last executing test programs: 2m15.963726946s ago: executing program 2 (id=1618): syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5e7, 0x15bd01) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x84a42, 0x99) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYBLOB="2c63c41167cffb4d346ccab8ce2a2c951343e675849f657527ffb91b873109439a534cc507c61a10dc86682c3435e30b7a544426a0e98ac31803e076d0d6cbe39f7d8a8b1240d2cf013e"]) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6d}]}}}]}, 0x3c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x7}, {}, {0x0, 0x9}, {0x0, 0x1}, {}, {0x0, 0x7}], 0x20}) 2m14.978458075s ago: executing program 2 (id=1619): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 2m13.70910279s ago: executing program 2 (id=1623): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000810) sendmmsg$alg(r3, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5c116cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000740)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cda35a48058338023656391577b094cdb93a4522bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962ca343a01f95f9b529413427ab4e8ce34145f158c443e9c6ad992a8103ef2f1c3f766b9a21501f94c1568b13235966f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f114cd7bcac299b8b", 0xf3}], 0x2, &(0x7f0000000380)}], 0x1, 0x4000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 2m12.356191727s ago: executing program 2 (id=1626): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m7.53867348s ago: executing program 2 (id=1638): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000800), 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) fsetxattr(r4, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f00000000c0)='autofs\x00', 0x7, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(0x0, 0xb) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000080)) 2m6.206864747s ago: executing program 2 (id=1640): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 1m50.798731063s ago: executing program 32 (id=1640): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 1m2.578185353s ago: executing program 5 (id=1679): r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x417, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000000), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 43.557383187s ago: executing program 5 (id=1679): r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x417, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000000), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 22.230728924s ago: executing program 5 (id=1679): r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x417, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000000), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 12.387828151s ago: executing program 4 (id=1880): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) 10.835186754s ago: executing program 0 (id=1884): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x20100, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xb, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) r4 = fsmount(r0, 0x0, 0x4) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0xc0401) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+rdma'], 0x6) 10.404582266s ago: executing program 1 (id=1885): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) listen(r0, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x4800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 10.231895115s ago: executing program 4 (id=1886): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x1, 0x3, 0x1}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380), 0x0, 0x0, 0x10006, 0x0, 0x0}) r4 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) 10.040135125s ago: executing program 1 (id=1887): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0xa, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f0000000380)=[{0x0, 0x8000, {0x0}}, {0x9fb, 0xd4, {0x0}, 0xd}]}, 0x5}) 9.144340781s ago: executing program 1 (id=1888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, 0x0, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_create1(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000004c0)={0x2, 0x3, 0x5, 0x7, '\x00', '\x00', '\x00', 0xb8, 0x3, 0x2, 0x49, "bf8c3768022f351d68b92c85ccfabdf0"}) ioctl$SIOCAX25CTLCON(r6, 0x89e8, 0x0) 9.11521155s ago: executing program 4 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[], 0x1df) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000004c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "90be8b1c551265406c7f306003d8a0f4bd00"}}) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="000826bd7000fddbdf3502010400000000000000"], 0x1c}}, 0x4840) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, 0x0) sched_setscheduler(r9, 0x1, &(0x7f0000000240)=0x10000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x401, 0x10000, 0x1a, 0x17, 0x10, 0x2}}]}}]}, 0x148}}, 0x20000000) 7.717608998s ago: executing program 0 (id=1891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getrlimit(0x9, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000000000000000800024000000000080001"], 0xa0}}, 0x0) 6.680081691s ago: executing program 0 (id=1892): bind$x25(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000340)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff0000000005000000180001"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000140)=[@code={0x1, 0x55, {"64264b0fc72c8df1170000c4a3090a41c15836450fa10f0170d38f497812cf44ff47fb0f20e035800000000f22e0f00fb1af8c3986cd0f20a50f20d835200000000f22d8"}}], 0x55}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 6.183694797s ago: executing program 1 (id=1893): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') link(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./bus\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 6.158306714s ago: executing program 3 (id=1894): bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000000)={[0x40]}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0xc040) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r5, 0x5406, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0xd}}], 0x30, 0x8004}, 0x0) getpid() 5.094816094s ago: executing program 3 (id=1895): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x23, 0x3, 0x1c, 0x20ec, 0x0, 0x2, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, 0x0, 0x0, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r7 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 4.980499152s ago: executing program 1 (id=1896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) 4.95789003s ago: executing program 0 (id=1897): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) listen(r0, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x4800) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff004) 4.898774015s ago: executing program 4 (id=1898): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0xa, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f0000000380)=[{0x0, 0x8000, {0x0}}, {0x9fb, 0xd4, {0x0}, 0xd}]}, 0x5}) 3.831852647s ago: executing program 0 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = socket$inet(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r5, 0x7fffffff) 3.787644938s ago: executing program 3 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r6}) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r7}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x48040) 3.656699583s ago: executing program 4 (id=1901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r2 = syz_open_dev$audion(&(0x7f0000000200), 0x3, 0x400340) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x808500, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/229}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 2.827474032s ago: executing program 3 (id=1902): r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x417, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.13424161s ago: executing program 5 (id=1679): r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x417, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000000), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.1336796s ago: executing program 3 (id=1903): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x237, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) io_uring_enter(r2, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x1}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 199.331431ms ago: executing program 0 (id=1904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, 0x0, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_create1(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000004c0)={0x2, 0x3, 0x5, 0x7, '\x00', '\x00', '\x00', 0xb8, 0x3, 0x2, 0x49, "bf8c3768022f351d68b92c85ccfabdf0"}) ioctl$SIOCAX25CTLCON(r6, 0x89e8, 0x0) 198.525891ms ago: executing program 1 (id=1905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mknod(0x0, 0x8001420, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0xb2f3, 0x10, 0x4, 0x109}, &(0x7f0000000080), &(0x7f0000000040)) process_madvise(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)}, 0x1e) 196.549525ms ago: executing program 3 (id=1906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x0, 0x0, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r0, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r3, 0x1000000000931f, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) connect$ax25(r6, &(0x7f0000000000)={{0x3, @default, 0x6}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x48) 0s ago: executing program 4 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0x6, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x28, 0x14}, 0x4000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c207000000000000000008004500002c00000000000018e000189078040000e9ffffffffffffff0000000000d5adcdb36b895f3292f95711893e0b526c339d1d65cc89905826557fc4448606c19feb6f567f5791a0f5c3a64ecda702798c4800000000944ece518545ef9a42cf0010407f757a214bee0f3fe06dfaacf9244809193df744"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x202) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b26, &(0x7f0000000040)) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): T9979] bond0: (slave wlan1): Releasing backup interface [ 466.995932][ T9979] syz.3.860 (9979) used greatest stack depth: 18312 bytes left [ 467.019341][ T1209] usb 1-1: USB disconnect, device number 8 [ 467.498017][ T9988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.617608][T10004] bridge4: entered promiscuous mode [ 469.794819][T10007] bridge3: entered promiscuous mode [ 474.284229][T10039] fuse: Bad value for 'fd' [ 474.661054][ T30] audit: type=1400 audit(1754380693.078:660): avc: denied { remount } for pid=10034 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 474.756139][T10042] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 476.705099][T10042] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 476.718549][T10048] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.859215][T10048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.420982][T10073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.708340][T10082] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 478.716321][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.884'. [ 478.738631][T10080] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 478.745128][T10080] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 478.753498][T10080] vhci_hcd vhci_hcd.0: Device attached [ 479.428052][ T10] vhci_hcd: vhci_device speed not set [ 479.899059][T10086] vhci_hcd: connection closed [ 479.901282][ T8168] vhci_hcd: stop threads [ 479.971959][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 480.122058][ T8168] vhci_hcd: release socket [ 480.688548][ T8168] vhci_hcd: disconnect device [ 480.760225][ T5858] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 481.082524][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 481.274644][T10104] bridge0: entered promiscuous mode [ 482.824379][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.833465][ T5858] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 482.860748][ T5858] usb 2-1: can't read configurations, error -71 [ 485.374371][T10131] SELinux: failed to load policy [ 485.731665][ T10] vhci_hcd: vhci_device speed not set [ 486.551814][T10133] bridge2: entered promiscuous mode [ 489.153657][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 489.407730][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 490.252860][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 490.836645][T10188] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 491.058491][ T30] audit: type=1400 audit(1754380709.818:661): avc: denied { append } for pid=10186 comm="syz.0.907" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 491.118005][T10188] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 491.363648][T10199] netlink: 'syz.4.908': attribute type 21 has an invalid length. [ 491.372068][T10199] netlink: 156 bytes leftover after parsing attributes in process `syz.4.908'. [ 491.383672][T10199] netlink: 'syz.4.908': attribute type 21 has an invalid length. [ 491.391584][T10199] netlink: 156 bytes leftover after parsing attributes in process `syz.4.908'. [ 492.583245][T10206] geneve3: entered promiscuous mode [ 492.588520][T10206] geneve3: entered allmulticast mode [ 492.836438][T10207] ======================================================= [ 492.836438][T10207] WARNING: The mand mount option has been deprecated and [ 492.836438][T10207] and is ignored by this kernel. Remove the mand [ 492.836438][T10207] option from the mount to silence this warning. [ 492.836438][T10207] ======================================================= [ 493.659221][T10218] bridge3: entered promiscuous mode [ 495.603834][T10235] Failed to initialize the IGMP autojoin socket (err -2) [ 496.938310][ T30] audit: type=1400 audit(1754380715.708:662): avc: denied { ioctl } for pid=10247 comm="syz.2.922" path="socket:[21055]" dev="sockfs" ino=21055 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 496.939495][T10245] syz.1.916: attempt to access beyond end of device [ 496.939495][T10245] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 497.375691][T10245] syz.1.916: attempt to access beyond end of device [ 497.375691][T10245] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 497.390023][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 497.412471][T10245] syz.1.916: attempt to access beyond end of device [ 497.412471][T10245] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 497.438846][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 497.451226][T10245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 497.464139][T10245] UDF-fs: Scanning with blocksize 512 failed [ 497.639441][T10245] syz.1.916: attempt to access beyond end of device [ 497.639441][T10245] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 498.139317][T10245] syz.1.916: attempt to access beyond end of device [ 498.139317][T10245] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 498.157112][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 498.169106][T10245] syz.1.916: attempt to access beyond end of device [ 498.169106][T10245] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 498.182705][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 498.194024][T10245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 498.202015][T10245] UDF-fs: Scanning with blocksize 1024 failed [ 498.264084][T10261] syz.2.925: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 498.279089][T10261] CPU: 0 UID: 0 PID: 10261 Comm: syz.2.925 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 498.279117][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.279129][T10261] Call Trace: [ 498.279135][T10261] [ 498.279143][T10261] dump_stack_lvl+0x16c/0x1f0 [ 498.279176][T10261] warn_alloc+0x248/0x3a0 [ 498.279199][T10261] ? __pfx_warn_alloc+0x10/0x10 [ 498.279218][T10261] ? __pfx_stack_trace_save+0x10/0x10 [ 498.279254][T10261] ? kasan_save_stack+0x42/0x60 [ 498.279270][T10261] ? kasan_save_stack+0x33/0x60 [ 498.279286][T10261] ? kasan_save_track+0x14/0x30 [ 498.279303][T10261] ? xskq_create+0x52/0x1d0 [ 498.279325][T10261] ? xsk_setsockopt+0x74e/0x9a0 [ 498.279342][T10261] ? do_sock_setsockopt+0xf0/0x1d0 [ 498.279360][T10261] ? xskq_create+0xfb/0x1d0 [ 498.279383][T10261] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 498.279419][T10261] ? xskq_create+0xfb/0x1d0 [ 498.279448][T10261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 498.279484][T10261] ? xskq_create+0xfb/0x1d0 [ 498.279506][T10261] vmalloc_user_noprof+0x9e/0xe0 [ 498.279533][T10261] ? xskq_create+0xfb/0x1d0 [ 498.279556][T10261] xskq_create+0xfb/0x1d0 [ 498.279580][T10261] xsk_setsockopt+0x74e/0x9a0 [ 498.279604][T10261] ? __pfx_xsk_setsockopt+0x10/0x10 [ 498.279631][T10261] ? find_held_lock+0x2b/0x80 [ 498.279658][T10261] ? selinux_socket_setsockopt+0x6a/0x80 [ 498.279681][T10261] ? __pfx_xsk_setsockopt+0x10/0x10 [ 498.279705][T10261] do_sock_setsockopt+0xf0/0x1d0 [ 498.279727][T10261] __sys_setsockopt+0x1a0/0x230 [ 498.279758][T10261] __x64_sys_setsockopt+0xbd/0x160 [ 498.279783][T10261] ? do_syscall_64+0x91/0x4c0 [ 498.279810][T10261] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.279837][T10261] do_syscall_64+0xcd/0x4c0 [ 498.279865][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.279884][T10261] RIP: 0033:0x7fbd0f18eb69 [ 498.279900][T10261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.279917][T10261] RSP: 002b:00007fbd0ffee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.279935][T10261] RAX: ffffffffffffffda RBX: 00007fbd0f3b6080 RCX: 00007fbd0f18eb69 [ 498.279947][T10261] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 498.279957][T10261] RBP: 00007fbd0f211df1 R08: 0000000000000004 R09: 0000000000000000 [ 498.279968][T10261] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.279978][T10261] R13: 0000000000000000 R14: 00007fbd0f3b6080 R15: 00007ffc78de1108 [ 498.280003][T10261] [ 498.533867][T10261] Mem-Info: [ 498.537049][T10261] active_anon:16008 inactive_anon:0 isolated_anon:0 [ 498.537049][T10261] active_file:10255 inactive_file:51559 isolated_file:0 [ 498.537049][T10261] unevictable:768 dirty:429 writeback:0 [ 498.537049][T10261] slab_reclaimable:10553 slab_unreclaimable:107140 [ 498.537049][T10261] mapped:33121 shmem:8100 pagetables:1250 [ 498.537049][T10261] sec_pagetables:0 bounce:0 [ 498.537049][T10261] kernel_misc_reclaimable:0 [ 498.537049][T10261] free:1272504 free_pcp:22108 free_cma:0 [ 498.584779][T10261] Node 0 active_anon:64032kB inactive_anon:0kB active_file:41020kB inactive_file:206032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132484kB dirty:1712kB writeback:0kB shmem:30864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13256kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 498.617601][T10261] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 498.647827][T10261] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.679526][T10261] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 498.685569][T10261] Node 0 DMA32 free:1205448kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64008kB inactive_anon:0kB active_file:41020kB inactive_file:204704kB unevictable:1536kB writepending:1712kB present:3129332kB managed:2539456kB mlocked:0kB bounce:0kB free_pcp:50224kB local_pcp:19632kB free_cma:0kB [ 498.718234][T10261] lowmem_reserve[]: 0 0 1 1 1 [ 498.723175][T10261] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 498.752461][T10261] lowmem_reserve[]: 0 0 0 0 0 [ 498.757336][T10261] Node 1 Normal free:3869200kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38180kB local_pcp:25728kB free_cma:0kB [ 498.811269][T10261] lowmem_reserve[]: 0 0 0 0 0 [ 498.816233][T10261] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 498.829879][T10261] Node 0 DMA32: 91*4kB (UM) 69*8kB (UE) 283*16kB (UME) 642*32kB (UME) 560*64kB (UME) 199*128kB (UME) 82*256kB (UM) 38*512kB (UME) 18*1024kB (M) 9*2048kB (ME) 254*4096kB (UM) = 1204996kB [ 498.850003][T10261] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 498.866711][T10262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10262 comm=syz.2.925 [ 498.884306][T10261] Node 1 Normal: 4*4kB (UME) 4*8kB (ME) 10*16kB (UME) 82*32kB (UME) 34*64kB (UME) 7*128kB (UME) 7*256kB (UME) 0*512kB 5*1024kB (UME) 1*2048kB (E) 941*4096kB (UM) = 3869200kB [ 498.902383][T10261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.912079][T10261] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 498.921602][T10261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.931311][T10261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 498.971291][T10261] 69910 total pagecache pages [ 498.976167][T10261] 0 pages in swap cache [ 498.980458][T10261] Free swap = 124996kB [ 498.986451][T10261] Total swap = 124996kB [ 498.990765][T10261] 2097051 pages RAM [ 498.994825][T10261] 0 pages HighMem/MovableOnly [ 498.999656][T10261] 430225 pages reserved [ 499.004065][T10261] 0 pages cma reserved [ 499.170240][T10245] syz.1.916: attempt to access beyond end of device [ 499.170240][T10245] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 499.178401][ T30] audit: type=1804 audit(1754380717.748:663): pid=10263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.925" name="/newroot/183/bus/file0" dev="overlay" ino=1004 res=1 errno=0 [ 499.183526][T10245] syz.1.916: attempt to access beyond end of device [ 499.183526][T10245] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 499.205292][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.388385][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 499.416289][T10245] syz.1.916: attempt to access beyond end of device [ 499.416289][T10245] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 499.737177][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 500.381052][T10245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 500.413942][T10245] UDF-fs: Scanning with blocksize 2048 failed [ 500.537673][T10245] syz.1.916: attempt to access beyond end of device [ 500.537673][T10245] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 500.558340][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 500.570271][T10245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 500.581422][T10245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 500.966472][T10245] UDF-fs: Scanning with blocksize 4096 failed [ 501.001313][T10245] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 501.076709][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.083076][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.107542][T10282] Failed to initialize the IGMP autojoin socket (err -2) [ 502.409697][T10271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.594453][T10295] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 502.602940][T10295] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 503.334389][ T30] audit: type=1400 audit(1754380721.738:664): avc: denied { ioctl } for pid=10298 comm="syz.4.931" path="socket:[21120]" dev="sockfs" ino=21120 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 503.358978][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.693103][ T30] audit: type=1400 audit(1754380721.738:665): avc: denied { bind } for pid=10298 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 503.918999][T10306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.169506][ T30] audit: type=1400 audit(1754380725.948:666): avc: denied { map } for pid=10330 comm="syz.4.940" path="socket:[21159]" dev="sockfs" ino=21159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 507.235063][ T30] audit: type=1400 audit(1754380725.948:667): avc: denied { accept } for pid=10330 comm="syz.4.940" path="socket:[21159]" dev="sockfs" ino=21159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 507.600328][ T30] audit: type=1400 audit(1754380726.298:668): avc: denied { accept } for pid=10335 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 507.868884][T10327] syz.2.937 (10327): drop_caches: 2 [ 510.234815][T10361] netlink: 'syz.1.946': attribute type 10 has an invalid length. [ 510.260171][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.273321][T10361] bond0: (slave team0): Enslaving as an active interface with an up link [ 514.664380][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 515.564656][T10393] bridge2: entered promiscuous mode [ 516.308485][ T30] audit: type=1400 audit(1754380735.088:669): avc: denied { read } for pid=10419 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 516.552992][T10424] overlayfs: failed to resolve './file1': -2 [ 517.151865][T10437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.412028][T10448] input: syz1 as /devices/virtual/input/input9 [ 519.643015][ T30] audit: type=1326 audit(1754380737.988:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.4.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6b278eb69 code=0x0 [ 520.136990][T10458] mkiss: ax0: crc mode is auto. [ 520.899374][ T30] audit: type=1400 audit(1754380739.678:671): avc: denied { setopt } for pid=10471 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 523.028756][T10494] Failed to initialize the IGMP autojoin socket (err -2) [ 523.883590][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 524.491623][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 524.506464][T10498] ceph: No mds server is up or the cluster is laggy [ 524.624830][T10511] Failed to initialize the IGMP autojoin socket (err -2) [ 525.402137][ T5861] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 525.752702][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 525.767657][T10526] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.982'. [ 525.786559][T10524] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.982'. [ 526.067880][T10530] Failed to initialize the IGMP autojoin socket (err -2) [ 526.101321][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 526.109469][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 526.125291][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 526.211421][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.266094][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.407158][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.981856][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.058375][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.391836][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 527.401355][ T10] usbtmc 4-1:16.0: can't read capabilities [ 528.113105][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 528.122821][T10552] usbtmc 4-1:16.0: Unable to send data, error -71 [ 529.791503][ T5959] usb 4-1: USB disconnect, device number 6 [ 533.357978][T10614] bridge0: entered promiscuous mode [ 536.359018][ T5861] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 536.916776][ T30] audit: type=1400 audit(1754380755.698:672): avc: denied { connect } for pid=10608 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 537.308605][T10632] SELinux: failed to load policy [ 538.506684][ T30] audit: type=1400 audit(1754380757.278:673): avc: denied { read } for pid=10638 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 539.202306][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 539.284487][ T30] audit: type=1400 audit(1754380757.988:674): avc: denied { read } for pid=10643 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 539.914735][T10660] CIFS: Unable to determine destination address [ 541.054851][T10678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1019'. [ 544.205878][T10695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.972330][T10714] netlink: 'syz.2.1028': attribute type 10 has an invalid length. [ 546.040712][T10713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.647439][T10728] libceph: resolve '4..' (ret=-3): failed [ 548.302917][T10739] 9pnet_fd: Insufficient options for proto=fd [ 550.390150][ T30] audit: type=1400 audit(1754380769.138:675): avc: denied { getopt } for pid=10755 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 552.883374][T10782] libceph: resolve '. [ 552.883374][T10782] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 552.883374][T10782] ' (ret=-3): failed [ 552.952784][T10789] netlink: 'syz.2.1042': attribute type 12 has an invalid length. [ 555.184990][T10814] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 555.550996][T10814] cramfs: wrong magic [ 556.166637][T10823] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 556.745359][T10823] bond3: entered promiscuous mode [ 556.771002][T10823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.822372][T10824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.932595][ T55] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 557.187211][T10824] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 557.242650][ T55] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 557.318452][T10824] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 557.347555][T10824] bond3: (slave vcan2): making interface the new active one [ 557.357028][ T55] usb 3-1: config 0 interface 0 has no altsetting 0 [ 557.817494][T10824] vcan2: entered promiscuous mode [ 557.825614][ T55] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 557.841722][ T55] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 557.849996][ T55] usb 3-1: Product: syz [ 557.856312][ T55] usb 3-1: Manufacturer: syz [ 557.860975][ T55] usb 3-1: SerialNumber: syz [ 557.881019][ T55] usb 3-1: config 0 descriptor?? [ 557.897325][ T55] usb 3-1: selecting invalid altsetting 0 [ 557.906176][T10824] bond3: (slave vcan2): Enslaving as an active interface with an up link [ 558.439743][T10845] lo: left allmulticast mode [ 558.447903][T10845] tunl0: left allmulticast mode [ 558.461412][T10845] gre0: left allmulticast mode [ 558.480838][T10845] gretap0: left allmulticast mode [ 558.495619][T10845] erspan0: left allmulticast mode [ 558.518337][T10845] ip_vti0: left allmulticast mode [ 558.531368][T10845] ip6_vti0: left allmulticast mode [ 558.545515][T10845] sit0: left allmulticast mode [ 558.605705][T10845] ip6tnl0: left allmulticast mode [ 558.619306][T10845] ip6gre0: left allmulticast mode [ 558.633328][T10845] ip6gretap0: left allmulticast mode [ 558.648017][T10845] vcan0: left allmulticast mode [ 558.658931][T10845] bond0: left allmulticast mode [ 558.671745][T10845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.682417][T10845] team0: left allmulticast mode [ 558.689209][T10845] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.696508][T10845] dummy0: left promiscuous mode [ 558.702879][T10845] nlmon0: left allmulticast mode [ 558.803371][ T10] usb 3-1: USB disconnect, device number 9 [ 558.811196][T10845] caif0: left allmulticast mode [ 558.816073][T10845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.912937][ T30] audit: type=1400 audit(1754380777.688:676): avc: denied { listen } for pid=10840 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 559.074760][T10851] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 559.147798][T10854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10854 comm=syz.4.1055 [ 559.497954][ T30] audit: type=1400 audit(1754380778.188:677): avc: denied { bind } for pid=10843 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 560.389877][T10861] Failed to initialize the IGMP autojoin socket (err -2) [ 561.171728][ T5930] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 561.423890][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 561.485621][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.511053][ T5930] usb 2-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 561.650047][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.705930][ T5930] usb 2-1: config 0 descriptor?? [ 562.156776][ T5930] wacom 0003:056A:0217.0004: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 562.507128][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.516908][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.516974][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.565969][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.116364][T10890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 563.452473][ T55] usb 2-1: USB disconnect, device number 17 [ 567.931393][T10932] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 568.182897][T10938] bpq0: entered allmulticast mode [ 568.971308][ T30] audit: type=1400 audit(1754380786.978:678): avc: denied { create } for pid=10931 comm="syz.3.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 569.221057][ T30] audit: type=1400 audit(1754380786.988:679): avc: denied { ioctl } for pid=10931 comm="syz.3.1074" path="socket:[23628]" dev="sockfs" ino=23628 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 569.482715][T10944] bio_check_eod: 2 callbacks suppressed [ 569.482726][T10944] syz.3.1077: attempt to access beyond end of device [ 569.482726][T10944] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 569.550306][T10944] qnx4: unable to read the superblock [ 569.568142][T10947] batman_adv: batadv0: Adding interface: ipvlan2 [ 569.576252][T10947] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.608935][T10947] batman_adv: batadv0: Interface activated: ipvlan2 [ 570.305482][T10281] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 570.317879][T10281] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.739880][T10957] tipc: Enabling of bearer rejected, failed to enable media [ 572.137239][T10972] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 572.608586][T10972] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.618139][T10972] bond0: (slave team0): Enslaving as an active interface with an up link [ 573.775811][T10987] 9pnet_fd: Insufficient options for proto=fd [ 574.799528][ T30] audit: type=1400 audit(1754380793.238:680): avc: denied { map } for pid=10997 comm="syz.1.1087" path="socket:[23722]" dev="sockfs" ino=23722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 576.529259][T11024] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 576.537259][T11024] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 576.553138][T11024] team0: Port device wlan1 added [ 576.905844][ T5930] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 577.131237][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 578.220149][T11036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12662 sclass=netlink_route_socket pid=11036 comm=syz.0.1097 [ 579.200380][ T30] audit: type=1400 audit(1754380797.918:681): avc: denied { getopt } for pid=11037 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 579.843533][ T30] audit: type=1400 audit(1754380797.928:682): avc: denied { setopt } for pid=11037 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 580.831546][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 580.874352][ T5930] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 580.982864][ T5930] usb 3-1: can't read configurations, error -71 [ 581.760121][ T30] audit: type=1400 audit(1754380800.438:683): avc: denied { write } for pid=11055 comm="syz.3.1104" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 583.586167][T11075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.298988][T11086] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 585.446631][T11086] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.463105][T11086] bond0: (slave team0): Enslaving as an active interface with an up link [ 585.533639][T11088] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 585.542214][T11088] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 585.550646][T11088] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 589.697050][T11119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.704632][T11119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.823769][T11119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.831418][T11119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.056874][T11124] bridge4: entered promiscuous mode [ 593.461899][T11157] netlink: 'syz.4.1124': attribute type 10 has an invalid length. [ 593.481671][T11157] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.495356][T11157] bond0: (slave team0): Enslaving as an active interface with an up link [ 594.979883][T11159] ceph: No mds server is up or the cluster is laggy [ 594.986846][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 598.200952][ T30] audit: type=1400 audit(1754380816.498:684): avc: denied { bind } for pid=11194 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 598.702027][T11202] bond4: entered promiscuous mode [ 598.707805][T11202] bond4: entered allmulticast mode [ 598.713349][T11202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.584438][ T30] audit: type=1400 audit(1754380818.358:685): avc: denied { map } for pid=11206 comm="syz.1.1136" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 599.805198][T11213] 9pnet_virtio: no channels available for device syz [ 602.947057][T11241] tmpfs: Unknown parameter 'usrquota0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 602.947057][T11241] 0 [ 603.252487][T11244] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 603.300740][T11244] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 603.342171][T11244] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 603.585591][T11244] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 603.684960][T11244] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 603.718174][T11244] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 603.824838][T11244] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 603.838397][T11244] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 603.894882][T11244] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 604.061742][ T5959] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 604.189099][T11258] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 604.260028][ T5959] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 604.270334][ T5959] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.282050][ T5959] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.345858][ T5959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.516711][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.504089][ T5959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.511663][ T5959] usb 2-1: invalid MIDI out EP 0 [ 605.574401][ T5959] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 605.587868][T11258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.702855][T11269] udevd[11269]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.730017][T11258] bond2: (slave bond3): making interface the new active one [ 605.758224][T11258] bond2: (slave bond3): Enslaving as an active interface with an up link [ 605.773232][T11272] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 605.961468][T11254] delete_channel: no stack [ 606.047063][ T5959] usb 2-1: USB disconnect, device number 18 [ 606.902250][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 607.011904][T11282] ceph: No mds server is up or the cluster is laggy [ 607.822762][T11298] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1153'. [ 607.833988][T11295] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1153'. [ 608.130807][T11303] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 609.345581][T11303] bond2: entered promiscuous mode [ 609.353080][T11303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.711204][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 609.867600][ T5930] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.879466][ T5930] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.991953][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.016958][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.080433][T11330] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 610.464758][T11314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 610.484153][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.149195][ T55] usb 4-1: USB disconnect, device number 7 [ 612.327775][ T30] audit: type=1400 audit(1754380831.108:686): avc: denied { connect } for pid=11348 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 612.335828][T11349] Failed to initialize the IGMP autojoin socket (err -2) [ 613.059143][ T30] audit: type=1400 audit(1754380831.838:687): avc: denied { setopt } for pid=11348 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 613.478280][T11360] hub 8-0:1.0: USB hub found [ 613.491407][T11360] hub 8-0:1.0: 1 port detected [ 614.777243][ T5861] Bluetooth: hci4: unexpected event for opcode 0x080b [ 614.998838][T11371] bond0: (slave team0): Releasing backup interface [ 615.015624][T11371] bond0: (slave dummy0): Releasing backup interface [ 615.500426][ T30] audit: type=1400 audit(1754380834.270:688): avc: denied { bind } for pid=11379 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 616.201384][ T5847] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 616.371215][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 616.377138][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 616.377951][ T5847] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 616.402043][T11394] overlayfs: failed to clone upperpath [ 616.461984][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.481057][ T5847] usb 3-1: config 0 descriptor?? [ 616.492018][ T5847] hso 3-1:0.0: Can't find BULK IN endpoint [ 617.188377][ T10] usb 3-1: USB disconnect, device number 12 [ 618.361916][T11412] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 618.369737][T11412] netlink: 'syz.3.1183': attribute type 4 has an invalid length. [ 620.636215][T10281] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.478886][ T30] audit: type=1326 audit(1754380839.735:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 621.702425][ T30] audit: type=1326 audit(1754380839.735:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 621.827724][ T30] audit: type=1326 audit(1754380839.745:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 622.113650][ T30] audit: type=1326 audit(1754380839.745:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 622.218155][ T30] audit: type=1326 audit(1754380839.745:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 622.322867][ T30] audit: type=1326 audit(1754380839.755:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 622.452796][ T30] audit: type=1326 audit(1754380839.755:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 623.112241][ T30] audit: type=1326 audit(1754380839.755:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 623.135758][ T30] audit: type=1326 audit(1754380839.755:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 623.182935][ T30] audit: type=1326 audit(1754380839.755:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 624.185014][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.191419][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.459976][T11471] bond0: (slave team0): Releasing backup interface [ 624.543992][T11471] bridge_slave_0: left allmulticast mode [ 624.681399][T11471] bridge_slave_0: left promiscuous mode [ 624.701672][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.591996][T11471] bridge_slave_1: left allmulticast mode [ 626.597814][T11471] bridge_slave_1: left promiscuous mode [ 626.612031][T11471] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.166260][T11471] bond1: (slave veth0_to_bond): Releasing backup interface [ 627.679157][T11471] bond0: (slave bond_slave_0): Releasing backup interface [ 627.707214][T11471] bond0: (slave bond_slave_1): Releasing backup interface [ 627.766300][T11471] team0: Port device team_slave_0 removed [ 628.080064][T11471] team0: Port device team_slave_1 removed [ 628.091628][T11471] bond0: (slave ip6erspan0): Releasing backup interface [ 628.269087][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 628.269099][ T30] audit: type=1400 audit(1754380847.025:721): avc: denied { lock } for pid=11499 comm="syz.2.1204" path="socket:[25642]" dev="sockfs" ino=25642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 628.470580][ T30] audit: type=1400 audit(1754380847.245:722): avc: denied { bind } for pid=11492 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 628.787822][T11510] binder: 11504:11510 ioctl 4018620d 0 returned -22 [ 628.798510][ T30] audit: type=1400 audit(1754380847.575:723): avc: denied { write } for pid=11492 comm="syz.0.1202" path="socket:[25660]" dev="sockfs" ino=25660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 629.277174][ T55] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 629.798273][ T55] usb 2-1: config 0 has no interfaces? [ 629.887588][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 629.910063][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.037956][ T55] usb 2-1: config 0 descriptor?? [ 631.248220][ T30] audit: type=1400 audit(1754380850.025:724): avc: denied { write } for pid=11533 comm="syz.4.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 632.055645][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'. [ 632.128358][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 632.218501][ T10] usb 2-1: USB disconnect, device number 19 [ 633.216885][ T5847] usb 4-1: config 0 has no interfaces? [ 633.227787][ T5847] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 633.292641][T11557] IPv6: Can't replace route, no match found [ 633.632544][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.649243][ T5847] usb 4-1: Product: syz [ 633.721350][ T5847] usb 4-1: Manufacturer: syz [ 633.739813][ T5847] usb 4-1: SerialNumber: syz [ 633.891290][ T5930] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 633.992891][ T5847] usb 4-1: config 0 descriptor?? [ 634.286654][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 634.372586][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.413582][ T5930] usb 2-1: Product: syz [ 634.670014][ T5930] usb 2-1: Manufacturer: syz [ 634.682502][ T5930] usb 2-1: SerialNumber: syz [ 634.711410][ T5930] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 634.753463][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 635.200892][ T5930] usb 2-1: USB disconnect, device number 20 [ 636.631702][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 636.641438][ T10] ath9k_htc: Failed to initialize the device [ 636.652958][ T5930] usb 2-1: ath9k_htc: USB layer deinitialized [ 637.434444][ T30] audit: type=1400 audit(1754380856.015:725): avc: denied { watch_sb } for pid=11581 comm="syz.2.1223" path="/240/file0" dev="tmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 638.055164][ T5930] usb 4-1: USB disconnect, device number 8 [ 639.480974][T11613] binder_alloc: 11609: binder_alloc_buf size 12280 failed, no address space [ 639.490243][T11613] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 639.658429][ T30] audit: type=1400 audit(1754380858.255:726): avc: denied { call } for pid=11609 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 640.691857][ T30] audit: type=1400 audit(1754380859.465:727): avc: denied { write } for pid=11617 comm="syz.4.1240" path="socket:[25887]" dev="sockfs" ino=25887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 642.639992][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 642.649047][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 650.136415][T11709] blktrace: Concurrent blktraces are not allowed on sg0 [ 650.251489][T11715] blkio.reset_stats is deprecated [ 650.621829][ T30] audit: type=1400 audit(1754380869.035:728): avc: denied { setopt } for pid=11707 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 650.981401][T11718] netlink: 'syz.0.1251': attribute type 20 has an invalid length. [ 653.841885][ T8140] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.208295][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'. [ 655.449689][T11768] SELinux: syz.0.1264 (11768) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 656.685167][ T30] audit: type=1400 audit(1754380875.465:729): avc: denied { mount } for pid=11775 comm="syz.2.1266" name="/" dev="hugetlbfs" ino=26136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 656.890776][ T30] audit: type=1400 audit(1754380875.465:730): avc: denied { remount } for pid=11775 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 657.153773][ T30] audit: type=1400 audit(1754380875.935:731): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 657.323646][ T30] audit: type=1400 audit(1754380876.095:732): avc: denied { accept } for pid=11783 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 657.401293][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 658.126846][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.155991][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.694557][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 658.705989][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.754801][ T5930] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.765058][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.790571][ T5930] usb 4-1: config 0 descriptor?? [ 659.210552][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.218082][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.225624][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.233092][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.240673][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.248437][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.256022][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.263462][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.270842][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.278476][ T5930] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 659.296889][ T5930] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 659.561258][ T30] audit: type=1400 audit(1754380878.335:733): avc: granted { setsecparam } for pid=11779 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 659.758645][ T5930] usb 4-1: USB disconnect, device number 9 [ 662.051221][T11821] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 663.829942][T11831] netlink: 'syz.0.1278': attribute type 2 has an invalid length. [ 663.837965][T11831] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 664.129939][T11835] random: crng reseeded on system resumption [ 664.936859][ T30] audit: type=1400 audit(1754380882.905:734): avc: denied { append } for pid=11833 comm="syz.1.1280" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 665.099808][ T30] audit: type=1400 audit(1754380883.845:735): avc: denied { map } for pid=11830 comm="syz.2.1279" path="socket:[26287]" dev="sockfs" ino=26287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 665.379534][T11842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.988703][ T30] audit: type=1326 audit(1754380884.765:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm="syz.3.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x0 [ 666.568501][T11855] bond0: (slave team0): Releasing backup interface [ 666.744223][T11855] bond0: (slave wlan1): Releasing backup interface [ 667.208731][T11855] bond2: (slave vcan1): Releasing backup interface [ 667.216643][T11855] vcan1: left promiscuous mode [ 667.264633][T11855] bond3: (slave vcan2): Releasing backup interface [ 667.271800][T11855] vcan2: left promiscuous mode [ 667.295128][T11855] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 667.302129][T11855] batman_adv: batadv0: Removing interface: ipvlan2 [ 667.498319][T11865] Failed to initialize the IGMP autojoin socket (err -2) [ 669.351011][T11872] Failed to initialize the IGMP autojoin socket (err -2) [ 669.404403][ T30] audit: type=1400 audit(1754380888.185:737): avc: denied { create } for pid=11871 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 669.533859][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 670.588231][ T30] audit: type=1400 audit(1754380889.315:738): avc: denied { getopt } for pid=11874 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 670.701775][T11893] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 670.986231][T11897] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 674.519082][ T30] audit: type=1400 audit(1754380893.295:739): avc: denied { ioctl } for pid=11924 comm="syz.4.1301" path="socket:[26953]" dev="sockfs" ino=26953 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 675.234146][T11932] bond0: (slave bond_slave_0): Releasing backup interface [ 675.246672][T11932] bond0: (slave bond_slave_1): Releasing backup interface [ 675.758552][T11932] team0: Port device team_slave_0 removed [ 675.796753][T11932] team0: Port device team_slave_1 removed [ 675.803866][T11932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.843247][T11932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.884696][T11932] team0: Port device wlan1 removed [ 676.000435][T11932] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 676.036526][T11932] batman_adv: batadv0: Removing interface: ipvlan1 [ 678.597601][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 680.027811][T11965] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 680.037172][T11965] ref_ctr increment failed for inode: 0x560 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802d7ea040 [ 680.750221][ T30] audit: type=1400 audit(1754380899.525:740): avc: denied { read } for pid=11978 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 681.161367][ T30] audit: type=1400 audit(1754380899.935:741): avc: denied { ioctl } for pid=11982 comm="syz.0.1312" path="socket:[26518]" dev="sockfs" ino=26518 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 685.393717][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.401239][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.140151][T12044] Bluetooth: MGMT ver 1.23 [ 686.432725][T12043] libceph: resolve '. [ 686.432725][T12043] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 686.432725][T12043] ' (ret=-3): failed [ 688.521957][ T30] audit: type=1804 audit(1754380907.105:742): pid=12066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1332" name="file0" dev="ramfs" ino=27208 res=1 errno=0 [ 688.641120][ T5858] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 688.883113][ T5858] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 688.990852][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 689.083683][ T5858] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 689.123337][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 689.132051][ T5858] usb 3-1: Product: syz [ 689.331696][ T5858] usb 3-1: Manufacturer: syz [ 689.341159][ T5858] usb 3-1: SerialNumber: syz [ 689.359911][ T5858] usb 3-1: config 0 descriptor?? [ 689.411001][ T5858] usb 3-1: selecting invalid altsetting 0 [ 690.367855][ T5930] usb 3-1: USB disconnect, device number 13 [ 690.629969][T12093] overlayfs: failed to clone upperpath [ 690.733715][T12099] netlink: 'syz.0.1339': attribute type 2 has an invalid length. [ 690.742288][T12099] netlink: 'syz.0.1339': attribute type 4 has an invalid length. [ 691.093184][T12095] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 691.737224][T12095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.766716][T12098] vlan2: entered allmulticast mode [ 692.781278][T12098] veth1: entered allmulticast mode [ 692.801569][T12098] bond2: (slave vlan2): making interface the new active one [ 692.821846][T12098] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 692.991224][T10281] Bluetooth: hci4: command 0x0c1a tx timeout [ 693.821099][ T5847] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 695.603100][T12140] Can't find ip_set type hash:ip,ma [ 695.691519][ T5847] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 695.727709][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.841451][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.852354][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 695.865845][ T5847] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 695.874990][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.107493][ T5847] usb 4-1: config 0 descriptor?? [ 697.175999][ T5847] usb 4-1: can't set config #0, error -71 [ 697.190318][ T5847] usb 4-1: USB disconnect, device number 10 [ 697.229470][T12151] Failed to initialize the IGMP autojoin socket (err -2) [ 697.738003][ T30] audit: type=1400 audit(1754380916.515:743): avc: denied { connect } for pid=12155 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 698.788835][ T30] audit: type=1400 audit(1754380917.295:744): avc: denied { write } for pid=12167 comm="syz.0.1358" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 698.834659][ T30] audit: type=1400 audit(1754380917.295:745): avc: denied { open } for pid=12167 comm="syz.0.1358" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 698.926327][ T30] audit: type=1400 audit(1754380917.295:746): avc: denied { ioctl } for pid=12167 comm="syz.0.1358" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 698.987378][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 699.247608][T12184] vlan3: entered promiscuous mode [ 700.051352][T12184] vlan3: entered allmulticast mode [ 700.056467][T12184] hsr_slave_1: entered allmulticast mode [ 700.094761][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 700.931367][T12193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.940955][T12193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 700.959110][T12193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.977184][T12193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.984814][T12193] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 701.905585][T12213] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1367'. [ 702.777045][T10281] Bluetooth: hci0: command 0x0c1a tx timeout [ 702.991258][T10281] Bluetooth: hci4: command 0x0c1a tx timeout [ 702.991270][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 702.991305][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 702.997309][T10281] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.172397][ T30] audit: type=1400 audit(1754380921.945:747): avc: denied { accept } for pid=12229 comm="syz.1.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 703.314425][T12240] o2cb: This node has not been configured. [ 703.320380][T12240] o2cb: Cluster check failed. Fix errors before retrying. [ 703.327629][T12240] (syz.2.1372,12240,0):user_dlm_register:674 ERROR: status = -22 [ 703.335360][T12240] (syz.2.1372,12240,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 704.051224][ T30] audit: type=1400 audit(1754380922.095:748): avc: denied { add_name } for pid=12231 comm="syz.2.1372" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.074287][ T30] audit: type=1400 audit(1754380922.095:749): avc: denied { create } for pid=12231 comm="syz.2.1372" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 704.098738][ T30] audit: type=1400 audit(1754380922.095:750): avc: denied { associate } for pid=12231 comm="syz.2.1372" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 705.334738][T12254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.440070][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 707.492438][ T1209] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 707.568500][T12277] hsr_slave_0: left promiscuous mode [ 707.605731][T12277] hsr_slave_1: left promiscuous mode [ 707.683754][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 710.245786][T12304] IPv6: Can't replace route, no match found [ 710.672215][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 710.952298][ T1209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 710.983206][ T1209] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 711.033201][ T1209] usb 2-1: can't read configurations, error -71 [ 711.897697][T12319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 711.904345][ T30] audit: type=1400 audit(1754380930.675:751): avc: denied { mount } for pid=12311 comm="syz.1.1392" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 712.831243][T12335] 9pnet_fd: Insufficient options for proto=fd [ 715.071478][T12348] fuse: Unknown parameter '00000000000000000000' [ 715.535769][T12355] IPv6: Can't replace route, no match found [ 716.015035][ T30] audit: type=1400 audit(1754380934.795:752): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 716.447622][ T30] audit: type=1400 audit(1754380935.105:753): avc: denied { map } for pid=12359 comm="syz.1.1404" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 716.644403][ T30] audit: type=1400 audit(1754380935.105:754): avc: denied { execute } for pid=12359 comm="syz.1.1404" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 719.540729][ T8169] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.463606][T12421] IPv6: Can't replace route, no match found [ 724.795106][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 724.800045][T12435] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.818071][T12435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 724.980438][T12437] Failed to initialize the IGMP autojoin socket (err -2) [ 725.380278][ T10] usb 3-1: config 0 has no interfaces? [ 725.443304][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.459675][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.490587][T12445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1425'. [ 725.513436][ T10] usb 3-1: Product: syz [ 725.528056][ T10] usb 3-1: Manufacturer: syz [ 725.536505][ T10] usb 3-1: SerialNumber: syz [ 725.563395][ T10] usb 3-1: config 0 descriptor?? [ 725.884668][ T30] audit: type=1400 audit(1754381200.590:755): avc: denied { getopt } for pid=12446 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 726.185477][ T5858] usb 3-1: USB disconnect, device number 14 [ 726.667352][T12437] Failed to initialize the IGMP autojoin socket (err -2) [ 728.327461][ T30] audit: type=1800 audit(1754381202.740:756): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1432" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 728.817370][T12475] team_slave_1: left allmulticast mode [ 728.902961][T12482] i: entered promiscuous mode [ 729.364450][T12485] random: crng reseeded on system resumption [ 731.616473][T12492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 733.617406][T12526] ubi31: attaching mtd0 [ 733.635726][T12526] ubi31: scanning is finished [ 733.640510][T12526] ubi31: empty MTD device detected [ 733.652234][ T30] audit: type=1800 audit(1754381208.360:757): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1446" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 733.902206][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 733.948557][T12526] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 733.956373][T12526] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 733.963693][T12526] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 733.970692][T12526] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 733.978144][T12526] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 733.984989][T12526] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 733.993099][T12526] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 553126550 [ 734.003154][T12526] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 734.014945][T12534] ubi31: background thread "ubi_bgt31d" started, PID 12534 [ 736.795384][T12548] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 738.178483][T12564] syz.3.1454: attempt to access beyond end of device [ 738.178483][T12564] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 739.728148][T12579] nbd: must specify a size in bytes for the device [ 740.633353][T12590] IPv6: Can't replace route, no match found [ 743.001736][ T30] audit: type=1400 audit(1754381217.640:758): avc: denied { nlmsg_tty_audit } for pid=12604 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 743.311358][ T1209] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 743.743785][ T1209] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 743.767225][ T1209] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 744.096437][ T1209] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.131784][ T1209] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.151917][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.578328][ T1209] usb 3-1: can't set config #27, error -71 [ 744.585938][ T1209] usb 3-1: USB disconnect, device number 15 [ 744.609865][T12586] delete_channel: no stack [ 746.239105][T12646] blktrace: Concurrent blktraces are not allowed on sg0 [ 746.841819][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.848251][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.263847][T12670] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 748.554533][T12677] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 751.400390][ T30] audit: type=1400 audit(1754381226.180:759): avc: denied { setattr } for pid=12689 comm="syz.3.1482" name="NETLINK" dev="sockfs" ino=30025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 751.424438][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.265422][T12747] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 757.357932][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 757.694081][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 757.848963][T12770] ceph: No mds server is up or the cluster is laggy [ 760.662001][T12817] netlink: 'syz.3.1508': attribute type 64 has an invalid length. [ 760.669916][T12817] netlink: 'syz.3.1508': attribute type 4 has an invalid length. [ 760.679251][T12817] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1508'. [ 761.920944][T12830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 762.022340][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.163457][T12849] blktrace: Concurrent blktraces are not allowed on sg0 [ 767.162425][T12880] Failed to initialize the IGMP autojoin socket (err -2) [ 768.573312][T12863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.063796][T12909] siw: device registration error -23 [ 771.305563][T12924] blktrace: Concurrent blktraces are not allowed on sg0 [ 771.793087][ T30] audit: type=1326 audit(1754381246.510:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 771.797933][T12928] syz.0.1537: attempt to access beyond end of device [ 771.797933][T12928] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 771.832013][T12924] netlink: 'syz.3.1535': attribute type 20 has an invalid length. [ 771.865784][T12928] syz.0.1537: attempt to access beyond end of device [ 771.865784][T12928] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 771.908680][ T30] audit: type=1326 audit(1754381246.520:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 771.941212][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 771.992679][T12928] syz.0.1537: attempt to access beyond end of device [ 771.992679][T12928] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 772.051167][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 772.092183][T12928] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 772.104664][ T30] audit: type=1326 audit(1754381246.520:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.131142][T12928] UDF-fs: Scanning with blocksize 512 failed [ 772.137227][ T30] audit: type=1326 audit(1754381246.520:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.213669][T12928] syz.0.1537: attempt to access beyond end of device [ 772.213669][T12928] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 772.246519][T12928] syz.0.1537: attempt to access beyond end of device [ 772.246519][T12928] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 772.261774][ T30] audit: type=1326 audit(1754381246.520:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.285195][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 772.285431][T12928] syz.0.1537: attempt to access beyond end of device [ 772.285431][T12928] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 772.311528][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 772.349462][T12928] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 772.358446][T12928] UDF-fs: Scanning with blocksize 1024 failed [ 772.365335][T12928] syz.0.1537: attempt to access beyond end of device [ 772.365335][T12928] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 772.379741][ T30] audit: type=1326 audit(1754381246.520:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.406612][T12928] syz.0.1537: attempt to access beyond end of device [ 772.406612][T12928] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 772.448007][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 772.468626][T12928] syz.0.1537: attempt to access beyond end of device [ 772.468626][T12928] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 772.483162][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 772.505570][ T30] audit: type=1326 audit(1754381246.520:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.560754][ T30] audit: type=1326 audit(1754381246.520:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.591517][T12928] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 772.601239][T12928] UDF-fs: Scanning with blocksize 2048 failed [ 772.623049][T12928] syz.0.1537: attempt to access beyond end of device [ 772.623049][T12928] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 772.712584][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 772.733547][T12928] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 772.746349][ T30] audit: type=1326 audit(1754381246.520:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.790374][T12928] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 772.799507][T12928] UDF-fs: Scanning with blocksize 4096 failed [ 772.805839][ T30] audit: type=1326 audit(1754381246.530:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.1.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 772.859879][T12928] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 774.589477][T12944] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 777.542333][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 777.979436][T12977] ceph: No mds server is up or the cluster is laggy [ 777.979915][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 778.782325][T12989] CIFS: Unable to determine destination address [ 778.859477][T12990] overlayfs: failed to resolve './file0': -2 [ 779.561413][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 779.561429][ T30] audit: type=1326 audit(1754381254.330:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 779.901419][ T30] audit: type=1326 audit(1754381254.330:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 779.954715][T13001] input: syz1 as /devices/virtual/input/input14 [ 780.011213][ T30] audit: type=1326 audit(1754381254.330:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 780.034618][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.255668][ T30] audit: type=1326 audit(1754381254.330:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 780.279407][ T30] audit: type=1326 audit(1754381254.330:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 780.302746][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.381214][ T30] audit: type=1326 audit(1754381254.330:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 780.404594][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.580909][ T30] audit: type=1326 audit(1754381254.330:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 780.604329][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.128171][ T30] audit: type=1326 audit(1754381254.330:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 781.151659][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.279301][ T30] audit: type=1326 audit(1754381254.330:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 782.302731][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.308839][ T30] audit: type=1326 audit(1754381254.330:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.1.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 785.745750][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 785.745765][ T30] audit: type=1800 audit(1754381260.430:819): pid=13056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1564" name="bus" dev="overlay" ino=1669 res=0 errno=0 [ 786.072634][ T30] audit: type=1400 audit(1754381260.860:820): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 786.136070][T13060] ubi: mtd0 is already attached to ubi31 [ 787.156415][T13073] overlayfs: failed to resolve './file1': -2 [ 787.522629][ T5856] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 787.806058][T13077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.636338][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1571'. [ 789.047439][T13089] netlink: 'syz.2.1574': attribute type 2 has an invalid length. [ 790.552769][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.693231][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1580'. [ 794.678563][ T1209] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 795.212832][ T1209] usb 2-1: device descriptor read/64, error -71 [ 795.380743][T13153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 797.077475][ T30] audit: type=1800 audit(1754381271.460:821): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1592" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 797.474521][T13171] netlink: 'syz.1.1593': attribute type 4 has an invalid length. [ 798.176521][ T30] audit: type=1326 audit(1754381272.470:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 798.242691][ T30] audit: type=1326 audit(1754381272.470:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 798.275662][ T30] audit: type=1326 audit(1754381272.470:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 798.300374][ T30] audit: type=1326 audit(1754381272.480:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 798.522048][ T30] audit: type=1326 audit(1754381272.480:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 798.744475][ T30] audit: type=1326 audit(1754381272.480:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13182 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb2067c1425 code=0x7ffc0000 [ 798.989919][ T30] audit: type=1326 audit(1754381272.600:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 799.208662][T13195] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 799.531625][ T30] audit: type=1326 audit(1754381272.600:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 799.562095][ T30] audit: type=1326 audit(1754381272.600:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20678eb69 code=0x7ffc0000 [ 801.187969][T13214] ISOFS: Unable to identify CD-ROM format. [ 805.901187][T12233] Bluetooth: hci0: unexpected event for opcode 0x001c [ 805.982176][T13254] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1614'. [ 807.252018][T13267] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 808.222721][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 808.222757][ T30] audit: type=1400 audit(1754381282.780:870): avc: denied { read write } for pid=13274 comm="syz.2.1619" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 808.291832][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.298209][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.299379][ T30] audit: type=1400 audit(1754381282.780:871): avc: denied { open } for pid=13274 comm="syz.2.1619" path="/311/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 809.704698][T13297] blktrace: Concurrent blktraces are not allowed on sg0 [ 810.771116][ T5858] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 811.365060][ T5858] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 811.436179][ T5858] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.515486][ T5858] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.546034][ T5858] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 811.610539][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.129044][ T5858] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.267941][ T5858] usb 3-1: invalid MIDI out EP 0 [ 812.751726][T13305] delete_channel: no stack [ 813.692004][T13336] udevd[13336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.840776][ T5858] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 813.974893][ T5858] usb 3-1: USB disconnect, device number 16 [ 814.133965][T13344] netlink: 'syz.3.1636': attribute type 4 has an invalid length. [ 814.141820][T13344] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1636'. [ 816.213112][ T5858] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 816.841936][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.877082][ T5858] usb 2-1: config 0 has no interfaces? [ 816.885014][ T5858] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 816.906865][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.941683][ T5858] usb 2-1: config 0 descriptor?? [ 817.051073][ T30] audit: type=1400 audit(1754381291.807:872): avc: denied { read } for pid=13350 comm="syz.3.1639" path="socket:[31485]" dev="sockfs" ino=31485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 817.416660][T13371] blktrace: Concurrent blktraces are not allowed on sg0 [ 818.599977][ T5858] usb 2-1: string descriptor 0 read error: -71 [ 818.619150][ T5858] usb 2-1: USB disconnect, device number 25 [ 818.775115][T13383] usb usb9: usbfs: process 13383 (syz.0.1646) did not claim interface 16 before use [ 820.426528][T13347] delete_channel: no stack [ 824.694204][ T30] audit: type=1800 audit(1754381298.807:873): pid=13433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1658" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 826.835936][T13453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1664'. [ 826.878211][T13453] openvswitch: netlink: Flow actions attr not present in new flow. [ 826.897920][ T30] audit: type=1400 audit(1754381301.677:874): avc: denied { view } for pid=13454 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 826.939745][T13453] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 826.947269][T13453] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 827.045635][T13458] blktrace: Concurrent blktraces are not allowed on sg0 [ 827.131195][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 827.551159][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 827.704196][ T5847] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 827.817250][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 827.832883][ T30] audit: type=1400 audit(1754381302.507:875): avc: denied { ioctl } for pid=13461 comm="syz.0.1669" path="socket:[32548]" dev="sockfs" ino=32548 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 827.857911][ T5847] usb 4-1: Product: syz [ 827.878586][ T5847] usb 4-1: Manufacturer: syz [ 827.901121][ T5847] usb 4-1: SerialNumber: syz [ 827.928542][ T5847] usb 4-1: config 0 descriptor?? [ 828.427364][T13455] syzkaller0: entered promiscuous mode [ 828.461331][T13455] syzkaller0: entered allmulticast mode [ 828.791882][ T30] audit: type=1800 audit(1754381303.527:876): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1671" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 829.135976][ T5847] usb 4-1: USB disconnect, device number 11 [ 829.241203][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.051047][ T5847] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 830.170108][T13490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 830.182637][T13490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.191586][T13490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 830.200227][T13490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 830.208256][T13490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 830.426989][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.438988][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.464934][ T5847] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 830.679139][T13501] use of bytesused == 0 is deprecated and will be removed in the future, [ 830.687656][T13501] use the actual size instead. [ 831.071127][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.162581][ T5847] usb 2-1: config 0 descriptor?? [ 831.604011][ T5847] hid_parser_main: 5 callbacks suppressed [ 831.604031][ T5847] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 831.633234][ T5847] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 831.817547][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.861250][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.885189][T13508] netlink: 'syz.3.1680': attribute type 10 has an invalid length. [ 831.920135][ T30] audit: type=1400 audit(1754381306.657:877): avc: denied { setopt } for pid=13506 comm="syz.3.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 831.958777][T13508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.998268][T13508] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 832.044516][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 832.283125][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 832.289217][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.299786][T12233] Bluetooth: hci2: command 0x0c1a tx timeout [ 832.406900][T12233] Bluetooth: hci1: command 0x0c1a tx timeout [ 833.469326][T12233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.486099][ T5847] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 833.501202][T12233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 833.509874][ T5847] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 833.518424][T12233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 833.540309][T12233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 833.549103][T12233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 833.561370][ T5847] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -71 [ 833.574363][ T5847] usb 2-1: USB disconnect, device number 26 [ 833.671591][ T30] audit: type=1400 audit(1754381308.367:878): avc: denied { mounton } for pid=13510 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 833.754326][T13510] Failed to initialize the IGMP autojoin socket (err -2) [ 834.114130][T13520] overlayfs: failed to resolve './file1': -2 [ 835.642673][T12233] Bluetooth: hci5: command tx timeout [ 835.769228][ T8168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.971868][ T30] audit: type=1326 audit(1754381310.707:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 836.021311][ T30] audit: type=1326 audit(1754381310.707:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 836.442823][ T30] audit: type=1326 audit(1754381310.707:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 836.921900][ T8168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.923107][ T30] audit: type=1326 audit(1754381310.707:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 836.988911][ T30] audit: type=1326 audit(1754381310.707:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 837.012964][T13542] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1684'. [ 837.114774][ T30] audit: type=1326 audit(1754381310.707:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 837.253484][ T30] audit: type=1326 audit(1754381310.707:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 837.712418][T10281] Bluetooth: hci5: command tx timeout [ 837.721702][ T8168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.737083][ T30] audit: type=1326 audit(1754381310.707:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 837.760496][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.849289][T13556] ipvlan2: entered promiscuous mode [ 838.261046][ T30] audit: type=1326 audit(1754381310.707:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 838.284795][ T30] audit: type=1326 audit(1754381310.707:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 838.308208][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.314883][ T30] audit: type=1326 audit(1754381310.707:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 838.338659][ T30] audit: type=1326 audit(1754381310.707:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 838.362071][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.369260][ T30] audit: type=1326 audit(1754381310.707:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e238eb69 code=0x7ffc0000 [ 838.392666][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.066813][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1693'. [ 839.740865][T13510] chnl_net:caif_netlink_parms(): no params data found [ 839.791484][T10281] Bluetooth: hci5: command 0x040f tx timeout [ 841.139923][T13594] blktrace: Concurrent blktraces are not allowed on sg0 [ 841.927012][T10281] Bluetooth: hci5: command 0x040f tx timeout [ 842.936569][T13510] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.951216][T13510] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.958465][T13510] bridge_slave_0: entered allmulticast mode [ 843.285149][T13623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50704 sclass=netlink_route_socket pid=13623 comm=syz.0.1702 [ 843.475442][T13510] bridge_slave_0: entered promiscuous mode [ 843.951036][T10281] Bluetooth: hci5: command 0x040f tx timeout [ 843.957824][T13510] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.038094][T13510] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.066551][T13510] bridge_slave_1: entered allmulticast mode [ 844.094269][T13510] bridge_slave_1: entered promiscuous mode [ 844.492732][T13642] bio_check_eod: 2 callbacks suppressed [ 844.492751][T13642] syz.0.1705: attempt to access beyond end of device [ 844.492751][T13642] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 844.882573][T13652] No source specified [ 845.121066][ T1209] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 845.387139][ T1209] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 845.395472][ T1209] usb 1-1: config 0 has no interface number 0 [ 845.411067][ T1209] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 845.493839][ T1209] usb 1-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 845.511081][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.519252][ T1209] usb 1-1: Product: syz [ 845.539473][ T1209] usb 1-1: Manufacturer: syz [ 845.544371][ T1209] usb 1-1: SerialNumber: syz [ 845.565969][ T1209] usb 1-1: config 0 descriptor?? [ 845.586664][T13642] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 845.598030][ T1209] usb-storage 1-1:0.132: USB Mass Storage device detected [ 845.689209][ T1209] usb-storage 1-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 846.200006][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 846.200040][ T30] audit: type=1400 audit(1754381320.967:949): avc: denied { ioctl } for pid=13655 comm="syz.3.1708" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 846.303474][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.657166][ T8168] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 846.743817][ T8168] bond0 (unregistering): (slave team0): Releasing backup interface [ 846.768676][ T8168] bond0 (unregistering): Released all slaves [ 846.963271][T13666] blktrace: Concurrent blktraces are not allowed on sg0 [ 847.191990][ T8168] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 847.200079][ T8168] vcan1: left promiscuous mode [ 847.207166][ T8168] bond1 (unregistering): Released all slaves [ 847.224032][ T8168] bond2 (unregistering): (slave bond3): Releasing backup interface [ 847.233469][ T8168] bond2 (unregistering): Released all slaves [ 847.376388][ T8168] bond3 (unregistering): Released all slaves [ 847.392983][T13632] tipc: Enabled bearer , priority 10 [ 847.502993][ T8168] tipc: Disabling bearer [ 847.550704][ T8168] tipc: Left network mode [ 847.655061][T13510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.352019][T13510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.418657][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 848.475968][ T55] usb 1-1: USB disconnect, device number 9 [ 848.511146][ T1209] tipc: Node number set to 2133045888 [ 849.113604][T13510] team0: Port device team_slave_0 added [ 849.222123][T13510] team0: Port device team_slave_1 added [ 849.759741][T13510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.812172][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.921331][T13510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.153789][T13510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.160739][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.304995][T13510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.400598][ T8168] hsr_slave_0: left promiscuous mode [ 850.754010][ T8168] veth1_macvtap: left promiscuous mode [ 850.759922][ T8168] veth0_macvtap: left promiscuous mode [ 850.769314][ T8168] veth1_vlan: left promiscuous mode [ 850.775050][ T8168] veth0_vlan: left promiscuous mode [ 851.198854][ T30] audit: type=1326 audit(1754381325.947:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 851.222284][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.351056][ T30] audit: type=1326 audit(1754381325.957:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 851.580440][ T30] audit: type=1326 audit(1754381325.957:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 851.931095][ T30] audit: type=1326 audit(1754381325.957:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 851.954961][ T30] audit: type=1326 audit(1754381325.957:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 851.978685][ T30] audit: type=1326 audit(1754381325.957:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 852.002211][ T30] audit: type=1326 audit(1754381325.957:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 852.025764][ T30] audit: type=1326 audit(1754381325.957:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 852.049402][ T30] audit: type=1326 audit(1754381325.957:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 852.090467][ T30] audit: type=1326 audit(1754381325.957:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 852.199825][ T30] audit: type=1326 audit(1754381325.957:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.3.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7658eb69 code=0x7ffc0000 [ 853.067122][T13730] syz.0.1720: attempt to access beyond end of device [ 853.067122][T13730] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 853.351108][ T55] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 856.889736][T13755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13755 comm=syz.4.1729 [ 856.905635][T13755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1729'. [ 856.915106][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 857.786133][ T5858] lo speed is unknown, defaulting to 1000 [ 857.792136][ T5858] infiniband syz0: ib_query_port failed (-19) [ 857.962835][ T55] usb 1-1: device descriptor read/all, error -71 [ 858.342078][T13510] hsr_slave_0: entered promiscuous mode [ 858.348824][T13510] hsr_slave_1: entered promiscuous mode [ 859.037874][T13775] infiniband syz!: set down [ 859.042548][T13775] infiniband syz!: added team_slave_0 [ 859.049669][T13775] syz!: rxe_create_qp: returned err = -2 [ 859.055559][T13775] infiniband syz!: Couldn't create ib_mad QP1 [ 859.062572][T13775] infiniband syz!: Couldn't open port 1 [ 859.086345][T13775] RDS/IB: syz!: added [ 859.091058][T13775] smc: adding ib device syz! with port count 1 [ 859.097555][T13775] smc: ib device syz! port 1 has pnetid [ 859.900728][T13785] overlayfs: missing 'lowerdir' [ 860.576501][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 860.755644][T13790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.126796][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1736'. [ 862.233603][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 862.233617][ T30] audit: type=1400 audit(1754381336.627:982): avc: denied { setattr } for pid=13806 comm="syz.4.1738" name="" dev="pipefs" ino=34401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 862.544972][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1740'. [ 862.733948][T13510] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 863.446345][T13510] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 864.088952][T13510] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 864.160069][T13831] loop3: detected capacity change from 0 to 7 [ 864.193735][T13831] Dev loop3: unable to read RDB block 7 [ 864.203647][T13831] loop3: unable to read partition table [ 864.254297][T13510] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 864.271376][T13831] loop3: partition table beyond EOD, truncated [ 864.309930][T13831] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 866.085454][T13510] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.364394][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.371573][ T8168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.385030][T13849] blktrace: Concurrent blktraces are not allowed on sg0 [ 866.596563][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.603829][ T8168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.091839][T13859] lo speed is unknown, defaulting to 1000 [ 867.097633][T13859] lo speed is unknown, defaulting to 1000 [ 867.103718][T13859] lo speed is unknown, defaulting to 1000 [ 867.112093][T13859] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 867.128248][T13859] lo speed is unknown, defaulting to 1000 [ 867.134746][T13859] lo speed is unknown, defaulting to 1000 [ 867.141287][T13859] lo speed is unknown, defaulting to 1000 [ 867.147745][T13859] lo speed is unknown, defaulting to 1000 [ 867.184826][T13847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 867.192686][T12233] Bluetooth: hci5: command 0x040f tx timeout [ 867.202636][ T30] audit: type=1804 audit(1754381341.957:983): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1746" name="file0" dev="ramfs" ino=34597 res=1 errno=0 [ 867.231046][T10281] Bluetooth: hci0: command 0x0c1a tx timeout [ 867.440197][T13847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 867.447766][T13847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 868.220132][T13847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 868.243682][T13847] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 868.265904][T13847] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 868.339533][T13847] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 868.514225][T13870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1751'. [ 869.846068][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.853837][T12233] Bluetooth: hci3: command 0x0c1a tx timeout [ 869.859863][T12233] Bluetooth: hci2: command 0x0c1a tx timeout [ 869.865928][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.281083][T10281] Bluetooth: hci5: command 0x040f tx timeout [ 870.287126][T10281] Bluetooth: hci4: command 0x0c1a tx timeout [ 870.810436][T13510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.902812][T13898] overlayfs: failed to clone lowerpath [ 870.996595][T13899] overlayfs: failed to clone upperpath [ 872.154575][T13913] siw: device registration error -23 [ 872.506463][T10281] Bluetooth: hci5: command 0x040f tx timeout [ 873.070550][T13925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1761'. [ 873.755194][T13929] Failed to initialize the IGMP autojoin socket (err -2) [ 874.204670][T13935] fuse: Unknown parameter '(' [ 874.601071][T10281] Bluetooth: hci5: command 0x040f tx timeout [ 875.634365][T13930] Failed to initialize the IGMP autojoin socket (err -2) [ 875.717973][T13510] veth0_vlan: entered promiscuous mode [ 875.911297][T13939] blktrace: Concurrent blktraces are not allowed on sg0 [ 876.184395][T13510] veth1_vlan: entered promiscuous mode [ 876.413634][T13510] veth0_macvtap: entered promiscuous mode [ 876.486949][T13510] veth1_macvtap: entered promiscuous mode [ 876.585728][T13946] blktrace: Concurrent blktraces are not allowed on sg0 [ 877.319339][T13952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.468192][T13510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.526264][T13510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.819572][T13960] syz.1.1770: attempt to access beyond end of device [ 877.819572][T13960] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 877.833540][T13510] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 877.909086][T13510] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 878.145948][T13510] wireguard: wg0: Could not create IPv4 socket [ 878.236553][ T5847] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 878.759456][ T30] audit: type=1800 audit(1754381353.127:984): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1771" name="bus" dev="overlay" ino=1974 res=0 errno=0 [ 878.759987][T13510] wireguard: wg1: Could not create IPv4 socket [ 879.012940][ T5847] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 879.022349][ T5847] usb 2-1: config 0 has no interface number 0 [ 879.028416][ T5847] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 879.062473][T13510] wireguard: wg2: Could not create IPv4 socket [ 879.182019][ T5847] usb 2-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 879.197811][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.215968][ T5847] usb 2-1: Product: syz [ 879.240668][ T5847] usb 2-1: Manufacturer: syz [ 879.283967][ T5847] usb 2-1: SerialNumber: syz [ 879.312198][ T5847] usb 2-1: config 0 descriptor?? [ 879.340462][T13960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 879.414879][ T5847] usb-storage 2-1:0.132: USB Mass Storage device detected [ 879.757845][ T5847] usb-storage 2-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 881.412041][ T5930] usb 2-1: USB disconnect, device number 27 [ 881.717929][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 882.472462][ T10] usb 4-1: config 0 has no interfaces? [ 882.477969][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 882.515085][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.625273][ T10] usb 4-1: config 0 descriptor?? [ 882.658419][T12233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.668815][T12233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.677437][T12233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 883.116974][T12233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 883.124792][T12233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 883.230822][T14019] Failed to initialize the IGMP autojoin socket (err -2) [ 884.416636][ T30] audit: type=1804 audit(1754381359.197:985): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1787" name="file0" dev="ramfs" ino=35216 res=1 errno=0 [ 885.232524][T12233] Bluetooth: hci1: command tx timeout [ 885.400524][ T5847] usb 4-1: USB disconnect, device number 12 [ 886.906124][T14086] blktrace: Concurrent blktraces are not allowed on sg0 [ 887.329525][T12233] Bluetooth: hci1: command tx timeout [ 887.431860][ T30] audit: type=1804 audit(1754381362.211:986): pid=14096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1794" name="file0" dev="ramfs" ino=36199 res=1 errno=0 [ 887.922165][T14087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 888.094826][T14087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 888.104965][T14087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 888.115295][T14087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 888.186649][T14087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 888.290198][T14087] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 888.389102][T14087] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 889.062336][T14019] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 889.208044][T14019] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 889.348665][T14019] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 890.279342][T12233] Bluetooth: hci0: command 0x0c1a tx timeout [ 890.285598][T12233] Bluetooth: hci2: command 0x0c1a tx timeout [ 890.291971][T12233] Bluetooth: hci1: command 0x0419 tx timeout [ 890.298002][T12233] Bluetooth: hci4: command 0x0c1a tx timeout [ 890.304201][T12233] Bluetooth: hci3: command 0x0c1a tx timeout [ 890.439657][T14019] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 890.977493][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1800'. [ 892.352393][T10281] Bluetooth: hci1: command 0x0419 tx timeout [ 892.545603][T14172] blktrace: Concurrent blktraces are not allowed on sg0 [ 893.374047][T14019] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 893.596012][T14019] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 894.110442][T14019] wireguard: wg0: Could not create IPv4 socket [ 894.133314][T14019] wireguard: wg1: Could not create IPv4 socket [ 894.165230][T14019] wireguard: wg2: Could not create IPv4 socket [ 894.449465][T10281] Bluetooth: hci1: command 0x0419 tx timeout [ 895.360853][T14205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 895.372015][T14205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 895.378996][T14205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 895.397078][T14205] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 896.039285][T14217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.311023][T10281] Bluetooth: hci0: command 0x0c1a tx timeout [ 897.805755][T10281] Bluetooth: hci4: command 0x0c1a tx timeout [ 897.811986][T10281] Bluetooth: hci3: command 0x0c1a tx timeout [ 897.816107][T12233] Bluetooth: hci2: command 0x0c1a tx timeout [ 898.376725][T14258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.001302][ T5903] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 899.164065][ T5903] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.197567][ T5903] usb 1-1: config 1 interface 0 has no altsetting 0 [ 899.230740][ T5903] usb 1-1: string descriptor 0 read error: -22 [ 899.252142][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 899.288451][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.303493][ T5903] usbhid 1-1:1.0: can't add hid device: -71 [ 901.326056][T14294] blktrace: Concurrent blktraces are not allowed on sg0 [ 901.521366][ T5903] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 901.569848][ T5903] usb 1-1: USB disconnect, device number 12 [ 903.445437][T10281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 903.458299][T10281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 903.467222][T10281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 903.478798][T10281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 903.571548][ T30] audit: type=1400 audit(1754381378.331:987): avc: denied { append } for pid=14316 comm="syz.1.1826" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 903.929838][T10281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.969582][T14320] Failed to initialize the IGMP autojoin socket (err -2) [ 904.967794][ T30] audit: type=1804 audit(1754381379.671:988): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1831" name="file0" dev="ramfs" ino=36663 res=1 errno=0 [ 906.064850][T12233] Bluetooth: hci1: command tx timeout [ 906.779951][ T30] audit: type=1804 audit(1754381381.561:989): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1834" name="file0" dev="ramfs" ino=35831 res=1 errno=0 [ 907.739983][ T30] audit: type=1800 audit(1754381382.141:990): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1835" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 907.837052][T14320] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 908.141095][T12233] Bluetooth: hci1: command tx timeout [ 908.360335][T14320] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 910.191010][T12233] Bluetooth: hci1: command tx timeout [ 910.297636][T14320] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 910.408758][T14320] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 910.538101][T14406] blktrace: Concurrent blktraces are not allowed on sg0 [ 910.885530][T14390] random: crng reseeded on system resumption [ 910.988661][T14409] o2cb: This node has not been configured. [ 910.994715][T14409] o2cb: Cluster check failed. Fix errors before retrying. [ 911.001915][T14409] (syz.3.1840,14409,1):user_dlm_register:674 ERROR: status = -22 [ 911.009619][T14409] (syz.3.1840,14409,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 912.753005][T12233] Bluetooth: hci1: command tx timeout [ 912.753596][T14425] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 913.131437][T14425] syz_tun: entered promiscuous mode [ 913.176563][T14425] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 914.095684][T14439] netlink: 'syz.0.1845': attribute type 4 has an invalid length. [ 914.103506][T14439] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1845'. [ 917.134150][ T5858] rtc_cmos 00:00: Alarms can be up to one day in the future [ 917.161380][ T5858] rtc_cmos 00:00: Alarms can be up to one day in the future [ 917.307644][ T5858] rtc_cmos 00:00: Alarms can be up to one day in the future [ 917.324224][T14320] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 917.345722][T14320] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 917.365895][ T5858] rtc_cmos 00:00: Alarms can be up to one day in the future [ 917.376227][T14320] wireguard: wg0: Could not create IPv4 socket [ 917.393652][ T5858] rtc rtc0: __rtc_set_alarm: err=-22 [ 917.499514][T14320] wireguard: wg1: Could not create IPv4 socket [ 917.555183][T14320] wireguard: wg2: Could not create IPv4 socket [ 917.807816][T14481] blktrace: Concurrent blktraces are not allowed on sg0 [ 918.568495][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 919.136610][T14498] ubi31: detaching mtd0 [ 919.284154][T14498] ubi31: mtd0 is detached [ 919.644569][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 919.656663][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 919.877270][T14503] blktrace: Concurrent blktraces are not allowed on sg0 [ 922.020203][T14531] tipc: Enabling of bearer rejected, failed to enable media [ 922.336873][T14527] blktrace: Concurrent blktraces are not allowed on sg0 [ 923.191029][ T30] audit: type=1800 audit(1754381397.761:991): pid=14537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1861" name="bus" dev="overlay" ino=2014 res=0 errno=0 [ 923.333927][T14546] /dev/nullb0: Can't open blockdev [ 923.977956][T14548] /dev/nullb0: Can't open blockdev [ 924.837635][T14562] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[14562] [ 925.479419][T14566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.049211][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 926.097129][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 926.237296][T10281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 926.248887][T10281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 926.260845][T10281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 926.269729][T10281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 926.278768][T10281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.388405][T14567] Failed to initialize the IGMP autojoin socket (err -2) [ 927.245774][ T30] audit: type=1400 audit(1754381402.031:992): avc: denied { bind } for pid=14582 comm="syz.4.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 928.096234][T14607] blktrace: Concurrent blktraces are not allowed on sg0 [ 928.352304][T12233] Bluetooth: hci1: command tx timeout [ 930.473516][T12233] Bluetooth: hci1: command tx timeout [ 931.451583][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.457926][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.546604][T14567] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 931.610759][T14567] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 931.655494][T14567] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 931.920420][T14567] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 931.956086][ T30] audit: type=1400 audit(1754381406.711:993): avc: denied { search } for pid=14650 comm="syz.0.1884" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 932.105777][ T30] audit: type=1400 audit(1754381406.711:994): avc: denied { append } for pid=14650 comm="syz.0.1884" name="event3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 932.511126][T12233] Bluetooth: hci1: command tx timeout [ 933.964849][ T30] audit: type=1804 audit(1754381408.731:995): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1890" name="file0" dev="ramfs" ino=37750 res=1 errno=0 [ 934.591639][T12233] Bluetooth: hci1: command tx timeout [ 934.976377][T14710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1891'. [ 935.782282][T14721] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 937.132413][T14567] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 937.302478][T14567] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 937.324987][T14567] wireguard: wg0: Could not create IPv4 socket [ 937.335537][T14567] wireguard: wg1: Could not create IPv4 socket [ 937.343285][T14567] wireguard: wg2: Could not create IPv4 socket [ 938.831089][ T30] audit: type=1400 audit(1754381413.611:996): avc: denied { write } for pid=14760 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 939.676203][T14781] blktrace: Concurrent blktraces are not allowed on sg0 [ 941.201427][T14797] /dev/nullb0: Can't open blockdev [ 943.684703][T14825] ------------[ cut here ]------------ [ 943.690513][T14825] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 943.781547][T14825] WARNING: CPU: 0 PID: 14825 at net/mac80211/main.c:425 ieee80211_link_info_change_notify+0x349/0x3f0 [ 943.792651][T14825] Modules linked in: [ 943.796837][T14825] CPU: 0 UID: 0 PID: 14825 Comm: syz.4.1907 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 943.808581][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 943.818717][T14825] RIP: 0010:ieee80211_link_info_change_notify+0x349/0x3f0 [ 943.825854][T14825] Code: 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 fd f8 bc f6 8b 54 24 04 48 8b 74 24 08 48 c7 c7 c0 42 08 8d e8 48 97 7b f6 90 <0f> 0b 90 90 e9 0b fe ff ff e8 d9 f8 bc f6 90 0f 0b 90 e9 21 fd ff [ 943.845676][T14825] RSP: 0018:ffffc90003c6fb30 EFLAGS: 00010282 [ 943.852122][T14825] RAX: 0000000000000000 RBX: ffff88805ab04d80 RCX: ffffc9000e0ef000 [ 943.860107][T14825] RDX: 0000000000080000 RSI: ffffffff817a3315 RDI: 0000000000000001 [ 943.868144][T14825] RBP: 0000000000040000 R08: 0000000000000001 R09: 0000000000000000 [ 943.876331][T14825] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805ab05728 [ 943.884331][T14825] R13: ffff88805ab06500 R14: 0000000000000000 R15: ffff88805abe8e40 [ 943.892324][T14825] FS: 00007fb6b366a6c0(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 943.901453][T14825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.908028][T14825] CR2: 00007fdb6ffb5f40 CR3: 000000005f61b000 CR4: 00000000003526f0 [ 943.916102][T14825] Call Trace: [ 943.919370][T14825] [ 943.922332][T14825] ieee80211_recalc_txpower+0xe4/0x110 [ 943.927801][T14825] ieee80211_set_tx_power+0x2b8/0x10d0 [ 943.933278][T14825] cfg80211_wext_siwtxpower+0x30e/0x680 [ 943.938820][T14825] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 943.944930][T14825] ioctl_standard_call+0xb5/0x1d0 [ 943.949950][T14825] ? __pfx_ioctl_standard_call+0x10/0x10 [ 943.955660][T14825] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 943.961820][T14825] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 943.968234][T14825] wext_handle_ioctl+0x226/0x2a0 [ 943.973179][T14825] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 943.978630][T14825] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 943.983704][T14825] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 943.990567][T14825] sock_ioctl+0x3a1/0x6b0 [ 943.994965][T14825] ? __pfx_sock_ioctl+0x10/0x10 [ 943.999811][T14825] ? hook_file_ioctl_common+0x145/0x410 [ 944.005445][T14825] ? selinux_file_ioctl+0x180/0x270 [ 944.010648][T14825] ? selinux_file_ioctl+0xb4/0x270 [ 944.015815][T14825] ? __pfx_sock_ioctl+0x10/0x10 [ 944.020664][T14825] __x64_sys_ioctl+0x18b/0x210 [ 944.025513][T14825] do_syscall_64+0xcd/0x4c0 [ 944.030024][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.035973][T14825] RIP: 0033:0x7fb6b278eb69 [ 944.040391][T14825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.060067][T14825] RSP: 002b:00007fb6b366a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.068525][T14825] RAX: ffffffffffffffda RBX: 00007fb6b29b6080 RCX: 00007fb6b278eb69 [ 944.076553][T14825] RDX: 0000200000000040 RSI: 0000000000008b26 RDI: 0000000000000006 [ 944.084589][T14825] RBP: 00007fb6b2811df1 R08: 0000000000000000 R09: 0000000000000000 [ 944.092592][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.100550][T14825] R13: 0000000000000000 R14: 00007fb6b29b6080 R15: 00007fffe088baf8 [ 944.108540][T14825] [ 944.111751][T14825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 944.119029][T14825] CPU: 0 UID: 0 PID: 14825 Comm: syz.4.1907 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 944.130730][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 944.140784][T14825] Call Trace: [ 944.144084][T14825] [ 944.146998][T14825] dump_stack_lvl+0x3d/0x1f0 [ 944.151592][T14825] vpanic+0x6e8/0x7a0 [ 944.155569][T14825] ? __pfx_vpanic+0x10/0x10 [ 944.160067][T14825] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 944.166553][T14825] panic+0xca/0xd0 [ 944.170282][T14825] ? __pfx_panic+0x10/0x10 [ 944.174695][T14825] check_panic_on_warn+0xab/0xb0 [ 944.179621][T14825] __warn+0xf6/0x3c0 [ 944.183495][T14825] ? preempt_schedule_notrace+0x62/0xe0 [ 944.189029][T14825] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 944.195511][T14825] report_bug+0x3c3/0x580 [ 944.199832][T14825] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 944.206317][T14825] handle_bug+0x184/0x210 [ 944.210639][T14825] exc_invalid_op+0x17/0x50 [ 944.215123][T14825] asm_exc_invalid_op+0x1a/0x20 [ 944.219956][T14825] RIP: 0010:ieee80211_link_info_change_notify+0x349/0x3f0 [ 944.227048][T14825] Code: 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 fd f8 bc f6 8b 54 24 04 48 8b 74 24 08 48 c7 c7 c0 42 08 8d e8 48 97 7b f6 90 <0f> 0b 90 90 e9 0b fe ff ff e8 d9 f8 bc f6 90 0f 0b 90 e9 21 fd ff [ 944.246648][T14825] RSP: 0018:ffffc90003c6fb30 EFLAGS: 00010282 [ 944.252706][T14825] RAX: 0000000000000000 RBX: ffff88805ab04d80 RCX: ffffc9000e0ef000 [ 944.260679][T14825] RDX: 0000000000080000 RSI: ffffffff817a3315 RDI: 0000000000000001 [ 944.268648][T14825] RBP: 0000000000040000 R08: 0000000000000001 R09: 0000000000000000 [ 944.276635][T14825] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805ab05728 [ 944.284598][T14825] R13: ffff88805ab06500 R14: 0000000000000000 R15: ffff88805abe8e40 [ 944.292564][T14825] ? __warn_printk+0x1a5/0x350 [ 944.297332][T14825] ieee80211_recalc_txpower+0xe4/0x110 [ 944.302777][T14825] ieee80211_set_tx_power+0x2b8/0x10d0 [ 944.308277][T14825] cfg80211_wext_siwtxpower+0x30e/0x680 [ 944.313815][T14825] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 944.319891][T14825] ioctl_standard_call+0xb5/0x1d0 [ 944.324937][T14825] ? __pfx_ioctl_standard_call+0x10/0x10 [ 944.330585][T14825] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 944.336648][T14825] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 944.343104][T14825] wext_handle_ioctl+0x226/0x2a0 [ 944.348034][T14825] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 944.353659][T14825] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 944.358676][T14825] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 944.365528][T14825] sock_ioctl+0x3a1/0x6b0 [ 944.369855][T14825] ? __pfx_sock_ioctl+0x10/0x10 [ 944.374684][T14825] ? hook_file_ioctl_common+0x145/0x410 [ 944.380227][T14825] ? selinux_file_ioctl+0x180/0x270 [ 944.385410][T14825] ? selinux_file_ioctl+0xb4/0x270 [ 944.390509][T14825] ? __pfx_sock_ioctl+0x10/0x10 [ 944.395348][T14825] __x64_sys_ioctl+0x18b/0x210 [ 944.400109][T14825] do_syscall_64+0xcd/0x4c0 [ 944.404608][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.410482][T14825] RIP: 0033:0x7fb6b278eb69 [ 944.414881][T14825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.434470][T14825] RSP: 002b:00007fb6b366a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.442883][T14825] RAX: ffffffffffffffda RBX: 00007fb6b29b6080 RCX: 00007fb6b278eb69 [ 944.450871][T14825] RDX: 0000200000000040 RSI: 0000000000008b26 RDI: 0000000000000006 [ 944.458840][T14825] RBP: 00007fb6b2811df1 R08: 0000000000000000 R09: 0000000000000000 [ 944.466801][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.474759][T14825] R13: 0000000000000000 R14: 00007fb6b29b6080 R15: 00007fffe088baf8 [ 944.482742][T14825] [ 944.485978][T14825] Kernel Offset: disabled [ 944.490281][T14825] Rebooting in 86400 seconds..