type=1326 audit(1757615535.018:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffaa7b8d80a code=0x7ffc0000 [ 226.700517][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.2.580'. [ 227.040811][ T30] audit: type=1326 audit(1757615535.018:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 228.380273][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 228.389945][ T8088] openvswitch: netlink: Flow key attr not present in new flow. [ 230.708002][ T8113] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 230.724832][ T8113] bridge0: port 3(team0) entered disabled state [ 230.743985][ T8113] team0: left allmulticast mode [ 230.751514][ T8113] team_slave_0: left allmulticast mode [ 230.758384][ T8113] team_slave_1: left allmulticast mode [ 230.764454][ T8113] team0: left promiscuous mode [ 230.769644][ T8113] team_slave_0: left promiscuous mode [ 230.775821][ T8113] team_slave_1: left promiscuous mode [ 230.782188][ T8113] bridge0: port 3(team0) entered disabled state [ 230.807568][ T8116] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 230.915441][ T8113] batman_adv: batadv0: Adding interface: team0 [ 230.922178][ T8113] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.952108][ T8116] netlink: 2 bytes leftover after parsing attributes in process `syz.1.587'. [ 230.961504][ T8113] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 231.912693][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 231.912708][ T30] audit: type=1400 audit(1757615540.708:756): avc: denied { create } for pid=8114 comm="syz.4.590" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 231.954936][ T30] audit: type=1400 audit(1757615540.748:757): avc: denied { mount } for pid=8114 comm="syz.4.590" name="/" dev="ramfs" ino=16763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 232.041881][ T8116] team0: entered promiscuous mode [ 232.066403][ T8116] team_slave_0: entered promiscuous mode [ 232.092777][ T8116] team_slave_1: entered promiscuous mode [ 232.232688][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.303226][ T8116] batman_adv: batadv0: Interface activated: team0 [ 232.352134][ T8116] batman_adv: batadv0: Interface deactivated: team0 [ 232.390120][ T8116] batman_adv: batadv0: Removing interface: team0 [ 232.465575][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 232.899305][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 232.933448][ T8116] bridge0: port 3(team0) entered blocking state [ 232.963065][ T8116] bridge0: port 3(team0) entered disabled state [ 232.971152][ T8116] team0: entered allmulticast mode [ 233.000468][ T8116] team_slave_0: entered allmulticast mode [ 233.016718][ T8116] team_slave_1: entered allmulticast mode [ 233.026104][ T8116] bridge0: port 3(team0) entered blocking state [ 233.032539][ T8116] bridge0: port 3(team0) entered forwarding state [ 233.158205][ T8135] ceph: No mds server is up or the cluster is laggy [ 233.201145][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 233.207254][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 233.811631][ T30] audit: type=1400 audit(1757615543.108:758): avc: denied { kexec_image_load } for pid=8144 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 234.116784][ T30] audit: type=1400 audit(1757615543.458:759): avc: denied { watch watch_reads } for pid=8145 comm="syz.4.597" path="/125/file1" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.993629][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 236.149644][ T8173] geneve2: entered promiscuous mode [ 236.156461][ T8173] geneve2: entered allmulticast mode [ 236.224692][ T8161] ceph: No mds server is up or the cluster is laggy [ 239.064379][ T30] audit: type=1400 audit(1757615548.448:760): avc: denied { create } for pid=8204 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 239.676572][ T30] audit: type=1400 audit(1757615549.058:761): avc: denied { create } for pid=8207 comm="syz.2.615" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.680623][ T8211] : Can't lookup blockdev [ 240.139364][ T8214] bridge0: entered promiscuous mode [ 240.155703][ T8214] macsec1: entered promiscuous mode [ 240.192446][ T8214] bridge0: port 5(macsec1) entered blocking state [ 240.222147][ T8214] bridge0: port 5(macsec1) entered disabled state [ 240.230941][ T8214] macsec1: entered allmulticast mode [ 240.236465][ T8214] bridge0: entered allmulticast mode [ 240.264293][ T8214] macsec1: left allmulticast mode [ 240.270121][ T8214] bridge0: left allmulticast mode [ 240.356140][ T8214] bridge0: left promiscuous mode [ 242.308726][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 242.319178][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 242.620404][ T30] audit: type=1400 audit(1757615552.008:762): avc: denied { unlink } for pid=5848 comm="syz-executor" name="file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.667509][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.2.623'. [ 242.691145][ T8241] 9pnet_fd: Insufficient options for proto=fd [ 242.733929][ T8244] netlink: 'syz.4.622': attribute type 10 has an invalid length. [ 242.764433][ T8244] bridge0: port 3(team0) entered disabled state [ 243.433136][ T8244] team0: left allmulticast mode [ 243.438025][ T8244] team_slave_0: left allmulticast mode [ 243.463998][ T8244] team_slave_1: left allmulticast mode [ 243.483600][ T8244] team0: left promiscuous mode [ 243.518981][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 243.542117][ T8244] team_slave_0: left promiscuous mode [ 243.823522][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.834741][ T8244] team_slave_1: left promiscuous mode [ 243.848116][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.862076][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.870657][ T5911] usb 2-1: Product: syz [ 243.877480][ T5911] usb 2-1: Manufacturer: syz [ 243.890816][ T5911] usb 2-1: SerialNumber: syz [ 243.930433][ T5911] usb 2-1: config 0 descriptor?? [ 243.958535][ T8254] netlink: 'syz.4.622': attribute type 10 has an invalid length. [ 243.966624][ T8254] netlink: 2 bytes leftover after parsing attributes in process `syz.4.622'. [ 244.086792][ T8244] bridge0: port 3(team0) entered disabled state [ 244.221465][ T8244] batman_adv: batadv0: Adding interface: team0 [ 244.359780][ T8244] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.423331][ T5911] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 244.432371][ T8257] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 244.464686][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.594776][ T8258] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 244.632869][ T8244] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 244.659805][ T8258] netlink: 2 bytes leftover after parsing attributes in process `syz.2.625'. [ 244.922552][ T8254] team0: entered promiscuous mode [ 244.927962][ T8254] team_slave_0: entered promiscuous mode [ 244.958677][ T8254] team_slave_1: entered promiscuous mode [ 245.014397][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.073560][ T8254] batman_adv: batadv0: Interface activated: team0 [ 245.093087][ T8254] batman_adv: batadv0: Interface deactivated: team0 [ 245.170250][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 245.473426][ T8262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.626'. [ 245.979781][ T8254] batman_adv: batadv0: Removing interface: team0 [ 246.024436][ T8254] bridge0: port 3(team0) entered blocking state [ 246.041839][ T8254] bridge0: port 3(team0) entered disabled state [ 246.060968][ T8254] team0: entered allmulticast mode [ 246.069870][ T8254] team_slave_0: entered allmulticast mode [ 246.075628][ T8254] team_slave_1: entered allmulticast mode [ 246.100500][ T8254] bridge0: port 3(team0) entered blocking state [ 246.106895][ T8254] bridge0: port 3(team0) entered forwarding state [ 246.134758][ T8257] bridge0: port 4(team0) entered disabled state [ 246.141719][ T8257] team0: left allmulticast mode [ 246.146596][ T8257] team_slave_0: left allmulticast mode [ 246.152203][ T8257] team_slave_1: left allmulticast mode [ 246.158400][ T8257] team0: left promiscuous mode [ 246.163658][ T8257] team_slave_0: left promiscuous mode [ 246.172705][ T8257] team_slave_1: left promiscuous mode [ 246.178438][ T8257] bridge0: port 4(team0) entered disabled state [ 246.189006][ T8257] batman_adv: batadv0: Adding interface: team0 [ 246.195911][ T8257] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.221869][ T8257] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 246.241532][ T8258] team0: entered promiscuous mode [ 246.246608][ T8258] team_slave_0: entered promiscuous mode [ 246.271347][ T8258] team_slave_1: entered promiscuous mode [ 246.290174][ T8258] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.310963][ T8258] batman_adv: batadv0: Interface activated: team0 [ 246.317407][ T8258] batman_adv: batadv0: Interface deactivated: team0 [ 246.339956][ T8258] batman_adv: batadv0: Removing interface: team0 [ 246.348157][ T8258] bridge0: port 4(team0) entered blocking state [ 246.354797][ T8258] bridge0: port 4(team0) entered disabled state [ 246.361704][ T8258] team0: entered allmulticast mode [ 246.366818][ T8258] team_slave_0: entered allmulticast mode [ 246.372676][ T8258] team_slave_1: entered allmulticast mode [ 246.380794][ T8258] bridge0: port 4(team0) entered blocking state [ 246.387357][ T8258] bridge0: port 4(team0) entered forwarding state [ 246.506569][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 246.581293][ T5911] usb 2-1: USB disconnect, device number 11 [ 247.438896][ T30] audit: type=1400 audit(1757615556.818:763): avc: denied { read } for pid=8272 comm="syz.1.631" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 247.609183][ T30] audit: type=1400 audit(1757615556.818:764): avc: denied { open } for pid=8272 comm="syz.1.631" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.469044][ T5911] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 248.891780][ T5911] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.911524][ T5911] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 248.953719][ T5911] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.982419][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.035817][ T5911] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.051502][ T5911] usb 3-1: invalid MIDI out EP 0 [ 249.238084][ T30] audit: type=1400 audit(1757615558.618:765): avc: denied { setopt } for pid=8285 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.281913][ T5911] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 249.486803][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.495930][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.680289][ T30] audit: type=1400 audit(1757615558.858:766): avc: denied { read write } for pid=8285 comm="syz.2.633" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 249.999826][ T30] audit: type=1400 audit(1757615558.888:767): avc: denied { open } for pid=8285 comm="syz.2.633" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 250.027485][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.036409][ T30] audit: type=1326 audit(1757615559.378:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 250.064020][ T30] audit: type=1326 audit(1757615559.378:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68c758d510 code=0x7ffc0000 [ 250.089534][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.105769][ T30] audit: type=1326 audit(1757615559.378:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68c758e7ab code=0x7ffc0000 [ 250.165702][ T30] audit: type=1326 audit(1757615559.388:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68c758e7ab code=0x7ffc0000 [ 250.276061][ T30] audit: type=1326 audit(1757615559.478:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c758eba9 code=0x7ffc0000 [ 250.338795][ T8307] netlink: 'syz.0.637': attribute type 12 has an invalid length. [ 251.120803][ T5911] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 251.505687][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.570793][ T8316] loop2: detected capacity change from 0 to 7 [ 251.612721][ T8316] Dev loop2: unable to read RDB block 7 [ 251.619162][ T8316] loop2: AHDI p1 p2 p3 [ 251.623568][ T8316] loop2: partition table partially beyond EOD, truncated [ 251.636401][ T8316] loop2: p1 start 1601398130 is beyond EOD, truncated [ 251.678372][ T8316] loop2: p2 start 1702059890 is beyond EOD, truncated [ 251.688676][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.859298][ T5911] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 251.888433][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.916935][ T5980] usb 3-1: USB disconnect, device number 8 [ 251.924223][ T5911] usb 1-1: config 0 descriptor?? [ 252.060247][ T8319] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 252.075937][ T8319] bridge0: port 3(team0) entered disabled state [ 252.139571][ T8319] team0: left allmulticast mode [ 252.197735][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 252.264138][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 252.279586][ T8319] team_slave_0: left allmulticast mode [ 252.485411][ T8330] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 252.504292][ T8319] team_slave_1: left allmulticast mode [ 252.515294][ T8319] team0: left promiscuous mode [ 252.578049][ T8330] netlink: 2 bytes leftover after parsing attributes in process `syz.4.640'. [ 252.587880][ T8319] team_slave_0: left promiscuous mode [ 252.595343][ T8319] team_slave_1: left promiscuous mode [ 252.609290][ T8319] bridge0: port 3(team0) entered disabled state [ 252.708673][ T8319] batman_adv: batadv0: Adding interface: team0 [ 252.754606][ T8319] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.783023][ T5911] usb 1-1: USB disconnect, device number 3 [ 252.842225][ T8319] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 253.304578][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 253.304596][ T30] audit: type=1400 audit(1757615562.608:779): avc: denied { bind } for pid=8333 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.336393][ T8336] tc_dump_action: action bad kind [ 253.649315][ T8330] team0: entered promiscuous mode [ 253.654525][ T8330] team_slave_0: entered promiscuous mode [ 253.662892][ T8330] team_slave_1: entered promiscuous mode [ 253.683457][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.805136][ T8330] batman_adv: batadv0: Interface activated: team0 [ 253.849109][ T8330] batman_adv: batadv0: Interface deactivated: team0 [ 253.872716][ T8330] batman_adv: batadv0: Removing interface: team0 [ 253.929829][ T8330] bridge0: port 3(team0) entered blocking state [ 253.937735][ T8330] bridge0: port 3(team0) entered disabled state [ 253.945109][ T8330] team0: entered allmulticast mode [ 253.950788][ T8330] team_slave_0: entered allmulticast mode [ 253.972109][ T8330] team_slave_1: entered allmulticast mode [ 253.997677][ T8330] bridge0: port 3(team0) entered blocking state [ 254.004107][ T8330] bridge0: port 3(team0) entered forwarding state [ 254.016862][ T30] audit: type=1400 audit(1757615563.398:780): avc: denied { ioctl } for pid=8339 comm="syz.1.646" path="socket:[16104]" dev="sockfs" ino=16104 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.155159][ T8343] 9pnet_fd: Insufficient options for proto=fd [ 254.289387][ T8340] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 254.298895][ T30] audit: type=1400 audit(1757615563.678:781): avc: denied { write } for pid=8339 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.565866][ T30] audit: type=1400 audit(1757615563.948:782): avc: denied { create } for pid=8348 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 255.262832][ T30] audit: type=1400 audit(1757615564.648:783): avc: denied { view } for pid=8353 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.433115][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.440649][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.460878][ T30] audit: type=1400 audit(1757615564.838:784): avc: denied { mount } for pid=8353 comm="syz.4.649" name="/" dev="hugetlbfs" ino=17132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 255.730845][ T30] audit: type=1400 audit(1757615565.098:785): avc: denied { module_request } for pid=8357 comm="syz.1.650" kmod="net-pf-10-proto-115-type-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 255.753768][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.243483][ T8379] wg0 speed is unknown, defaulting to 1000 [ 257.860032][ T8381] picdev_read: 22 callbacks suppressed [ 257.860047][ T8381] kvm: pic: non byte read [ 257.877588][ T8381] kvm: pic: non byte read [ 257.900610][ T8381] kvm: pic: non byte read [ 257.912155][ T8381] kvm: pic: non byte read [ 257.917666][ T8381] kvm: pic: non byte read [ 257.931433][ T8381] kvm: pic: non byte read [ 257.938149][ T8381] kvm: pic: non byte read [ 257.943974][ T8381] kvm: pic: non byte read [ 257.979932][ T8381] kvm: pic: non byte read [ 257.992785][ T8381] kvm: pic: non byte read [ 259.141245][ T30] audit: type=1400 audit(1757615568.478:786): avc: denied { write } for pid=8388 comm="syz.0.658" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 259.268536][ T30] audit: type=1400 audit(1757615568.478:787): avc: denied { ioctl } for pid=8388 comm="syz.0.658" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 259.376597][ T8397] veth0: entered promiscuous mode [ 259.463154][ T30] audit: type=1400 audit(1757615568.638:788): avc: denied { shutdown } for pid=8388 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.555868][ T8408] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 261.628870][ T8388] veth0: left promiscuous mode [ 262.530419][ T30] audit: type=1400 audit(1757615571.898:789): avc: denied { create } for pid=8419 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 262.957732][ T30] audit: type=1400 audit(1757615571.998:790): avc: denied { create } for pid=8422 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 263.081499][ T30] audit: type=1400 audit(1757615572.008:791): avc: denied { ioctl } for pid=8422 comm="syz.2.667" path="socket:[16318]" dev="sockfs" ino=16318 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 263.276153][ T8434] fuse: Bad value for 'fd' [ 263.785707][ T30] audit: type=1400 audit(1757615572.498:792): avc: denied { bind } for pid=8429 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.829094][ T30] audit: type=1400 audit(1757615572.498:793): avc: denied { name_bind } for pid=8429 comm="syz.2.669" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 263.856401][ T30] audit: type=1400 audit(1757615572.498:794): avc: denied { node_bind } for pid=8429 comm="syz.2.669" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 264.746713][ T30] audit: type=1400 audit(1757615574.078:795): avc: denied { connect } for pid=8438 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.821635][ T30] audit: type=1400 audit(1757615575.208:796): avc: denied { setopt } for pid=8451 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.320289][ T8459] netlink: 'syz.1.675': attribute type 4 has an invalid length. [ 266.397561][ T8462] netlink: 'syz.1.675': attribute type 4 has an invalid length. [ 266.405736][ T8461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.676'. [ 266.789070][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.009003][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 267.099567][ T10] usb 1-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 267.108897][ T10] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 267.141299][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.466163][ T10] usb 1-1: USB disconnect, device number 4 [ 267.872892][ T8480] mkiss: ax0: crc mode is auto. [ 267.899211][ T30] audit: type=1400 audit(1757615577.268:797): avc: denied { listen } for pid=8477 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.959137][ T30] audit: type=1400 audit(1757615577.268:798): avc: denied { accept } for pid=8477 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.309467][ T8486] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 268.320619][ T8486] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 269.404364][ T8498] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 270.110473][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 270.201706][ T30] audit: type=1400 audit(1757615579.538:799): avc: denied { remount } for pid=8502 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 271.119934][ T8521] loop8: detected capacity change from 0 to 8 [ 271.133744][ T8521] Dev loop8: unable to read RDB block 8 [ 271.141328][ T8521] loop8: unable to read partition table [ 271.148411][ T8521] loop8: partition table beyond EOD, truncated [ 271.155488][ T8521] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 271.554813][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 272.063600][ T8525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.691'. [ 272.627997][ T30] audit: type=1400 audit(1757615582.008:800): avc: denied { write } for pid=8528 comm="syz.0.693" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 272.651062][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.238506][ T8545] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 274.266257][ T8545] bridge0: port 4(team0) entered disabled state [ 274.279237][ T8545] team0: left allmulticast mode [ 274.294943][ T8545] team_slave_0: left allmulticast mode [ 274.367586][ T8545] team_slave_1: left allmulticast mode [ 274.390917][ T8545] team0: left promiscuous mode [ 274.396578][ T8545] team_slave_0: left promiscuous mode [ 274.492141][ T8550] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 274.514665][ T8545] team_slave_1: left promiscuous mode [ 274.525954][ T8545] bridge0: port 4(team0) entered disabled state [ 274.533540][ T8550] netlink: 2 bytes leftover after parsing attributes in process `syz.2.695'. [ 274.570843][ T8545] batman_adv: batadv0: Adding interface: team0 [ 274.577460][ T8545] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.623933][ T8545] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 275.571659][ T8550] team0: entered promiscuous mode [ 275.611644][ T8550] team_slave_0: entered promiscuous mode [ 275.622554][ T8550] team_slave_1: entered promiscuous mode [ 275.672057][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.721558][ T8550] batman_adv: batadv0: Interface activated: team0 [ 275.728094][ T8550] batman_adv: batadv0: Interface deactivated: team0 [ 275.736730][ T8550] batman_adv: batadv0: Removing interface: team0 [ 275.778209][ T8550] bridge0: port 4(team0) entered blocking state [ 275.795454][ T8550] bridge0: port 4(team0) entered disabled state [ 275.806482][ T8550] team0: entered allmulticast mode [ 275.814384][ T8550] team_slave_0: entered allmulticast mode [ 275.820669][ T8550] team_slave_1: entered allmulticast mode [ 275.833887][ T8550] bridge0: port 4(team0) entered blocking state [ 275.840514][ T8550] bridge0: port 4(team0) entered forwarding state [ 277.929978][ T8579] loop7: detected capacity change from 0 to 7 [ 278.315065][ T8579] Dev loop7: unable to read RDB block 7 [ 278.341055][ T8579] loop7: unable to read partition table [ 278.348303][ T8579] loop7: partition table beyond EOD, truncated [ 278.354946][ T8579] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 278.637089][ T30] audit: type=1400 audit(1757615587.918:801): avc: denied { write } for pid=8578 comm="syz.1.705" path="socket:[17733]" dev="sockfs" ino=17733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.747290][ T8567] IPVS: Unknown mcast interface: vcan0 [ 281.056834][ T30] audit: type=1800 audit(1757615590.368:802): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.710" name="bus" dev="ramfs" ino=18689 res=0 errno=0 [ 281.188962][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 281.519862][ T5912] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.548904][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 281.644286][ T5911] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 281.653517][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.661798][ T5911] usb 1-1: Product: syz [ 281.666010][ T5911] usb 1-1: Manufacturer: syz [ 281.671071][ T5911] usb 1-1: SerialNumber: syz [ 281.697232][ T5911] usb 1-1: config 0 descriptor?? [ 281.709049][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 281.726137][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 281.739861][ T5912] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.758903][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.191285][ T5912] usb 2-1: config 0 descriptor?? [ 282.204331][ T5912] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 282.222406][ T5911] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 282.787076][ T8607] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 282.793979][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.808474][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 282.826889][ T8607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.847700][ T8607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.861368][ T8607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.873803][ T8607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.892333][ T8607] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 282.898957][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 282.936605][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 282.960947][ T8607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.979077][ T5912] vhci_hcd: vhci_device speed not set [ 283.062964][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 283.072846][ T5912] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 283.092528][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 283.104705][ T30] audit: type=1400 audit(1757615592.418:803): avc: denied { ioctl } for pid=8619 comm="syz.4.716" path="socket:[18717]" dev="sockfs" ino=18717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.168685][ T8607] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26) [ 283.175415][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.190384][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 283.211880][ T8621] vhci_hcd: connection closed [ 283.216121][ T8617] vhci_hcd: connection reset by peer [ 283.226683][ T8626] vhci_hcd: connection closed [ 283.231741][ T5972] usb 2-1: USB disconnect, device number 12 [ 283.248454][ T13] vhci_hcd: stop threads [ 283.257327][ T13] vhci_hcd: release socket [ 283.300157][ T13] vhci_hcd: disconnect device [ 283.323208][ T13] vhci_hcd: stop threads [ 283.330992][ T13] vhci_hcd: release socket [ 283.367169][ T13] vhci_hcd: disconnect device [ 283.380312][ T13] vhci_hcd: stop threads [ 283.390887][ T13] vhci_hcd: release socket [ 283.396080][ T13] vhci_hcd: disconnect device [ 283.632138][ T8632] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 283.948602][ T840] usb 1-1: USB disconnect, device number 5 [ 284.355610][ T8638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.761812][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 284.855254][ T30] audit: type=1400 audit(1757615594.238:804): avc: denied { setopt } for pid=8637 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 285.137822][ T8647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.721'. [ 285.412853][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 285.421818][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 286.043835][ T30] audit: type=1400 audit(1757615595.428:805): avc: denied { create } for pid=8641 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 286.417194][ T30] audit: type=1400 audit(1757615595.798:806): avc: denied { sys_admin } for pid=8641 comm="syz.4.720" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 286.583749][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 286.900187][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 287.169455][ T5979] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.329831][ T5979] usb 3-1: Using ep0 maxpacket: 16 [ 287.338033][ T5979] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 287.348152][ T5979] usb 3-1: config 0 has no interface number 0 [ 287.355210][ T5979] usb 3-1: config 0 interface 232 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.374718][ T5979] usb 3-1: config 0 interface 232 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.386488][ T5979] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 287.396729][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.511466][ T5979] usb 3-1: config 0 descriptor?? [ 287.996995][ T5979] hid (null): unknown global tag 0xc [ 288.308939][ T5912] vhci_hcd: vhci_device speed not set [ 289.842663][ T5911] usb 3-1: USB disconnect, device number 9 [ 290.000901][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 290.840658][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 290.960619][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 291.103064][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 292.063716][ T8696] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 292.758916][ T30] audit: type=1400 audit(1757615601.858:807): avc: denied { ioctl } for pid=8699 comm="syz.0.734" path="socket:[18046]" dev="sockfs" ino=18046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.687914][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.739'. [ 293.964717][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 293.973686][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 294.814609][ T8740] mkiss: ax0: crc mode is auto. [ 294.973966][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 295.315828][ T8738] pim6reg: entered allmulticast mode [ 295.335786][ T8738] pim6reg: left allmulticast mode [ 295.382638][ T30] audit: type=1400 audit(1757615604.758:808): avc: denied { accept } for pid=8729 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.194804][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 296.206418][ T8749] batadv1: entered promiscuous mode [ 296.212523][ T8749] batadv1: entered allmulticast mode [ 296.219658][ T8749] team0: Port device batadv1 added [ 296.689534][ T997] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 296.699429][ T997] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 296.910122][ T8762] netlink: 48 bytes leftover after parsing attributes in process `syz.4.747'. [ 297.055324][ T8770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.387257][ T8777] netlink: 'syz.2.746': attribute type 10 has an invalid length. [ 297.398025][ T8777] netlink: 2 bytes leftover after parsing attributes in process `syz.2.746'. [ 297.509603][ T8781] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[8781] [ 300.893546][ T8842] wg0 speed is unknown, defaulting to 1000 [ 301.078310][ T8841] block device autoloading is deprecated and will be removed. [ 301.991221][ T8858] netlink: 88 bytes leftover after parsing attributes in process `syz.1.756'. [ 302.184496][ T8858] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 302.200655][ T8858] netlink: 128 bytes leftover after parsing attributes in process `syz.1.756'. [ 302.214041][ T8858] netlink: 'syz.1.756': attribute type 4 has an invalid length. [ 302.223228][ T8858] netlink: 3 bytes leftover after parsing attributes in process `syz.1.756'. [ 302.419184][ T8866] nfs: Deprecated parameter 'nointr' [ 302.437653][ T8866] ntfs3(loop0): try to read out of volume at offset 0x0 [ 303.102894][ T30] audit: type=1400 audit(1757615612.248:809): avc: denied { create } for pid=8845 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 303.166678][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.198480][ T8865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.758'. [ 303.799771][ T30] audit: type=1400 audit(1757615613.178:810): avc: denied { setopt } for pid=8874 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 303.869446][ T30] audit: type=1400 audit(1757615613.178:811): avc: denied { connect } for pid=8874 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.211583][ T30] audit: type=1400 audit(1757615613.598:812): avc: denied { read } for pid=8887 comm="syz.2.762" path="socket:[19506]" dev="sockfs" ino=19506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 304.383785][ T30] audit: type=1400 audit(1757615613.648:813): avc: denied { create } for pid=8887 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 304.839312][ T8900] mkiss: ax0: crc mode is auto. [ 305.324491][ T8909] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 305.384534][ T8909] netlink: 2 bytes leftover after parsing attributes in process `syz.2.765'. [ 306.555744][ T8918] wg0 speed is unknown, defaulting to 1000 [ 308.222385][ T8927] wg0 speed is unknown, defaulting to 1000 [ 308.341124][ T8913] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 308.353290][ T8913] bridge0: port 4(team0) entered disabled state [ 308.360540][ T8913] team0: left allmulticast mode [ 308.365509][ T8913] team_slave_0: left allmulticast mode [ 308.371678][ T8913] team_slave_1: left allmulticast mode [ 308.377180][ T8913] batadv1: left allmulticast mode [ 308.382934][ T8913] team0: left promiscuous mode [ 308.387818][ T8913] team_slave_0: left promiscuous mode [ 308.393836][ T8913] team_slave_1: left promiscuous mode [ 308.399976][ T8913] batadv1: left promiscuous mode [ 308.405654][ T8913] bridge0: port 4(team0) entered disabled state [ 308.442020][ T8924] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 308.456727][ T8924] netlink: 2 bytes leftover after parsing attributes in process `syz.0.767'. [ 308.553738][ T8913] batman_adv: batadv0: Adding interface: team0 [ 308.560333][ T8913] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.586823][ T8913] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 308.611324][ T8924] team0: entered promiscuous mode [ 308.783744][ T8924] team_slave_0: entered promiscuous mode [ 308.805003][ T8924] team_slave_1: entered promiscuous mode [ 308.922836][ T30] audit: type=1400 audit(1757615618.278:814): avc: denied { bind } for pid=8931 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.270806][ T8924] batadv1: entered promiscuous mode [ 309.311104][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.318586][ T8924] batman_adv: batadv0: Interface activated: team0 [ 309.336051][ T8924] batman_adv: batadv0: Interface deactivated: team0 [ 309.362544][ T8924] batman_adv: batadv0: Removing interface: team0 [ 309.388276][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 309.438249][ T8924] bridge0: port 4(team0) entered blocking state [ 309.541953][ T8924] bridge0: port 4(team0) entered disabled state [ 309.548326][ T8924] team0: entered allmulticast mode [ 309.569526][ T8924] team_slave_0: entered allmulticast mode [ 309.576068][ T30] audit: type=1400 audit(1757615618.958:815): avc: denied { append } for pid=8942 comm="syz.1.773" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.611221][ T8924] team_slave_1: entered allmulticast mode [ 309.644258][ T8924] batadv1: entered allmulticast mode [ 309.654086][ T8924] bridge0: port 4(team0) entered blocking state [ 309.660559][ T8924] bridge0: port 4(team0) entered forwarding state [ 309.703070][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 309.740256][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 309.951912][ T7939] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 309.961332][ T7939] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 310.249227][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 310.683479][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 310.830383][ T8944] ceph: No mds server is up or the cluster is laggy [ 311.590096][ T30] audit: type=1400 audit(1757615620.978:816): avc: denied { write } for pid=8959 comm="syz.0.776" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 311.822033][ T8958] netlink: 244 bytes leftover after parsing attributes in process `syz.2.775'. [ 312.269670][ T5980] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 312.442655][ T5980] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.463433][ T5980] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 312.554691][ T5980] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.638501][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.080632][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.091046][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.124591][ T5980] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.181681][ T5980] usb 2-1: invalid MIDI out EP 0 [ 313.321772][ T30] audit: type=1326 audit(1757615622.698:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 313.345163][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.409246][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.436642][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.446132][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.513074][ T5980] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 313.894346][ T30] audit: type=1326 audit(1757615622.698:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaa7b8d510 code=0x7ffc0000 [ 313.921526][ T30] audit: type=1326 audit(1757615622.698:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa7b8e7ab code=0x7ffc0000 [ 314.328239][ T30] audit: type=1326 audit(1757615622.698:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa7b8e7ab code=0x7ffc0000 [ 314.443885][ T30] audit: type=1326 audit(1757615622.838:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 314.505149][ T8989] hugetlbfs: syz.0.782 (8989): Using mlock ulimits for SHM_HUGETLB is obsolete [ 314.963247][ T30] audit: type=1326 audit(1757615622.838:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.567699][ T5972] usb 2-1: USB disconnect, device number 13 [ 315.584308][ T30] audit: type=1326 audit(1757615622.838:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.717271][ T30] audit: type=1326 audit(1757615622.838:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.779855][ T30] audit: type=1326 audit(1757615622.838:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.807819][ T30] audit: type=1326 audit(1757615622.838:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.839230][ T30] audit: type=1326 audit(1757615622.838:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.913362][ T9000] netlink: 'syz.4.784': attribute type 10 has an invalid length. [ 315.926374][ T9000] netlink: 2 bytes leftover after parsing attributes in process `syz.4.784'. [ 315.944429][ T30] audit: type=1326 audit(1757615622.838:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa7b8eba9 code=0x7ffc0000 [ 315.974294][ T30] audit: type=1400 audit(1757615623.228:829): avc: denied { audit_write } for pid=8981 comm="syz.2.781" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 317.042045][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.048469][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.789302][ T5972] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 318.681762][ T9026] slcan: can't register candev [ 318.686874][ T9026] Falling back ldisc for ttyS3. [ 318.801055][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 318.808287][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.893135][ T9028] program syz.0.792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.893702][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.924449][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.942576][ T5972] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.146756][ T9028] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.161296][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.182543][ T5972] usb 2-1: config 0 descriptor?? [ 319.661670][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.670732][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.746517][ T5972] usbhid 2-1:0.0: can't add hid device: -71 [ 320.766250][ T5972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.802744][ T5972] usb 2-1: USB disconnect, device number 14 [ 321.055727][ T9042] lo speed is unknown, defaulting to 1000 [ 321.062996][ T9042] lo speed is unknown, defaulting to 1000 [ 321.076372][ T9042] lo speed is unknown, defaulting to 1000 [ 321.110372][ T9042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 321.179081][ T9042] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 321.362867][ T9042] lo speed is unknown, defaulting to 1000 [ 321.369830][ T9042] lo speed is unknown, defaulting to 1000 [ 321.376281][ T9042] lo speed is unknown, defaulting to 1000 [ 321.384429][ T9042] lo speed is unknown, defaulting to 1000 [ 321.393004][ T9042] lo speed is unknown, defaulting to 1000 [ 321.401745][ T9043] smc: removing ib device syz1 [ 322.332046][ T9043] ------------[ cut here ]------------ [ 322.337544][ T9043] WARNING: CPU: 0 PID: 9043 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 322.348424][ T9043] Modules linked in: [ 322.352798][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.0.795 Not tainted syzkaller #0 PREEMPT(full) [ 322.362037][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.372157][ T9043] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 322.377740][ T9043] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 25 f6 fc f8 e8 20 f6 fc f8 90 <0f> 0b 90 5b e9 16 f6 fc f8 e8 81 55 63 f9 eb da 66 66 2e 0f 1f 84 [ 322.397662][ T9043] RSP: 0018:ffffc9001b8ef1c8 EFLAGS: 00010246 [ 322.403773][ T9043] RAX: 0000000000080000 RBX: ffff8880258c5358 RCX: ffffc9000f8d5000 [ 322.411820][ T9043] RDX: 0000000000080000 RSI: ffffffff88bea8b0 RDI: ffff8880258c53d8 [ 322.419943][ T9043] RBP: ffffffff88bd0d50 R08: 0000000000000005 R09: 0000000000000001 [ 322.428046][ T9043] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880258c4698 [ 322.436066][ T9043] R13: ffff8880258c3fe0 R14: ffff8880258c3fe0 R15: ffff8880258c50b8 [ 322.444076][ T9043] FS: 00007f48769526c0(0000) GS:ffff8881246b3000(0000) knlGS:0000000000000000 [ 322.453079][ T9043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.459709][ T9043] CR2: 0000001b32213ff8 CR3: 0000000052870000 CR4: 00000000003526f0 [ 322.467699][ T9043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.475731][ T9043] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 322.483757][ T9043] Call Trace: [ 322.487028][ T9043] [ 322.490080][ T9043] rxe_dealloc+0x25/0xc0 [ 322.494318][ T9043] ib_dealloc_device+0x46/0x230 [ 322.499360][ T9043] __ib_unregister_device+0x396/0x480 [ 322.504759][ T9043] ? kobject_get+0x7e/0x150 [ 322.509296][ T9043] ib_unregister_device_and_put+0x5a/0x80 [ 322.515093][ T9043] nldev_dellink+0x21f/0x320 [ 322.519719][ T9043] ? __pfx_nldev_dellink+0x10/0x10 [ 322.524973][ T9043] ? cap_capable+0xb3/0x250 [ 322.529548][ T9043] ? bpf_lsm_capable+0x9/0x10 [ 322.534344][ T9043] ? security_capable+0x7e/0x260 [ 322.539377][ T9043] ? ns_capable+0xd7/0x110 [ 322.543830][ T9043] ? __pfx_nldev_dellink+0x10/0x10 [ 322.549461][ T9043] rdma_nl_rcv_msg+0x38a/0x6e0 [ 322.554238][ T9043] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 322.559631][ T9043] ? __lock_acquire+0xb97/0x1ce0 [ 322.564855][ T9043] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 322.571772][ T9043] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 322.578738][ T9043] ? rcu_is_watching+0x12/0xc0 [ 322.583658][ T9043] netlink_unicast+0x5aa/0x870 [ 322.588459][ T9043] ? __pfx_netlink_unicast+0x10/0x10 [ 322.593796][ T9043] netlink_sendmsg+0x8d1/0xdd0 [ 322.598563][ T9043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.603870][ T9043] ? security_socket_sendmsg+0x29/0x240 [ 322.609437][ T9043] ? __sanitizer_cov_trace_pc+0x5f/0x70 [ 322.614970][ T9043] ____sys_sendmsg+0xa98/0xc70 [ 322.619738][ T9043] ? copy_msghdr_from_user+0x10a/0x160 [ 322.625203][ T9043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.630561][ T9043] ___sys_sendmsg+0x134/0x1d0 [ 322.635238][ T9043] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.640462][ T9043] __sys_sendmsg+0x16d/0x220 [ 322.645141][ T9043] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.650314][ T9043] ? __pfx___schedule+0x10/0x10 [ 322.655187][ T9043] ? find_held_lock+0x2b/0x80 [ 322.660047][ T9043] ? do_user_addr_fault+0x843/0x1370 [ 322.665344][ T9043] do_syscall_64+0xcd/0x4e0 [ 322.669881][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.675755][ T9043] RIP: 0033:0x7f4875b8eba9 [ 322.680186][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.700200][ T9043] RSP: 002b:00007f4876952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.708619][ T9043] RAX: ffffffffffffffda RBX: 00007f4875dd6270 RCX: 00007f4875b8eba9 [ 322.716795][ T9043] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 322.724781][ T9043] RBP: 00007f4875c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 322.732778][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.740810][ T9043] R13: 00007f4875dd6308 R14: 00007f4875dd6270 R15: 00007ffc71773ab8 [ 322.748905][ T9043] [ 322.751939][ T9043] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.759202][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.0.795 Not tainted syzkaller #0 PREEMPT(full) [ 322.768407][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.778474][ T9043] Call Trace: [ 322.781752][ T9043] [ 322.784662][ T9043] dump_stack_lvl+0x3d/0x1f0 [ 322.789373][ T9043] vpanic+0x6e8/0x7a0 [ 322.793381][ T9043] ? __pfx_vpanic+0x10/0x10 [ 322.797966][ T9043] ? rxe_pool_cleanup+0x41/0x60 [ 322.802806][ T9043] panic+0xca/0xd0 [ 322.806513][ T9043] ? __pfx_panic+0x10/0x10 [ 322.810997][ T9043] check_panic_on_warn+0xab/0xb0 [ 322.815918][ T9043] __warn+0xf6/0x3c0 [ 322.819809][ T9043] ? rxe_pool_cleanup+0x41/0x60 [ 322.824731][ T9043] report_bug+0x3c3/0x580 [ 322.829134][ T9043] ? rxe_pool_cleanup+0x41/0x60 [ 322.833990][ T9043] handle_bug+0x184/0x210 [ 322.838308][ T9043] exc_invalid_op+0x17/0x50 [ 322.842796][ T9043] asm_exc_invalid_op+0x1a/0x20 [ 322.847631][ T9043] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 322.853070][ T9043] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 25 f6 fc f8 e8 20 f6 fc f8 90 <0f> 0b 90 5b e9 16 f6 fc f8 e8 81 55 63 f9 eb da 66 66 2e 0f 1f 84 [ 322.872687][ T9043] RSP: 0018:ffffc9001b8ef1c8 EFLAGS: 00010246 [ 322.878739][ T9043] RAX: 0000000000080000 RBX: ffff8880258c5358 RCX: ffffc9000f8d5000 [ 322.886689][ T9043] RDX: 0000000000080000 RSI: ffffffff88bea8b0 RDI: ffff8880258c53d8 [ 322.894647][ T9043] RBP: ffffffff88bd0d50 R08: 0000000000000005 R09: 0000000000000001 [ 322.902610][ T9043] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880258c4698 [ 322.910579][ T9043] R13: ffff8880258c3fe0 R14: ffff8880258c3fe0 R15: ffff8880258c50b8 [ 322.918536][ T9043] ? __pfx_rxe_dealloc+0x10/0x10 [ 322.923462][ T9043] ? rxe_pool_cleanup+0x40/0x60 [ 322.928312][ T9043] ? rxe_pool_cleanup+0x40/0x60 [ 322.933267][ T9043] rxe_dealloc+0x25/0xc0 [ 322.937509][ T9043] ib_dealloc_device+0x46/0x230 [ 322.942458][ T9043] __ib_unregister_device+0x396/0x480 [ 322.947845][ T9043] ? kobject_get+0x7e/0x150 [ 322.952375][ T9043] ib_unregister_device_and_put+0x5a/0x80 [ 322.958091][ T9043] nldev_dellink+0x21f/0x320 [ 322.962663][ T9043] ? __pfx_nldev_dellink+0x10/0x10 [ 322.967803][ T9043] ? cap_capable+0xb3/0x250 [ 322.972309][ T9043] ? bpf_lsm_capable+0x9/0x10 [ 322.976964][ T9043] ? security_capable+0x7e/0x260 [ 322.981890][ T9043] ? ns_capable+0xd7/0x110 [ 322.986317][ T9043] ? __pfx_nldev_dellink+0x10/0x10 [ 322.991427][ T9043] rdma_nl_rcv_msg+0x38a/0x6e0 [ 322.996187][ T9043] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 323.001474][ T9043] ? __lock_acquire+0xb97/0x1ce0 [ 323.006459][ T9043] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 323.012885][ T9043] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 323.019814][ T9043] ? rcu_is_watching+0x12/0xc0 [ 323.024612][ T9043] netlink_unicast+0x5aa/0x870 [ 323.029378][ T9043] ? __pfx_netlink_unicast+0x10/0x10 [ 323.034672][ T9043] netlink_sendmsg+0x8d1/0xdd0 [ 323.039422][ T9043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.044705][ T9043] ? security_socket_sendmsg+0x29/0x240 [ 323.050263][ T9043] ? __sanitizer_cov_trace_pc+0x5f/0x70 [ 323.055811][ T9043] ____sys_sendmsg+0xa98/0xc70 [ 323.060562][ T9043] ? copy_msghdr_from_user+0x10a/0x160 [ 323.066098][ T9043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.071431][ T9043] ___sys_sendmsg+0x134/0x1d0 [ 323.076285][ T9043] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.081567][ T9043] __sys_sendmsg+0x16d/0x220 [ 323.086139][ T9043] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.091252][ T9043] ? __pfx___schedule+0x10/0x10 [ 323.096097][ T9043] ? find_held_lock+0x2b/0x80 [ 323.100803][ T9043] ? do_user_addr_fault+0x843/0x1370 [ 323.106072][ T9043] do_syscall_64+0xcd/0x4e0 [ 323.110561][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.116455][ T9043] RIP: 0033:0x7f4875b8eba9 [ 323.120851][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.140445][ T9043] RSP: 002b:00007f4876952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.148843][ T9043] RAX: ffffffffffffffda RBX: 00007f4875dd6270 RCX: 00007f4875b8eba9 [ 323.156804][ T9043] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 323.164767][ T9043] RBP: 00007f4875c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 323.172874][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.180823][ T9043] R13: 00007f4875dd6308 R14: 00007f4875dd6270 R15: 00007ffc71773ab8 [ 323.188787][ T9043] [ 323.192056][ T9043] Kernel Offset: disabled [ 323.196359][ T9043] Rebooting in 86400 seconds..