last executing test programs: 32m35.438957673s ago: executing program 2 (id=3110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0xfffffffc, 0x1, 0xffffffff, 0x6dc, 0x4, 0x200, 0x10, 0x368, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f0000000380)=[0x4], 0x1, 0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000100)={0x20080522}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee01) ioctl$TUNSETLINK(r3, 0x400454cd, 0x310) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x3, 0x8}, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r6 = eventfd2(0x4, 0x0) io_submit(r5, 0x1, &(0x7f0000001640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xb, r4, 0x0, 0x0, 0x3, 0x0, 0x1, r6}]) 32m33.08889557s ago: executing program 2 (id=3116): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) 32m28.784337929s ago: executing program 2 (id=3124): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$tcp_mem(r4, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) 32m26.074014622s ago: executing program 2 (id=3133): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/202, 0xca, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x80, 0x0, [{@loopback}, {@multicast1}, {}, {@dev}, {@multicast2}, {@loopback}, {@empty}, {@dev}]}}) syz_open_dev$MSR(&(0x7f0000000240), 0x100000000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 32m25.635634369s ago: executing program 2 (id=3137): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x9, 0xffffffffffffffff, 'id0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x8000}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @loopback}], 0x4c) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) socket$kcm(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)) 32m22.910716868s ago: executing program 2 (id=3142): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setregset(0x4205, r5, 0x3, &(0x7f0000000200)={&(0x7f00000001c0)="a7daf1abafb86dec82f32032e6cb2c63a53ef8b2f953303f861920d2589385e4850d", 0x22}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) 32m7.732723777s ago: executing program 32 (id=3142): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setregset(0x4205, r5, 0x3, &(0x7f0000000200)={&(0x7f00000001c0)="a7daf1abafb86dec82f32032e6cb2c63a53ef8b2f953303f861920d2589385e4850d", 0x22}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) 7.582489907s ago: executing program 4 (id=9391): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000180)=@ethtool_stats}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0xc000, 0x1000, &(0x7f0000002600)=""/4096}, {0xc000, 0x12, &(0x7f00000002c0)=""/18}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.495845322s ago: executing program 1 (id=9393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 7.494538947s ago: executing program 4 (id=9394): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 7.286238615s ago: executing program 1 (id=9396): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x100000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 6.553426734s ago: executing program 1 (id=9402): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) 6.331938879s ago: executing program 1 (id=9404): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="400810"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) 5.583828859s ago: executing program 1 (id=9408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 5.374344468s ago: executing program 1 (id=9410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r3}}, 0x120) 5.231069251s ago: executing program 4 (id=9412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0xa, 0x3, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.127488864s ago: executing program 0 (id=9413): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40004885}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x14000800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7ffffffffffffffd, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.987466502s ago: executing program 4 (id=9414): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$alg(0x26, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 4.806701792s ago: executing program 0 (id=9415): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 4.699071059s ago: executing program 4 (id=9417): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x6) alarm(0x0) socket$pppl2tp(0x18, 0x1, 0x1) 3.6471328s ago: executing program 3 (id=9419): timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 3.269103584s ago: executing program 5 (id=9420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x191c) 2.854318271s ago: executing program 5 (id=9421): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80002000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x5, 0x39, 0x747d5e13, 0xc, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x3, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0xd, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da6, 0x2, 0x202, 0x2, 0x4, 0xe, 0x7, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xfffffffd, 0x5], [0x7, 0x1e, 0x3, 0x8080, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x8f08, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0x5, 0x7, 0x1, 0x6, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0x5, 0x2, 0x0, 0x10000002, 0x401, 0xc, 0x3, 0x4, 0x9, 0xe, 0x5, 0x3, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x0, 0x4, 0x81, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x9, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x46d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xed, 0x9, 0x20000005, 0x3, 0xdc, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xfffc, 0x74a8b99a, 0x3, 0x86, 0x2, 0x3fffffe, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x105, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x3, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x83, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x4, 0xffff8a33, 0xfffffff8, 0x401, 0x9, 0x200, 0x7, 0x0, 0x7ffffffd, 0xa, 0xe, 0x101, 0x13, 0xf, 0x136, 0x6]}, 0x45c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x7ffe}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.852114497s ago: executing program 0 (id=9422): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc2) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x1, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/80, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.548269635s ago: executing program 5 (id=9423): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0xffffffff, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, 0x0) r6 = epoll_create(0x10001) close_range(r0, r6, 0x2) 2.480129349s ago: executing program 0 (id=9424): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 2.194830414s ago: executing program 3 (id=9425): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xa0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 2.12505523s ago: executing program 3 (id=9426): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) r1 = syz_io_uring_setup(0x1108, &(0x7f0000000240)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) 2.110711228s ago: executing program 4 (id=9427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.490834891s ago: executing program 0 (id=9428): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 1.347113502s ago: executing program 3 (id=9429): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) 1.258635777s ago: executing program 5 (id=9430): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80002000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x5, 0x39, 0x747d5e13, 0xc, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x3, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0xd, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da6, 0x2, 0x202, 0x2, 0x4, 0xe, 0x7, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xfffffffd, 0x5], [0x7, 0x1e, 0x3, 0x8080, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x8f08, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0x5, 0x7, 0x1, 0x6, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0x5, 0x2, 0x0, 0x10000002, 0x401, 0xc, 0x3, 0x4, 0x9, 0xe, 0x5, 0x3, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x0, 0x4, 0x81, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x9, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x46d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xed, 0x9, 0x20000005, 0x3, 0xdc, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xfffc, 0x74a8b99a, 0x3, 0x86, 0x2, 0x3fffffe, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x105, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x3, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x83, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x4, 0xffff8a33, 0xfffffff8, 0x401, 0x9, 0x200, 0x7, 0x0, 0x7ffffffd, 0xa, 0xe, 0x101, 0x13, 0xf, 0x136, 0x6]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x7ffe}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 964.429862ms ago: executing program 5 (id=9431): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) bind$x25(r2, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 699.26523ms ago: executing program 0 (id=9432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x36, 0x0, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r3 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0xa199d81a3839c514, 0xffffffff, 0x377, 0x0, r3}, 0x1) 490.614457ms ago: executing program 3 (id=9433): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80002000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x5, 0x39, 0x747d5e13, 0xc, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x3, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0xd, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da6, 0x2, 0x202, 0x2, 0x4, 0xe, 0x7, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xfffffffd, 0x5], [0x7, 0x1e, 0x3, 0x8080, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x8f08, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0x5, 0x7, 0x1, 0x6, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0x5, 0x2, 0x0, 0x10000002, 0x401, 0xc, 0x3, 0x4, 0x9, 0xe, 0x5, 0x3, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x0, 0x4, 0x81, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x9, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x46d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xed, 0x9, 0x20000005, 0x3, 0xdc, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xfffc, 0x74a8b99a, 0x3, 0x86, 0x2, 0x3fffffe, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x105, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x3, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x83, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x4, 0xffff8a33, 0xfffffff8, 0x401, 0x9, 0x200, 0x7, 0x0, 0x7ffffffd, 0xa, 0xe, 0x101, 0x13, 0xf, 0x136, 0x6]}, 0x45c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x7ffe}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 490.221627ms ago: executing program 5 (id=9434): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x40000) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000040)={r3, 0x1, 0x6613, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x2000000, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x2f00, 0x5, 0xd09c, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x200110, 0x1001, 0x9, 0x4, 0xffff, 0x6, 0x5, 0x40000109, 0x830, 0x30000, 0xffffffff, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x3, 0xc, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) write$uinput_user_dev(r5, &(0x7f00000003c0)={'syz1\x00', {0x1, 0x2, 0x2, 0x3ff}, 0x1a, [0x9, 0x9, 0x22, 0x6, 0x6, 0x981d, 0x3, 0x8d3, 0x6, 0xffffffff, 0xe50, 0x2, 0x0, 0x3, 0x6, 0x9, 0x4ae3, 0x2, 0x9, 0xff, 0x91f, 0x2, 0x7a, 0x6, 0x3, 0x800, 0x5, 0x6, 0x42, 0x5, 0x4, 0x0, 0x15aa, 0x0, 0x8a, 0x5, 0x1, 0x80, 0x8, 0xfffffff7, 0x0, 0xd, 0x5c, 0xcd79, 0xb, 0x3ff, 0x3, 0x9, 0x3, 0x7, 0x8, 0x9, 0x80000001, 0x3, 0xff, 0x92, 0x331, 0x9, 0x10001, 0x6, 0x4, 0x3, 0x2, 0x40], [0x0, 0x3, 0xfff, 0x6, 0x10001, 0x9, 0x8000, 0x1, 0x5, 0x3, 0xfffffffe, 0x4, 0x0, 0x2, 0x9249, 0xe19c, 0x3, 0x0, 0x200, 0x2, 0x1, 0x2000, 0x7, 0x65f, 0x1, 0x8, 0x3, 0x9bccb4, 0x9, 0x7, 0x7ff, 0x1, 0x5, 0x6, 0x4, 0xd19, 0x8, 0x6, 0x9a, 0x800, 0x401, 0x8, 0x7, 0x0, 0x8, 0xb, 0x44c7e086, 0xcd1, 0xfffffffe, 0xa, 0x9, 0x1, 0x7, 0x8001, 0x3, 0x10, 0xae3, 0x0, 0x2, 0x7, 0xffffa425, 0x2, 0xffff], [0x9, 0x2, 0x1, 0x1, 0x4c88, 0xf44, 0x4, 0x9, 0x5, 0x2, 0x7fff, 0x0, 0x5, 0x5d, 0x6, 0x7ff, 0x8000, 0x8, 0x1, 0x6, 0x2, 0x396b, 0x1, 0x8, 0x1ff, 0x9, 0x65, 0x8, 0x3d5d, 0x1, 0x4, 0xe, 0x1, 0x3, 0x5, 0xfffffffb, 0xe000, 0x2, 0x6, 0x9, 0x6, 0x7, 0x6, 0x9, 0x3, 0x2, 0x8001, 0xf4, 0xffff, 0x0, 0x9, 0x7, 0x0, 0x463a8c6b, 0x400, 0xc1, 0x3094000, 0x6, 0x7, 0x7, 0xfffffffa, 0xffffffff, 0x1, 0x4], [0x297593ab, 0x1, 0x1, 0x0, 0x7, 0x2, 0x401, 0x0, 0x7f, 0x3e74, 0x7, 0x400, 0x0, 0xfffffffa, 0x5, 0x42c00000, 0xab3, 0x7, 0x0, 0x0, 0x7, 0x7, 0x6, 0x7, 0x4, 0xfe0, 0x4, 0x7, 0x5, 0x96, 0xffff6f38, 0x1, 0x1, 0x7fffffff, 0xd, 0x5, 0x80000001, 0x8, 0x3, 0x7bd, 0x6, 0xa4, 0x7fff, 0x0, 0x7fffffff, 0x80000001, 0x0, 0x48, 0x1, 0x7, 0x5, 0x7fffffff, 0x8001, 0xc07, 0x7fff, 0xd, 0x0, 0xcfed, 0x2, 0x2, 0x7, 0xfffff813, 0x1, 0x6]}, 0x45c) 0s ago: executing program 3 (id=9435): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000002000)=@newtaction={0xc58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x64, 0x1, [@m_skbmod={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "21442bbeaada265de7ae7c2764edc4c316ddf6bec76776f26b786f63ff7a0c1ec481fc5f1b4c076dfe53b295ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x51c, 0x1, [@m_tunnel_key={0x50, 0xc, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfdf, 0x200, 0x8, 0x400, 0x6}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x11c, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1200000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0xc8, 0x6, "7e0c8e092ba1a038e82264e70211afd49df094248a13519a79c463b0daa8a402fd6610b66e2c912b7bf62e5f5a22f4193d247cf66ec3f141a0d0dbeb5f74d6d1aa9625e8efd64683c9df95a7a8e8cc884fc06e0561c66cd30d3055cdc8417675138c1e03bc88ffb550a9ba9aa23ef500e14c8580d569a01cd7c1f9a63ea2537bc69924cf66ea5279cd09ffbbc4e868faae649805936e7721f2e6b8ac4b1dbfb3cf4f7acde654cba3f42e2c5421588da177928c0496d76b5ec62e169fcf3c88c2b8fd4e4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x68, 0x16, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x1c, 0x6, "d3af2ca855214dfaa9cf27d6b98e71532d2b2708e4d345d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xdc, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x2, 0x5}, 0x2}}]}, {0x8f, 0x6, "50eccede0517c3f670d929b0a60539f5e75fabe73505e5d2d82bf4d8efcce4b6a8483750952189b5c59493b1b693425bc717ba9129a383b8ddb606f3cd7ced5822ddba16fe229d162cb0d7718b1476dafcb7e02f1415e2ec7cd42dea86bbd2be7a7b1af9bc6a83c0fa7d91ce2f89226f600eea257e3b1699178f6b57d8cf585798998a1f5b8356bf0d936d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xf0, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nfc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x66, 0x4, 0x2, 0x44b9}}]}, {0xa4, 0x6, "72c20ad891b0a19fabe55b2e344caaa0cc401e9d911f88b5b26ea3b1a6aef9d2733db1dd27f83e65cbd6f11309815642acbebe7a7947cb267353bbe4a19a52ecc2a8771008c4293fa71298735f7ab0867434ebd501c0335c262b89cd19a837b13586cb2087b51cab0394b07add957dfb2a4923eeac86bbab4422fb280dbde46443cad2d4c10dc5cb2512574a511b685317b19bddec10da783eb5ce55a03538d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x178, 0xd, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x3ff, 0x6, 0x3, 0x7fff}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="46dfec1eec71"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x5ba, 0x2, 0xfffffffe, 0x4}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3f}]}, {0xab, 0x6, "b23116cca82877521fc668448d101f2b0530a190101911dae62dd15a7c9c7c57eacab560b06da8f00339efd3632e04e395b81cb1c38279f7f58066171dd5dc86b73bfbcd0af91e590a7f18ca4532b83354b4f0f2b662e8a8edbca63ca5914c3bf961ec84eafae4b953b4577a80bcf0f7f7c9dd2fb3f1fc784cbcee2a2c4b9f7e0e6164a165a9d8dad9c235993fafa71dd2d57019b46a80e283beda27ebb4989835fa1d340a8401"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x4}, {0x170, 0x1, [@m_simple={0x16c, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nfc\x00'}, @TCA_DEF_DATA={0x15, 0x3, '/dev/virtual_nci\x00'}, @TCA_DEF_DATA={0x15, 0x3, '/dev/virtual_nci\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nfc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x5, 0x10000000, 0x0, 0x7}}]}, {0xdd, 0x6, "70b7548ecb9bd5a321e4eb4db381cca829e81ecf1c3ba540868f8ca35e1a7d5c4db3706a74b7030671d5ef8f2d655aa749136e32f382fe5a1b7c139fae17dbdee890383561119095ccbbbff469c00915678f502f62434d49870756e967d9347dddd44acde49a30749504d199509b6431240717bc2a7ed61c45e84b746db32715970fbf78cb06a2e6bff99708b6057ffc765c14ede4679674a193bdc49f921c3f8953e6e923d5d645c1f00b1bfeb8d10005ec6b0b12404d4c78ce0287509159c1ff88af82df49dd4be7d849da7bc797e1957e54ad01786af547"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x50c, 0x1, [@m_xt={0x27c, 0x1a, 0x0, 0x0, {{0x7}, {0x1d8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0xdb1}, @TCA_IPT_TARG={0x2a, 0x6, {0x5, 'nat\x00', 0xf7, 0xffff}}, @TCA_IPT_TARG={0xcd, 0x6, {0xf, 'filter\x00', 0x0, 0x1, "a026eadb96173cbc14de09b9141528da62a4a661bbd9f636da9da6cd4a45812cacd3d964696d7e8635b4213e5d9ce561dd7c6e1c251a3639233b3dcecca15c140e28d88e64e51526b520b3ecfc885cb2da0692132f95613d354bb65ab15c8c5bfed0e16f5d7eb95aaf95672944a39012b543a9d87bc4232271d5a664f4acc4a8cc4c495cec69e4e44dce660c5e7b00be5fcc852e85909e1dfa5ad60ff16b2c8fdce07f"}}, @TCA_IPT_TARG={0xbd, 0x6, {0xe2, 'nat\x00', 0x2, 0x8, "2efb14d66bff3113ef8361036433391acadce94038d52a95c9bf73e138357ff4500848ff1d4c2d2c56be3165dd7225642bab95c26713ae9fa22ad76e0c33ea76a989c92b0cd4dc9af2db5731293ee246c2fadb43f74d2862468b5f4f5aac902ce28b4c88841ea25e74020a98564d894293f56d1385e13a2e4ef6c0c7e4ae3035b5654f99926501d9694fe8858810946941e101"}}]}, {0x7e, 0x6, "f8f0240cdfcf3bbbcf124eb2a75e2ce3e05f163dae396e8936b9e1ca8651c9bf3a3467f6074fefa6ea1cd9c82fedd79a9dcf846e4f51665eb6c0db8a4faa42b7e4b8fe473f293637333756da09333946753a8ed64d9af892fc953bf76dec3fed6d88d0a46c1549fe38d31df8341b2c65d0c7b9806f468f2bbeb5"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0xb8, 0x1c, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd1123}, @TCA_MPLS_LABEL={0x8, 0x5, 0x66851}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa95ed}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4c, 0x6, "6f10fc5f0a67bbe81ab4b74a52e95393024afc5e3f267de4d8709b783c19cdeab766b77364658d3af81a278e1ab443292eba6bd4a3658169cb0847a150c32b10fc9dff0cb7ee5853"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_simple={0xdc, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0xfffffff8, 0x8, 0x3, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x8, 0x9, 0x6c}}, @TCA_DEF_PARMS={0x18, 0x2, {0x800, 0x6, 0x2, 0x7ff, 0xfe}}]}, {0x67, 0x6, "c90a57ab228c78f2e39c4d50cfa96a4279a1632db044a88bea3fe68222eacaba6438a4131b1babdb8793f1db6dbfe67bff9292a51c52926177a3c7e11808aefa1151eceb81a8c35cc63c907199cefccb7ed002970d77103ad7f65424fc340af9504218"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xf8, 0x17, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffb}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xffff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x16d2}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb7, 0x8, 0x2, 0x4139, 0x461a}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffb, 0xfff, 0x6, 0x3, 0x280}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="52f779405a43"}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x2c, 0x6, "a8c003d57a34ce3a28b125f6cdeb2bdcf365d877cb415668aeee31fde271a733d4ad9f7ffc05b465"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xc58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x18, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2200000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414107f00000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd7000000000000000020601000000000000000800fb55733c93dc4a"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000000000000000000000640101000000000000000000000000002c003000a6a9393eb2"], 0x38}}, 0x40408c0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r7, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="68080400", @ANYRES16=r8, @ANYBLOB="100029bd7000fedbdf250700000014000200fc02000000000000000000000000000108000500ac14142d1400020000000000000000000000000000000000140006006272696467655f736c6176655f31000005000100000000000500"], 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x2000c000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvfrom$inet6(r10, 0x0, 0x0, 0x40012042, 0x0, 0xfffffffffffffd4f) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) kernel console output (not intermixed with test programs): epending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.173215][ T2335] lowmem_reserve[]: 0 0 0 0 0 [ 2769.180250][ T2335] Node 1 Normal free:3936124kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:288kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 2769.217290][ T2335] lowmem_reserve[]: 0 0 0 0 0 [ 2769.312809][ T2335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2769.325965][ T2335] Node 0 DMA32: 5256*4kB (UME) 5457*8kB (UE) 3980*16kB (UME) 699*32kB (ME) 244*64kB (ME) 166*128kB (UME) 188*256kB (UME) 115*512kB (UME) 66*1024kB (UM) 4*2048kB (UME) 93*4096kB (UM) = 751304kB [ 2769.345925][ T2335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2769.357830][ T2335] Node 1 Normal: 11*4kB (UE) 10*8kB (UE) 18*16kB (UME) 11*32kB (UME) 18*64kB (UME) 12*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 957*4096kB (UM) = 3936124kB [ 2769.361685][ T2372] __nla_validate_parse: 2 callbacks suppressed [ 2769.361701][ T2372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6930'. [ 2769.376639][ T2335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.376731][ T2335] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 2769.411514][ T2335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.422207][ T2335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2769.432826][ T2335] 142390 total pagecache pages [ 2769.861205][ T2374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6930'. [ 2769.870263][ T2335] 0 pages in swap cache [ 2769.874901][ T2335] Free swap = 124996kB [ 2769.879167][ T2335] Total swap = 124996kB [ 2769.883439][ T2335] 2097051 pages RAM [ 2769.887324][ T2335] 0 pages HighMem/MovableOnly [ 2769.892003][ T2335] 430875 pages reserved [ 2769.912296][ T2335] 0 pages cma reserved [ 2770.428052][ T29] audit: type=1400 audit(2000002435.861:3426): avc: denied { ioctl } for pid=2402 comm="syz.5.6942" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64d1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2771.367176][ T2452] Failed to initialize the IGMP autojoin socket (err -2) [ 2771.609312][ T2464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6963'. [ 2771.620047][ T2464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6963'. [ 2771.790861][ T29] audit: type=1400 audit(2000002437.143:3427): avc: denied { ioctl } for pid=2465 comm="syz.5.6965" path="socket:[112972]" dev="sockfs" ino=112972 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2772.072270][ T29] audit: type=1400 audit(2000002437.405:3428): avc: denied { setopt } for pid=2481 comm="syz.1.6973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2772.128107][ T2485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6972'. [ 2772.479309][T26145] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2772.545412][ T2510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6979'. [ 2772.566610][ T2510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6979'. [ 2772.587777][ T2510] tipc: Enabling of bearer rejected, already enabled [ 2772.764668][T26145] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2772.777507][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.795678][T26145] usb 6-1: Product: syz [ 2772.875990][T26145] usb 6-1: Manufacturer: syz [ 2772.881946][T26145] usb 6-1: SerialNumber: syz [ 2772.913921][T26145] usb 6-1: config 0 descriptor?? [ 2773.710390][T26145] usb 6-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 2773.763871][T26145] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 2773.774444][T26145] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 2773.798751][T26145] usb 6-1: USB disconnect, device number 72 [ 2774.801192][ T2563] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6994'. [ 2774.811274][ T2563] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6994'. [ 2774.847621][ T2565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6996'. [ 2774.858511][ T2565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6996'. [ 2774.880935][ T2565] tipc: Enabling of bearer rejected, already enabled [ 2775.020112][ T2574] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 2775.364083][ T2578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7001'. [ 2775.478102][T29540] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 2776.277028][ T2612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7009'. [ 2776.287492][ T2612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7009'. [ 2776.307841][ T2612] tipc: Enabling of bearer rejected, already enabled [ 2776.920440][ T2635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7017'. [ 2776.931084][ T2635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7017'. [ 2777.529404][ T2642] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7019'. [ 2777.864187][ T2659] unsupported nlmsg_type 40 [ 2778.013502][T26060] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2778.071920][ T2676] tipc: Enabling of bearer rejected, failed to enable media [ 2778.138584][ T2677] tipc: Enabling of bearer rejected, already enabled [ 2778.226173][T26060] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2778.450458][ T2689] tipc: Enabling of bearer rejected, already enabled [ 2778.499527][T26060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2778.517156][T26060] usb 6-1: Product: syz [ 2778.524389][T26060] usb 6-1: Manufacturer: syz [ 2778.542973][T26060] usb 6-1: SerialNumber: syz [ 2778.561951][T26060] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2778.585961][ T2690] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2778.838142][ C0] usb 6-1: ath: unknown panic pattern! [ 2779.066101][T26060] usb 6-1: USB disconnect, device number 73 [ 2780.154786][ T2690] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2780.209117][ T2690] ath9k_htc: Failed to initialize the device [ 2780.231879][T26060] usb 6-1: ath9k_htc: USB layer deinitialized [ 2780.251884][ T2746] __nla_validate_parse: 12 callbacks suppressed [ 2780.251923][ T2746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7049'. [ 2780.451336][ T2746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7049'. [ 2780.523515][ T29] audit: type=1400 audit(2000002445.313:3429): avc: denied { accept } for pid=2747 comm="syz.0.7050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2780.604120][ T2753] ipvlan2: entered allmulticast mode [ 2780.645949][ T2753] dummy0: entered allmulticast mode [ 2780.681424][ T2746] tipc: Enabling of bearer rejected, already enabled [ 2781.349041][ T2788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7064'. [ 2781.526320][ T2803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2781.534264][ T2803] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.541540][ T2803] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.548745][ T2803] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.611768][ T2819] netlink: 'syz.0.7076': attribute type 7 has an invalid length. [ 2781.698074][ T2823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7074'. [ 2781.708135][ T2823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7074'. [ 2781.723459][ T2823] tipc: Enabling of bearer rejected, already enabled [ 2782.015716][ T2839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7080'. [ 2782.025821][ T2839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7080'. [ 2783.157712][ T2884] netlink: 'syz.3.7098': attribute type 1 has an invalid length. [ 2783.180163][ T2884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7098'. [ 2783.226125][ T29] audit: type=1400 audit(2000002447.840:3430): avc: denied { read } for pid=2885 comm="syz.5.7099" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2783.228027][ T2884] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7098'. [ 2783.252460][ T2690] kernel write not supported for file /sg0 (pid: 2690 comm: kworker/0:1) [ 2783.300762][ T2884] netlink: 'syz.3.7098': attribute type 1 has an invalid length. [ 2783.463793][ T2902] Failed to initialize the IGMP autojoin socket (err -2) [ 2783.488456][ T2906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2783.539299][ T2904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7106'. [ 2783.559306][ T2904] dummy0: Caught tx_queue_len zero misconfig [ 2783.676715][T26145] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 2783.852070][T26145] usb 6-1: config 0 has no interfaces? [ 2783.863573][T26145] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 2783.882145][T26145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2783.919718][T26145] usb 6-1: config 0 descriptor?? [ 2784.094226][ T2935] atomic_op ffff888050d85998 conn xmit_atomic 0000000000000000 [ 2784.172612][ T2939] tipc: Enabling of bearer rejected, failed to enable media [ 2784.230907][T29540] Bluetooth: hci2: Malformed LE Event: 0x0d [ 2784.237539][T26145] usb 6-1: USB disconnect, device number 74 [ 2784.685053][ T2947] openvswitch: netlink: IP tunnel dst address not specified [ 2785.246768][ T2984] loop5: detected capacity change from 0 to 7 [ 2785.262978][ T2984] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 2785.269266][ T2984] loop5: partition table partially beyond EOD, truncated [ 2785.292832][ T2984] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 2785.374498][ T2652] udevd[2652]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2785.501540][ T29] audit: type=1400 audit(2000002449.974:3431): avc: denied { ioctl } for pid=2996 comm="syz.3.7150" path="socket:[113630]" dev="sockfs" ino=113630 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2785.539299][ T29] audit: type=1400 audit(2000002449.983:3432): avc: denied { getopt } for pid=2996 comm="syz.3.7150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2785.841089][T29540] Bluetooth: hci1: SCO packet too small [ 2786.012810][ T3029] __nla_validate_parse: 2 callbacks suppressed [ 2786.012828][ T3029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7166'. [ 2786.287523][T26145] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2786.372527][ T3050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7175'. [ 2786.382875][ T3050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7175'. [ 2786.465201][T26145] usb 6-1: Using ep0 maxpacket: 32 [ 2786.472712][T26145] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 2786.481581][T26145] usb 6-1: config 0 has no interface number 0 [ 2786.488388][T26145] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2786.502242][T26145] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2786.513044][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2786.521788][T26145] usb 6-1: Product: syz [ 2786.526184][T26145] usb 6-1: Manufacturer: syz [ 2786.530944][T26145] usb 6-1: SerialNumber: syz [ 2786.537312][T26145] usb 6-1: config 0 descriptor?? [ 2786.562047][T26145] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2786.586853][T26145] em28xx 6-1:0.132: Video interface 132 found: [ 2786.996677][T26145] em28xx 6-1:0.132: chip ID is em2884 [ 2787.244134][ T3070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2787.272761][T26145] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2787.294700][T26145] em28xx 6-1:0.132: board has no eeprom [ 2787.381217][T26145] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2787.402754][ T3080] Failed to initialize the IGMP autojoin socket (err -2) [ 2787.410704][T26145] em28xx 6-1:0.132: analog set to bulk mode. [ 2787.421009][T18305] em28xx 6-1:0.132: Registering V4L2 extension [ 2787.522177][T26145] usb 6-1: USB disconnect, device number 75 [ 2787.556452][T18305] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 2787.567648][T26145] em28xx 6-1:0.132: Disconnecting em28xx [ 2788.064203][T18305] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 2788.142794][T18305] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 2788.160858][T18305] em28xx 6-1:0.132: No AC97 audio processor [ 2788.193488][T18305] usb 6-1: Decoder not found [ 2788.205606][T18305] em28xx 6-1:0.132: failed to create media graph [ 2788.222765][T18305] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 2788.338240][T18305] em28xx 6-1:0.132: Remote control support is not available for this card. [ 2788.359779][T26145] em28xx 6-1:0.132: Closing input extension [ 2788.492475][T26145] em28xx 6-1:0.132: Freeing device [ 2788.554964][ T3102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7194'. [ 2788.564610][ T3102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7194'. [ 2788.914149][T26145] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2789.095272][T26145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2789.113390][T26145] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2789.143786][T26145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2789.155478][T26145] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2789.165454][T26145] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2789.254837][T26145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.288423][T26145] usb 6-1: config 0 descriptor?? [ 2789.437195][ T29] audit: type=1400 audit(2000002453.662:3433): avc: denied { map } for pid=3122 comm="syz.1.7204" path="socket:[115780]" dev="sockfs" ino=115780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2789.488794][ T29] audit: type=1400 audit(2000002453.662:3434): avc: denied { read accept } for pid=3122 comm="syz.1.7204" path="socket:[115780]" dev="sockfs" ino=115780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2789.533685][ T3125] openvswitch: netlink: Missing valid actions attribute. [ 2789.556670][ T3125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2789.556716][T26145] hdpvr 6-1:0.0: firmware version 0x3c dated íôH"Lëžlršߧ·•LɈPªÇmÏg"Áý̓‡_­-h÷•eÎ/} [ 2789.624524][T26145] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 2789.700311][ T29] audit: type=1400 audit(2000002453.905:3435): avc: denied { write } for pid=3129 comm="syz.4.7208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2789.751676][ T29] audit: type=1400 audit(2000002453.952:3436): avc: denied { setopt } for pid=3134 comm="syz.1.7210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2789.816365][ T3137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7209'. [ 2789.833355][ T3137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7209'. [ 2789.864211][ T29] audit: type=1400 audit(2000002453.970:3437): avc: denied { connect } for pid=3134 comm="syz.1.7210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2790.040567][ T3145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7213'. [ 2790.051627][ T3145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7213'. [ 2790.176668][T26145] hdpvr 6-1:0.0: Could not setup controls [ 2790.189712][T26145] hdpvr 6-1:0.0: registering videodev failed [ 2790.277397][T26145] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 2790.299064][T26145] usb 6-1: USB disconnect, device number 76 [ 2790.423445][ T3153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7217'. [ 2791.775821][T19341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2791.786032][ T3194] __nla_validate_parse: 3 callbacks suppressed [ 2791.786055][ T3194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7230'. [ 2791.803572][ T3194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7230'. [ 2792.195661][ T3202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7234'. [ 2792.207016][ T3202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7234'. [ 2792.262506][ T29] audit: type=1400 audit(2000002456.291:3438): avc: denied { connect } for pid=3203 comm="syz.0.7236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2792.748144][T26145] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2793.346925][T26145] usb 6-1: Using ep0 maxpacket: 8 [ 2793.360250][T26145] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2793.371092][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2793.389042][T26145] usb 6-1: Product: syz [ 2793.395636][T26145] usb 6-1: Manufacturer: syz [ 2793.401621][T26145] usb 6-1: SerialNumber: syz [ 2793.414476][T26145] usb 6-1: config 0 descriptor?? [ 2793.431479][T26145] gspca_main: se401-2.14.0 probing 047d:5003 [ 2793.812036][ T29] audit: type=1800 audit(2000002457.751:3439): pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.7247" name="nullb0" dev="tmpfs" ino=7643 res=0 errno=0 [ 2793.873980][T26145] gspca_se401: Wrong descriptor type [ 2794.064519][ T3250] binder: 3248:3250 unknown command 1472 [ 2794.064521][ T29] audit: type=1400 audit(2000002457.995:3440): avc: denied { ioctl } for pid=3248 comm="syz.1.7254" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2794.131265][T26145] usb 6-1: USB disconnect, device number 77 [ 2794.234385][ T3250] binder: 3248:3250 ioctl c0306201 200000000080 returned -22 [ 2794.272397][ T3249] tmpfs: Bad value for 'mpol' [ 2795.062493][ T29] audit: type=1400 audit(2000002458.912:3441): avc: denied { read } for pid=3254 comm="syz.3.7255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2795.256294][ T3269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7261'. [ 2795.354019][ T3276] tmpfs: Bad value for 'mpol' [ 2795.398815][ T3280] IPv6: addrconf: prefix option has invalid lifetime [ 2796.075236][ T3292] netlink: 'syz.0.7271': attribute type 1 has an invalid length. [ 2796.100575][ T3292] netlink: 'syz.0.7271': attribute type 2 has an invalid length. [ 2796.126212][ T3292] netlink: 'syz.0.7271': attribute type 1 has an invalid length. [ 2796.141171][ T3292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7271'. [ 2796.310996][ T29] audit: type=1400 audit(2000002460.091:3442): avc: denied { read } for pid=3297 comm="syz.4.7273" path="socket:[115159]" dev="sockfs" ino=115159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2796.477002][ T2690] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2796.490871][ T3320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7276'. [ 2796.517620][ T3320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7276'. [ 2796.538722][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7283'. [ 2796.549068][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7283'. [ 2796.660212][ T2690] usb 6-1: Using ep0 maxpacket: 32 [ 2796.668787][ T2690] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2796.678147][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2796.686663][ T2690] usb 6-1: Product: syz [ 2796.691545][ T2690] usb 6-1: Manufacturer: syz [ 2796.698270][ T2690] usb 6-1: SerialNumber: syz [ 2796.793163][ T2690] usb 6-1: config 0 descriptor?? [ 2796.804576][ T2690] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2796.816467][ T2690] dvb-usb: bulk message failed: -22 (2/0) [ 2796.841239][ T2690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2797.275477][ T2690] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2797.283853][ T2690] usb 6-1: media controller created [ 2797.296789][ T2690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2797.301483][ T3301] dvb-usb: bulk message failed: -22 (3/0) [ 2797.317066][ T29] audit: type=1400 audit(2000002461.018:3443): avc: denied { append } for pid=3300 comm="syz.5.7275" name="i2c-1" dev="devtmpfs" ino=3274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2797.384816][ T2690] usb 6-1: selecting invalid altsetting 7 [ 2797.390705][ T2690] cxusb: set interface failed [ 2797.395384][ T2690] dvb-usb: bulk message failed: -22 (1/0) [ 2797.495015][ T2690] DVB: Unable to find symbol lgdt330x_attach() [ 2797.504025][ T2690] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2797.641684][ T2690] rc_core: IR keymap rc-dvico-portable not found [ 2797.652633][ T2690] Registered IR keymap rc-empty [ 2797.665559][ T2690] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2797.679519][ T2690] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input26 [ 2797.714385][ T2690] dvb-usb: schedule remote query interval to 100 msecs. [ 2797.723966][ T2690] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2797.752296][ T2690] usb 6-1: USB disconnect, device number 78 [ 2797.888551][ T2690] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2798.186606][ T3368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7301'. [ 2798.199702][ T3368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7301'. [ 2798.458690][ T3376] Failed to initialize the IGMP autojoin socket (err -2) [ 2798.770351][ T3394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7310'. [ 2798.926865][ T3400] tipc: Bearer : already 2 bearers with priority 10 [ 2798.982212][ T3400] tipc: Bearer : trying with adjusted priority [ 2798.991189][ T3400] tipc: Enabled bearer , priority 9 [ 2799.565124][ T3425] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7321'. [ 2799.654572][ T3430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7326'. [ 2799.667895][ T3431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7325'. [ 2799.968218][ T29] audit: type=1400 audit(2000002463.498:3444): avc: denied { bind } for pid=3442 comm="syz.1.7330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2802.656298][ T3482] tmpfs: Bad value for 'mpol' [ 2803.143560][ T3439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2803.670254][ T2690] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2803.843695][ T3506] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7353'. [ 2803.901955][ T2690] usb 6-1: Using ep0 maxpacket: 16 [ 2803.967387][ T2690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2804.035095][ T2690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2804.062460][ T2690] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 2804.077644][ T2690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.180127][ T2690] usb 6-1: config 0 descriptor?? [ 2805.333577][ T3526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2805.414901][ T3528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2805.481997][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.495811][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.503003][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.510919][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.529598][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.536768][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.567422][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.576586][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.598942][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.612049][ T2690] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 2805.620512][ T2690] logitech 0003:046D:C50C.0007: unknown global tag 0xc [ 2805.628415][ T2690] logitech 0003:046D:C50C.0007: item 0 1 1 12 parsing failed [ 2805.636965][ T2690] logitech 0003:046D:C50C.0007: parse failed [ 2805.643029][ T2690] logitech 0003:046D:C50C.0007: probe with driver logitech failed with error -22 [ 2805.729024][T26145] usb 6-1: USB disconnect, device number 79 [ 2806.053954][ T3556] bond0: (slave dummy0): Releasing backup interface [ 2806.071096][ T3556] dummy0: left promiscuous mode [ 2807.293474][ T3584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7381'. [ 2807.392804][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7381'. [ 2807.708879][ T2690] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2807.778270][ T3596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7385'. [ 2807.788815][ T3596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7385'. [ 2807.926246][ T2690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2807.936903][ T2690] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2807.960636][ T2690] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2807.972566][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2807.980948][ T2690] usb 6-1: Product: syz [ 2807.987560][ T2690] usb 6-1: Manufacturer: syz [ 2808.011998][ T2690] usb 6-1: SerialNumber: syz [ 2808.450717][ T2690] usb 6-1: reset high-speed USB device number 80 using dummy_hcd [ 2809.247227][ T2690] usb 6-1: device descriptor read/64, error -71 [ 2809.344329][ T3629] Failed to initialize the IGMP autojoin socket (err -2) [ 2809.356779][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7399'. [ 2809.557043][ T2690] usb 6-1: reset high-speed USB device number 80 using dummy_hcd [ 2809.638285][ T3645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7403'. [ 2809.648054][ T3645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7403'. [ 2809.752266][ T2690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2809.865586][ T2690] usb 6-1: device firmware changed [ 2809.936894][ T2690] usb 6-1: USB disconnect, device number 80 [ 2810.342835][ T3666] batman_adv: batadv0: Adding interface: macsec0 [ 2810.352723][ T3666] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2810.435198][ T3666] batman_adv: batadv0: Interface activated: macsec0 [ 2810.555447][ T3670] Failed to initialize the IGMP autojoin socket (err -2) [ 2810.872161][T26145] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2811.042947][T26145] usb 6-1: Using ep0 maxpacket: 16 [ 2811.067937][T26145] usb 6-1: config 0 has no interfaces? [ 2811.100453][T26145] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2811.126066][T26145] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2811.152810][T26145] usb 6-1: Manufacturer: syz [ 2811.198045][T26145] usb 6-1: config 0 descriptor?? [ 2811.497475][ T3710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7424'. [ 2811.579385][ T3670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7412'. [ 2813.890850][ T3762] bond0: entered promiscuous mode [ 2813.897194][ T3762] bond0: left promiscuous mode [ 2814.274799][ T3781] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7458'. [ 2814.382155][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7457'. [ 2814.462900][ T2690] usb 6-1: USB disconnect, device number 81 [ 2814.557457][ T3790] Failed to initialize the IGMP autojoin socket (err -2) [ 2814.767133][ T29] audit: type=1400 audit(2000002483.352:3445): avc: denied { read write } for pid=3792 comm="syz.5.7462" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2814.816135][ T29] audit: type=1400 audit(2000002483.352:3446): avc: denied { ioctl open } for pid=3792 comm="syz.5.7462" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2816.524595][ T29] audit: type=1400 audit(2000002484.998:3447): avc: denied { mount } for pid=3821 comm="syz.5.7470" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2816.869788][ T3834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7473'. [ 2816.883879][ T3834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7473'. [ 2817.525866][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7479'. [ 2817.595167][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7481'. [ 2817.768492][ T29] audit: type=1400 audit(2000002486.168:3448): avc: denied { map } for pid=3852 comm="syz.3.7483" path="socket:[116957]" dev="sockfs" ino=116957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2818.228044][ T29] audit: type=1400 audit(2000002486.196:3449): avc: denied { read } for pid=3852 comm="syz.3.7483" path="socket:[116957]" dev="sockfs" ino=116957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2818.254158][T29540] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 2818.709424][ T29] audit: type=1400 audit(2000002487.019:3450): avc: denied { ioctl } for pid=3873 comm="syz.5.7492" path="socket:[116995]" dev="sockfs" ino=116995 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2818.745516][ T3876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7491'. [ 2818.758760][ T3876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7491'. [ 2819.014697][ T3884] net veth1_virt_wifi ‚: renamed from virt_wifi0 [ 2819.598770][ T29] audit: type=1400 audit(2000002487.880:3451): avc: denied { ioctl } for pid=3904 comm="syz.1.7503" path="socket:[117032]" dev="sockfs" ino=117032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2819.729488][ T3914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7504'. [ 2819.739800][ T3914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7504'. [ 2819.892609][ T3919] Failed to initialize the IGMP autojoin socket (err -2) [ 2819.970823][ T3921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7506'. [ 2820.997429][ T29] audit: type=1400 audit(2000002489.189:3452): avc: denied { ioctl } for pid=3929 comm="syz.0.7509" path="socket:[117066]" dev="sockfs" ino=117066 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2821.247435][ T3939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7512'. [ 2822.149582][ T29] audit: type=1400 audit(2000002490.265:3453): avc: denied { setattr } for pid=3951 comm="syz.1.7517" name="pfkey" dev="proc" ino=4026533207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2822.206427][ T3881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2822.250771][ T3957] __nla_validate_parse: 1 callbacks suppressed [ 2822.250791][ T3957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7518'. [ 2822.404924][ T3964] 9p: Bad value for 'wfdno' [ 2822.495012][ T3969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7519'. [ 2822.505819][ T3969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7519'. [ 2822.695161][ T29] audit: type=1400 audit(2000002490.770:3454): avc: denied { read write } for pid=3974 comm="syz.5.7524" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2822.784504][ T29] audit: type=1400 audit(2000002490.770:3455): avc: denied { open } for pid=3974 comm="syz.5.7524" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2822.848750][ T29] audit: type=1400 audit(2000002490.826:3456): avc: denied { ioctl } for pid=3974 comm="syz.5.7524" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2823.232890][ T29] audit: type=1400 audit(2000002491.284:3457): avc: denied { read } for pid=3988 comm="syz.5.7531" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2823.334125][ T29] audit: type=1400 audit(2000002491.284:3458): avc: denied { open } for pid=3988 comm="syz.5.7531" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2823.832471][ T4000] tmpfs: Bad value for 'mpol' [ 2824.542786][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7542'. [ 2824.875557][ T29] audit: type=1400 audit(2000002492.809:3459): avc: denied { mount } for pid=4035 comm="syz.4.7553" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2825.090600][T26145] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2825.263171][T26145] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2825.283140][T26145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2825.336411][T26145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2825.353386][T26145] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2825.384783][T26145] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2825.394793][T26145] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2825.409036][T26145] usb 6-1: Manufacturer: syz [ 2825.427365][T26145] usb 6-1: config 0 descriptor?? [ 2825.614986][ T4059] tmpfs: Bad value for 'mpol' [ 2826.308886][T32368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2826.328952][T26145] hid_parser_main: 95 callbacks suppressed [ 2826.328974][T26145] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 2826.373833][T26145] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2826.823579][ T4099] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7577'. [ 2826.860710][T26145] usb 6-1: USB disconnect, device number 82 [ 2827.508130][ T4112] tmpfs: Bad value for 'mpol' [ 2828.170336][ T4122] Failed to initialize the IGMP autojoin socket (err -2) [ 2828.522223][ T2690] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2828.857431][ T2690] usb 6-1: Using ep0 maxpacket: 16 [ 2828.870511][ T2690] usb 6-1: config 0 has no interfaces? [ 2828.893426][ T2690] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2828.921862][ T2690] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2829.022745][ T2690] usb 6-1: Manufacturer: syz [ 2829.048208][ T2690] usb 6-1: config 0 descriptor?? [ 2829.724810][ T29] audit: type=1326 audit(2000002497.355:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.7600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8f0b9c799 code=0x0 [ 2829.805832][ T29] audit: type=1400 audit(2000002497.421:3461): avc: denied { load_policy } for pid=4161 comm="syz.1.7599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2829.829247][ T4162] SELinux: failed to load policy [ 2830.077856][ T4173] fuse: Bad value for 'fd' [ 2830.124191][ T29] audit: type=1400 audit(2000002497.720:3462): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2830.185620][ T4180] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7607'. [ 2830.924917][ T2690] usb 6-1: USB disconnect, device number 83 [ 2831.036477][ T4221] Invalid source name [ 2831.100387][ T4225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7620'. [ 2831.110524][ T4225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7620'. [ 2831.337352][ T29] audit: type=1326 audit(2000002498.861:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.7625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8f0b9c799 code=0x0 [ 2831.691450][ T4237] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 2832.050698][ T4255] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.7635'. [ 2832.356998][ T4271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7637'. [ 2832.367103][ T4271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7637'. [ 2832.384883][ T4271] tipc: Enabling of bearer rejected, already enabled [ 2833.052553][ T4290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7647'. [ 2833.149887][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7648'. [ 2833.161224][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7648'. [ 2833.369543][ T4295] tipc: Enabling of bearer rejected, already enabled [ 2833.655377][ T3487] udevd[3487]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2834.532224][ T4326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7657'. [ 2834.575867][ T4326] tipc: Enabling of bearer rejected, already enabled [ 2835.012946][ T4342] tipc: Enabling of bearer rejected, failed to enable media [ 2835.122214][ T4344] netlink: 'syz.0.7664': attribute type 1 has an invalid length. [ 2835.171367][ T4344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2835.258939][ T4344] bond4: (slave geneve2): Opening slave failed [ 2836.436052][ T4369] __nla_validate_parse: 3 callbacks suppressed [ 2836.436071][ T4369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7672'. [ 2836.452970][ T4369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7672'. [ 2836.468466][ T4369] tipc: Enabling of bearer rejected, already enabled [ 2836.872023][ T2690] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2837.033300][ T2690] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2837.042280][ T2690] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2837.054846][ T2690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2837.064415][ T2690] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2837.076186][ T2690] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2837.092149][ T2690] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2837.101647][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2837.110495][ T2690] usb 6-1: Product: syz [ 2837.130279][ T2690] usb 6-1: Manufacturer: syz [ 2837.184398][ T2690] cdc_wdm 6-1:1.0: skipping garbage [ 2837.207605][ T2690] cdc_wdm 6-1:1.0: skipping garbage [ 2837.243652][ T2690] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2837.250562][ T2690] cdc_wdm 6-1:1.0: Unknown control protocol [ 2837.328519][ T29] audit: type=1326 audit(2000002504.464:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm="syz.4.7682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f933ad9c799 code=0x0 [ 2838.088346][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7691'. [ 2838.316384][ T29] audit: type=1400 audit(2000002505.390:3465): avc: denied { read write } for pid=4372 comm="syz.5.7675" name="cdc-wdm0" dev="devtmpfs" ino=3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2838.342935][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 2838.348585][ C1] wdm_int_callback: 99 callbacks suppressed [ 2838.348605][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.361073][ C1] wdm_int_callback: 99 callbacks suppressed [ 2838.361093][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.374362][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.380970][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.387295][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.393901][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.400882][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.407572][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.414087][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.420689][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.427093][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.433693][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.440882][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.447574][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.453927][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.460527][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.467385][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.473987][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.480292][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2838.486892][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2838.630153][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2838.639048][T26145] usb 6-1: USB disconnect, device number 84 [ 2838.722340][ T29] audit: type=1400 audit(2000002505.390:3466): avc: denied { open } for pid=4372 comm="syz.5.7675" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2838.764183][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7695'. [ 2838.824461][ T29] audit: type=1400 audit(2000002505.680:3467): avc: denied { ioctl } for pid=4372 comm="syz.5.7675" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3302 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2839.002632][ T4440] netlink: 'syz.3.7699': attribute type 13 has an invalid length. [ 2839.060627][ T4443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7696'. [ 2839.070513][ T4443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7696'. [ 2839.194013][ T4443] tipc: Enabling of bearer rejected, already enabled [ 2839.653983][T26145] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2839.854207][T26145] usb 6-1: Using ep0 maxpacket: 32 [ 2839.871649][T26145] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 2839.908209][T26145] usb 6-1: config 0 has no interface number 0 [ 2839.914393][T26145] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2839.958420][T26145] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2839.990088][ T4461] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7707'. [ 2840.002784][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2840.022093][T26145] usb 6-1: Product: syz [ 2840.032904][T26145] usb 6-1: Manufacturer: syz [ 2840.043374][T26145] usb 6-1: SerialNumber: syz [ 2840.062041][T26145] usb 6-1: config 0 descriptor?? [ 2840.067586][ T4449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2840.310051][ T4449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2840.590014][ T4496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7718'. [ 2840.602904][ T4496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7718'. [ 2840.638635][ T4496] tipc: Enabling of bearer rejected, already enabled [ 2841.145272][ T4510] netlink: 'syz.3.7724': attribute type 4 has an invalid length. [ 2841.835203][T26145] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2841.845620][T26145] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 2841.873594][ T4552] overlayfs: failed to clone upperpath [ 2841.886061][T26145] asix 6-1:0.188: probe with driver asix failed with error -71 [ 2841.899322][T26145] usb 6-1: USB disconnect, device number 85 [ 2842.598422][ T4565] SELinux: failed to load policy [ 2843.157557][T26145] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2843.343529][T26145] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2843.371770][T26145] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 2843.380421][T26145] usb 6-1: Product: syz [ 2843.386773][T26145] usb 6-1: Manufacturer: syz [ 2843.391629][T26145] usb 6-1: SerialNumber: syz [ 2843.400574][T26145] usb 6-1: config 0 descriptor?? [ 2843.408848][ T4589] 9p: Bad value for 'rfdno' [ 2843.435241][T26145] ch341 6-1:0.0: ch341-uart converter detected [ 2843.541519][ T4595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7759'. [ 2843.551514][ T4595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7759'. [ 2843.568054][ T4595] tipc: Enabling of bearer rejected, failed to enable media [ 2843.912270][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7764'. [ 2844.012377][ T4611] overlayfs: failed to clone upperpath [ 2844.539804][T26145] ch341-uart ttyUSB0: break control not supported, using simulated break [ 2844.595280][T26145] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 2844.618882][T26145] usb 6-1: USB disconnect, device number 86 [ 2844.650915][T26145] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 2844.668330][T26145] ch341 6-1:0.0: device disconnected [ 2844.874314][ T4645] Failed to initialize the IGMP autojoin socket (err -2) [ 2844.970648][ T29] audit: type=1400 audit(2000002511.601:3468): avc: denied { connect } for pid=4654 comm="syz.0.7784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2845.098759][ T4663] fuse: Bad value for 'fd' [ 2845.456349][ T2690] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2845.643580][ T2690] usb 6-1: Using ep0 maxpacket: 32 [ 2845.663189][ T2690] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 2845.671886][ T2690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2845.698370][ T2690] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 2845.712821][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.730984][ T2690] usb 6-1: Product: syz [ 2845.735455][ T2690] usb 6-1: Manufacturer: syz [ 2845.740061][ T2690] usb 6-1: SerialNumber: syz [ 2845.748272][ T2690] usb 6-1: config 0 descriptor?? [ 2845.760122][ T2690] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 2846.000246][ T29] audit: type=1400 audit(2000002512.555:3469): avc: denied { read } for pid=4709 comm="syz.1.7806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2846.122450][ T4712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7803'. [ 2846.133680][ T4712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7803'. [ 2846.151726][ T4712] tipc: Enabling of bearer rejected, already enabled [ 2847.188482][ T29] audit: type=1400 audit(2000002513.687:3470): avc: denied { mounton } for pid=4730 comm="syz.1.7813" path="/proc/5907/task" dev="proc" ino=119328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2847.292575][ T2690] gspca_sunplus: reg_w_1 err -71 [ 2847.297800][ T2690] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2847.312806][ T2690] usb 6-1: USB disconnect, device number 87 [ 2847.325804][ T29] audit: type=1400 audit(2000002513.809:3471): avc: denied { create } for pid=4740 comm="syz.1.7819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2847.414133][ T29] audit: type=1400 audit(2000002513.902:3472): avc: denied { sys_admin } for pid=4740 comm="syz.1.7819" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2847.836566][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7823'. [ 2848.131512][ T4771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7826'. [ 2848.141874][ T4771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7826'. [ 2848.156993][ T4771] tipc: Enabling of bearer rejected, already enabled [ 2848.168508][ T4773] kvm: emulating exchange as write [ 2848.926557][T29540] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 2848.994316][ T29] audit: type=1326 audit(2000002515.371:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.5.7835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b8d9c799 code=0x7ffc0000 [ 2849.069432][ T29] audit: type=1326 audit(2000002515.371:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.5.7835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b8d9c799 code=0x7ffc0000 [ 2849.199366][ T29] audit: type=1326 audit(2000002515.567:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.5.7835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b8d9c799 code=0x7ffc0000 [ 2849.261618][ T29] audit: type=1326 audit(2000002515.567:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.5.7835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b8d9c799 code=0x7ffc0000 [ 2849.318885][ T29] audit: type=1326 audit(2000002515.567:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.5.7835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa6b8d9c799 code=0x7ffc0000 [ 2849.825973][ T4819] overlayfs: failed to clone upperpath [ 2850.089081][ T4830] netlink: 'syz.5.7852': attribute type 1 has an invalid length. [ 2850.136589][ T4830] bond3: entered promiscuous mode [ 2850.142061][ T4830] bond3: entered allmulticast mode [ 2850.179306][ T4830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2850.275603][ T4838] macvlan3: entered promiscuous mode [ 2850.285106][ T4838] macvlan3: entered allmulticast mode [ 2850.302611][ T4838] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2850.557538][ T4840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2850.575045][ T4844] netlink: 'syz.1.7856': attribute type 5 has an invalid length. [ 2851.067468][ T29] kauditd_printk_skb: 1946 callbacks suppressed [ 2851.067485][ T29] audit: type=1400 audit(2000002517.307:5424): avc: denied { create } for pid=4868 comm="syz.1.7868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2851.095376][ T29] audit: type=1400 audit(2000002517.326:5425): avc: denied { ioctl } for pid=4868 comm="syz.1.7868" path="socket:[119601]" dev="sockfs" ino=119601 ioctlcmd=0x61d8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2851.179288][ T4883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7870'. [ 2851.191637][ T4883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7870'. [ 2851.207106][ T4883] tipc: Enabling of bearer rejected, already enabled [ 2851.446426][ T4868] mpoa:mpoad_close: () going down [ 2851.726233][ T29] audit: type=1400 audit(2000002517.934:5426): avc: denied { mount } for pid=4898 comm="syz.1.7879" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2851.798234][ T29] audit: type=1400 audit(2000002517.934:5427): avc: denied { search } for pid=4898 comm="syz.1.7879" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2851.902703][ T29] audit: type=1400 audit(2000002518.102:5428): avc: denied { write } for pid=4900 comm="syz.5.7880" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2853.048103][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7888'. [ 2853.087001][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7888'. [ 2853.113580][ T4930] tipc: Enabling of bearer rejected, failed to enable media [ 2853.477074][ T29] audit: type=1400 audit(2000002519.571:5429): avc: denied { append } for pid=4939 comm="syz.5.7893" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2853.594644][ T29] audit: type=1400 audit(2000002519.683:5430): avc: denied { write } for pid=4943 comm="syz.4.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2853.833162][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7897'. [ 2853.843362][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7897'. [ 2853.859341][ T4955] tipc: Enabling of bearer rejected, already enabled [ 2854.848078][ T4978] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7904'. [ 2855.004499][ T4980] block nbd5: shutting down sockets [ 2855.437145][ T29] audit: type=1400 audit(2000002521.395:5431): avc: denied { append } for pid=5003 comm="syz.5.7917" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2856.441173][ T5027] fuse: Bad value for 'fd' [ 2856.445674][ T29] audit: type=1400 audit(2000002522.340:5432): avc: denied { mounton } for pid=5021 comm="syz.1.7922" path="/1677/file0" dev="tmpfs" ino=8949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2858.090072][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7939'. [ 2858.104425][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7939'. [ 2859.304666][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7950'. [ 2859.315178][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7950'. [ 2859.604125][ T5025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2859.660837][ T5094] tipc: Enabling of bearer rejected, already enabled [ 2859.927529][ T29] audit: type=1400 audit(2000002525.595:5433): avc: denied { write } for pid=5099 comm="syz.5.7953" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2860.390682][ T29] audit: type=1400 audit(2000002525.595:5434): avc: denied { open } for pid=5099 comm="syz.5.7953" path="/748/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2860.395729][T32368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2860.452423][ T29] audit: type=1400 audit(2000002525.595:5435): avc: denied { ioctl } for pid=5099 comm="syz.5.7953" path="/748/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2861.468294][ T5131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7960'. [ 2861.478707][ T5131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7960'. [ 2862.588917][ T5158] overlayfs: failed to clone upperpath [ 2863.153851][ T5187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7974'. [ 2863.164179][ T5187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7974'. [ 2863.826095][ T5187] tipc: Enabling of bearer rejected, failed to enable media [ 2863.937331][ T5202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7982'. [ 2863.947433][ T5202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7982'. [ 2863.963283][ T5202] tipc: Enabling of bearer rejected, already enabled [ 2864.401195][ T5210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2865.842506][ T29] audit: type=1400 audit(2000002531.123:5436): avc: denied { read write } for pid=5242 comm="syz.5.7997" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2865.889107][ T29] audit: type=1400 audit(2000002531.123:5437): avc: denied { open } for pid=5242 comm="syz.5.7997" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2866.006456][ T5229] batman_adv: batadv0: Interface deactivated: macsec0 [ 2866.014994][T32368] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.045602][ T5243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2866.066739][T32368] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.120930][T32368] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.140201][T32368] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2867.632028][ T5295] loop2: detected capacity change from 0 to 7 [ 2867.642452][ T5295] loop2: [POWERTEC] p1 p2 p3 [ 2867.648565][ T5295] loop2: p1 size 393216 extends beyond EOD, truncated [ 2867.659235][ T5295] loop2: p2 start 808464432 is beyond EOD, truncated [ 2867.666342][ T5295] loop2: p3 start 1717986918 is beyond EOD, truncated [ 2868.347927][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 2868.579812][T18305] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 2868.763832][T18305] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 2868.784415][T18305] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2868.792543][T18305] usb 6-1: config 0 has no interface number 0 [ 2868.799903][T18305] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2868.842774][T18305] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2868.858353][T18305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2868.880627][T18305] usb 6-1: config 0 descriptor?? [ 2868.896871][ T5299] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2869.088075][ T5324] overlayfs: failed to clone upperpath [ 2869.672022][T18305] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input27 [ 2869.931581][T18305] usb 6-1: USB disconnect, device number 88 [ 2869.937564][ C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2870.950173][ T5377] fuse: Bad value for 'fd' [ 2871.081679][ T791] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2871.136266][ T5383] netlink: 'syz.4.8052': attribute type 1 has an invalid length. [ 2871.198349][ T5383] bond3: (slave geneve3): Opening slave failed [ 2871.250151][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8052'. [ 2871.263506][ T791] usb 6-1: Using ep0 maxpacket: 8 [ 2871.269959][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2871.282418][ T791] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2871.293561][ T5385] bond3 (unregistering): Released all slaves [ 2871.434249][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2871.452295][ T791] usb 6-1: config 0 descriptor?? [ 2871.997320][ T791] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2872.387017][ T29] audit: type=1400 audit(2000002537.259:5438): avc: denied { audit_write } for pid=5403 comm="syz.0.8058" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2872.514833][ T29] audit: type=1400 audit(2000002537.306:5439): avc: denied { mount } for pid=5403 comm="syz.0.8058" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2872.676643][ T5419] netlink: 'syz.1.8061': attribute type 39 has an invalid length. [ 2873.152575][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8074'. [ 2873.230029][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8074'. [ 2874.064665][ T791] usb 6-1: USB disconnect, device number 89 [ 2874.577570][ T791] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2874.834513][ T791] usb 6-1: Using ep0 maxpacket: 16 [ 2874.898262][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2874.976123][ T791] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2874.994864][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.047660][ T791] usb 6-1: Product: syz [ 2875.054155][ T791] usb 6-1: Manufacturer: syz [ 2875.069637][ T791] usb 6-1: SerialNumber: syz [ 2875.083651][ T791] usb 6-1: config 0 descriptor?? [ 2875.104206][ T791] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2875.121594][ T791] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2875.685706][ T5499] fuse: Bad value for 'fd' [ 2875.765464][ T791] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2876.639054][ T791] em28xx 6-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 2876.647208][ T791] em28xx 6-1:0.0: failed to read eeprom (err=-5) [ 2876.666294][ T791] em28xx 6-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2876.767455][ T791] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2876.784155][ T791] em28xx 6-1:0.0: dvb set to bulk mode. [ 2876.799655][ T2690] em28xx 6-1:0.0: Binding DVB extension [ 2876.834613][ T2690] em28xx 6-1:0.0: Registering input extension [ 2876.872666][ T791] usb 6-1: USB disconnect, device number 90 [ 2876.898736][ T791] em28xx 6-1:0.0: Disconnecting em28xx [ 2876.918429][ T791] em28xx 6-1:0.0: Closing input extension [ 2877.111580][ T791] em28xx 6-1:0.0: Freeing device [ 2878.740311][ T5550] overlayfs: failed to clone upperpath [ 2879.054308][ T29] audit: type=1800 audit(2000002543.489:5440): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8108" name="bus" dev="tmpfs" ino=9199 res=0 errno=0 [ 2879.312736][ T29] audit: type=1400 audit(2000002543.732:5441): avc: denied { set_context_mgr } for pid=5569 comm="syz.1.8110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2879.402981][ T29] audit: type=1400 audit(2000002543.732:5442): avc: denied { map } for pid=5569 comm="syz.1.8110" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2879.515737][ T29] audit: type=1400 audit(2000002543.760:5443): avc: denied { call } for pid=5569 comm="syz.1.8110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2880.140753][ T5585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8117'. [ 2880.276649][ T5591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5591 comm=syz.5.8117 [ 2881.964247][ T5633] tmpfs: Bad value for 'mpol' [ 2883.634955][ T5669] tmpfs: Bad value for 'mpol' [ 2884.739106][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8149'. [ 2885.442092][ T5712] tmpfs: Bad value for 'mpol' [ 2885.567515][ T29] audit: type=1400 audit(2000002549.588:5444): avc: denied { create } for pid=5713 comm="syz.4.8159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2885.569343][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8159'. [ 2886.043071][ T29] audit: type=1400 audit(2000002549.588:5445): avc: denied { write } for pid=5713 comm="syz.4.8159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2886.248022][ T5714] bond3: (slave vcan1): refused to change device type [ 2886.436659][ T5722] syzkaller0: entered promiscuous mode [ 2886.466721][ T5722] syzkaller0: entered allmulticast mode [ 2887.434190][ T5758] tmpfs: Bad value for 'mpol' [ 2889.445803][ T29] audit: type=1400 audit(2000002553.208:5446): avc: denied { read } for pid=5782 comm="syz.0.8180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2889.465693][ T5783] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8180'. [ 2890.827629][ T5808] tmpfs: Bad value for 'mpol' [ 2891.552236][ T5835] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8191'. [ 2891.564197][ T5835] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8191'. [ 2891.590926][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8191'. [ 2893.908534][ T5903] CIFS mount error: No usable UNC path provided in device string! [ 2893.908534][ T5903] [ 2893.918718][ T5903] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2893.948827][T26145] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 2894.195442][T26145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 2894.206521][T26145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2894.223763][T26145] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2894.240565][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2894.377184][T20828] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2894.694057][T26145] usb 6-1: Product: syz [ 2894.712230][T26145] usb 6-1: Manufacturer: syz [ 2894.725769][T26145] usb 6-1: SerialNumber: syz [ 2894.753125][T26145] usb 6-1: config 0 descriptor?? [ 2894.770424][ T5901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2894.810272][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 2894.818486][T26145] port100 6-1:0.0: NFC: Could not get supported command types [ 2895.149984][T26145] usb 6-1: USB disconnect, device number 91 [ 2895.252138][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8215'. [ 2896.075343][ T29] audit: type=1400 audit(2000002559.400:5447): avc: denied { read } for pid=5955 comm="syz.5.8222" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2896.181569][ T29] audit: type=1400 audit(2000002559.400:5448): avc: denied { open } for pid=5955 comm="syz.5.8222" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2896.205956][ T29] audit: type=1400 audit(2000002559.400:5449): avc: denied { ioctl } for pid=5955 comm="syz.5.8222" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2897.230400][ T5968] fuse: Bad value for 'fd' [ 2902.235754][ T6038] netlink: 'syz.0.8247': attribute type 1 has an invalid length. [ 2902.352767][ T6046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6046 comm=syz.0.8247 [ 2902.422309][ T6038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2902.546254][ T6044] bond5: (slave gretap2): making interface the new active one [ 2902.555824][ T6044] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 2905.578582][ T29] audit: type=1400 audit(2000002568.305:5450): avc: denied { setopt } for pid=6079 comm="syz.4.8259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2905.600851][ T6075] netlink: 'syz.3.8246': attribute type 9 has an invalid length. [ 2905.643160][ T6075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=6075 comm=syz.3.8246 [ 2906.121993][ T6104] Failed to initialize the IGMP autojoin socket (err -2) [ 2907.846087][ T6124] netlink: 'syz.1.8273': attribute type 1 has an invalid length. [ 2907.864569][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8273'. [ 2908.046863][ T29] audit: type=1400 audit(2000002570.616:5451): avc: denied { accept } for pid=6125 comm="syz.3.8274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2908.071341][ T29] audit: type=1400 audit(2000002570.644:5452): avc: denied { read } for pid=6125 comm="syz.3.8274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2909.146781][ T6097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2909.520157][ T6151] overlayfs: failed to clone upperpath [ 2909.886643][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8279'. [ 2910.307858][ T6161] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8283'. [ 2910.317400][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8283'. [ 2910.349411][ T6162] netlink: 'syz.4.8284': attribute type 1 has an invalid length. [ 2910.432679][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8284'. [ 2910.433227][ T6162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2910.500735][ T6166] bond4: entered promiscuous mode [ 2910.506253][ T6166] bond4: entered allmulticast mode [ 2912.017694][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2913.458483][ T29] audit: type=1400 audit(2000002575.573:5453): avc: denied { watch watch_reads } for pid=6208 comm="syz.5.8296" path="pipe:[123608]" dev="pipefs" ino=123608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2915.191535][ T29] audit: type=1804 audit(2000002577.285:5454): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.8309" name="/newroot/790/file0" dev="fuse" ino=1 res=1 errno=0 [ 2916.335265][ T6262] tmpfs: Bad value for 'mpol' [ 2918.699373][ T6282] netlink: 'syz.4.8317': attribute type 11 has an invalid length. [ 2925.352227][ T6331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2928.587643][T20828] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2928.645276][ T6413] Failed to initialize the IGMP autojoin socket (err -2) [ 2928.722423][ T2690] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2928.753340][ T6417] Failed to initialize the IGMP autojoin socket (err -2) [ 2929.145640][ T2690] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2929.161304][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2929.286866][ T2690] usb 6-1: Product: syz [ 2929.309644][ T2690] usb 6-1: Manufacturer: syz [ 2929.992532][ T2690] usb 6-1: SerialNumber: syz [ 2930.569176][ T6434] fuse: Bad value for 'fd' [ 2931.103044][ T2690] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2931.148956][ T2690] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2931.332722][ T2690] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2931.906391][ T2690] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2931.927980][ T2690] usb 6-1: USB disconnect, device number 92 [ 2933.425742][ T29] audit: type=1400 audit(2000000011.196:5455): avc: denied { getopt } for pid=6466 comm="syz.4.8368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2934.482705][T29540] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2934.540122][ T6473] netlink: 'syz.1.8369': attribute type 178 has an invalid length. [ 2935.266877][ T29] audit: type=1400 audit(2000000012.721:5456): avc: denied { write } for pid=6483 comm="syz.5.8373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2938.852762][T29540] Bluetooth: hci3: command 0x0c1a tx timeout [ 2942.420700][ T6568] tmpfs: Unknown parameter 'usrquota·' [ 2942.760466][ T6578] Failed to initialize the IGMP autojoin socket (err -2) [ 2943.435060][ T6591] fuse: Bad value for 'fd' [ 2946.605946][ T6586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2948.617807][ T6639] tmpfs: Bad value for 'mpol' [ 2949.922956][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8412'. [ 2949.929486][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.3.8416 [ 2950.053000][ T2690] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2950.084085][ T29] audit: type=1400 audit(2000000026.780:5457): avc: denied { setopt } for pid=6657 comm="syz.3.8417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2950.221077][ T6663] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8419'. [ 2950.230583][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8419'. [ 2950.262402][ T2690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2950.272766][ T2690] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2950.285974][ T2690] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2950.299031][ T2690] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 2950.394903][ T2690] usb 6-1: Manufacturer: syz [ 2950.402450][ T2690] usb 6-1: config 0 descriptor?? [ 2951.036880][ T29] audit: type=1400 audit(2000000027.669:5458): avc: denied { append } for pid=6645 comm="syz.5.8414" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2954.484889][T26145] usb 6-1: USB disconnect, device number 93 [ 2955.294007][ T6705] binder_alloc: 6703: pid 6703 spamming oneway? 1 buffers allocated for a total size of 4096 [ 2955.306500][ T29] audit: type=1400 audit(2000000031.653:5459): avc: denied { write } for pid=6703 comm="syz.5.8429" name="binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2956.643576][ T6727] hub 9-0:1.0: USB hub found [ 2956.739927][ T6727] hub 9-0:1.0: 1 port detected [ 2959.521567][ T29] audit: type=1400 audit(2000000035.610:5460): avc: denied { setopt } for pid=6752 comm="syz.4.8441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2959.568542][ T29] audit: type=1400 audit(2000000035.610:5461): avc: denied { listen } for pid=6752 comm="syz.4.8441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2959.892207][ T29] audit: type=1400 audit(2000000035.956:5462): avc: denied { ioctl } for pid=6752 comm="syz.4.8441" path="socket:[125654]" dev="sockfs" ino=125654 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2960.608588][ T6737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2963.466829][T26145] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 2964.848791][T29540] Bluetooth: hci3: command 0x0c1a tx timeout [ 2964.860025][ T6794] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2965.464837][T26145] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2965.484139][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2965.501386][T26145] usb 6-1: Product: syz [ 2965.505667][T26145] usb 6-1: Manufacturer: syz [ 2965.510261][T26145] usb 6-1: SerialNumber: syz [ 2965.751421][T26145] usb 6-1: config 0 descriptor?? [ 2966.804516][T26145] usb 6-1: can't set config #0, error -71 [ 2966.824268][T26145] usb 6-1: USB disconnect, device number 94 [ 2966.991239][ T6828] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8460'. [ 2967.009588][ T6828] netlink: 200 bytes leftover after parsing attributes in process `syz.5.8460'. [ 2967.019722][ T29] audit: type=1400 audit(2000000042.626:5463): avc: denied { getopt } for pid=6827 comm="syz.5.8460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2967.073249][ T707] Bluetooth: hci3: command 0x0c1a tx timeout [ 2970.076474][T26145] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 2970.240003][T26145] usb 6-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 2970.254424][T26145] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2970.279241][T26145] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2970.482675][T26145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.498802][T26145] usb 6-1: Product: syz [ 2970.567488][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8469'. [ 2970.925805][T26145] usb 6-1: Manufacturer: syz [ 2970.930442][T26145] usb 6-1: SerialNumber: syz [ 2970.937361][T26145] usb 6-1: config 0 descriptor?? [ 2973.142452][ T2690] usb 6-1: USB disconnect, device number 95 [ 2973.327162][ T6893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6893 comm=syz.1.8473 [ 2974.647241][ T6924] syzkaller0: entered promiscuous mode [ 2974.661721][ T6924] syzkaller0: entered allmulticast mode [ 2977.200290][ T6950] tipc: Enabling of bearer rejected, failed to enable media [ 2987.786560][ T29] audit: type=1400 audit(2000000062.045:5464): avc: denied { bind } for pid=7079 comm="syz.0.8519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2988.514704][ T7043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2988.525402][ T7078] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 2990.851773][ T7132] overlayfs: failed to clone upperpath [ 2991.386786][ T29] audit: type=1800 audit(2000000065.421:5465): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.8530" name="bus" dev="ramfs" ino=127938 res=0 errno=0 [ 2995.314269][ T7174] tipc: Enabling of bearer rejected, failed to enable media [ 2995.325551][ T7174] netlink: 'syz.3.8543': attribute type 13 has an invalid length. [ 2995.680477][ T2690] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2996.132424][ T2690] usb 6-1: Using ep0 maxpacket: 8 [ 2996.147902][ T2690] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2996.162574][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2996.174613][ T2690] usb 6-1: Product: syz [ 2996.177757][ T29] audit: type=1400 audit(2000000069.902:5466): avc: denied { create } for pid=7195 comm="syz.1.8548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2996.184435][ T2690] usb 6-1: Manufacturer: syz [ 2996.219230][ T2690] usb 6-1: SerialNumber: syz [ 2996.345371][ T2690] usb 6-1: config 0 descriptor?? [ 2996.806540][ T7209] trusted_key: encrypted_key: insufficient parameters specified [ 2996.823575][ T2690] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2997.083814][ T2690] usb write operation failed. (-71) [ 2997.094761][ T2690] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2997.110350][ T2690] dvbdev: DVB: registering new adapter (Terratec H7) [ 2997.154877][ T2690] usb 6-1: media controller created [ 2997.196753][ T2690] usb read operation failed. (-71) [ 2997.205598][ T2690] usb write operation failed. (-71) [ 2997.220893][ T2690] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2997.269374][ T7216] tipc: Enabling of bearer rejected, failed to enable media [ 2997.272613][ T2690] usb 6-1: USB disconnect, device number 96 [ 2997.422509][ T7221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8552'. [ 2998.461640][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8555'. [ 2998.488684][ T7230] nbd: socks must be embedded in a SOCK_ITEM attr [ 2998.576076][ T6692] udevd[6692]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2998.598441][ T6695] udevd[6695]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 3001.063475][T19325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3003.533872][ T7302] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 3003.542293][ T7302] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 3003.554566][ T7302] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 3003.575904][ T29] audit: type=1400 audit(2000000076.796:5467): avc: denied { firmware_load } for pid=7294 comm="syz.3.8570" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3004.663398][ T29] audit: type=1400 audit(2000000077.834:5468): avc: denied { map } for pid=7306 comm="syz.5.8573" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 3006.444916][ T29] audit: type=1400 audit(2000000079.499:5469): avc: denied { create } for pid=7317 comm="syz.0.8577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 3008.016528][ T7346] netlink: 'syz.4.8582': attribute type 3 has an invalid length. [ 3008.733165][ T29] audit: type=1400 audit(2000000081.641:5470): avc: denied { getopt } for pid=7347 comm="syz.1.8583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3009.148277][ T29] audit: type=1326 audit(2000000081.744:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.1.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b7d9c799 code=0x7ffc0000 [ 3009.233709][ T29] audit: type=1326 audit(2000000081.744:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.1.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b7d9c799 code=0x7ffc0000 [ 3009.647945][ T7365] overlayfs: failed to clone upperpath [ 3010.039520][ T29] audit: type=1400 audit(2000000082.857:5473): avc: denied { transfer } for pid=7364 comm="syz.1.8587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3010.793547][ T7388] /dev/nullb0: Can't lookup blockdev [ 3014.604957][ T7423] sp0: Synchronizing with TNC [ 3014.864156][ T29] audit: type=1400 audit(2000000087.375:5474): avc: denied { read } for pid=5471 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 3015.569874][ T29] audit: type=1400 audit(2000000088.021:5475): avc: denied { search } for pid=5471 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3015.683500][ T7420] ALSA: mixer_oss: invalid OSS volume '' [ 3015.744065][ T29] audit: type=1400 audit(2000000088.021:5476): avc: denied { search } for pid=5471 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3016.068525][ T29] audit: type=1400 audit(2000000088.021:5477): avc: denied { search } for pid=5471 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3016.172631][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8606'. [ 3016.310347][ T29] audit: type=1400 audit(2000000088.021:5478): avc: denied { read } for pid=5471 comm="dhcpcd" name="n121" dev="tmpfs" ino=10017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3017.322355][ T29] audit: type=1400 audit(2000000088.021:5479): avc: denied { open } for pid=5471 comm="dhcpcd" path="/run/udev/data/n121" dev="tmpfs" ino=10017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3017.513259][ T7450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7450 comm=syz.0.8606 [ 3017.534457][ T29] audit: type=1400 audit(2000000088.021:5480): avc: denied { getattr } for pid=5471 comm="dhcpcd" path="/run/udev/data/n121" dev="tmpfs" ino=10017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3018.237482][ T7465] 9p: Bad value for 'rfdno' [ 3020.250469][ T29] audit: type=1400 audit(2000000092.417:5481): avc: denied { map } for pid=7488 comm="syz.5.8617" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3020.406239][ T29] audit: type=1400 audit(2000000092.417:5482): avc: denied { execute } for pid=7488 comm="syz.5.8617" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3021.335645][ T2690] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 3021.512400][ T2690] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3021.525824][ T2690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3021.547341][ T2690] usb 6-1: Product: syz [ 3021.556112][ T2690] usb 6-1: Manufacturer: syz [ 3021.565530][ T2690] usb 6-1: SerialNumber: syz [ 3021.584824][ T2690] usb 6-1: config 0 descriptor?? [ 3021.740031][ T29] audit: type=1400 audit(2000000093.792:5483): avc: denied { mount } for pid=7510 comm="syz.4.8623" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3022.263193][ T2690] usb 6-1: Firmware version (0.0) predates our first public release. [ 3022.727779][ T2690] usb 6-1: Please update to version 0.2 or newer [ 3023.353388][ T2690] usb 6-1: USB disconnect, device number 97 [ 3024.043142][ T2690] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3024.104888][T26145] libceph: mon0 (1)[c::]:6789 connect error [ 3024.256672][ T2690] usb 6-1: Using ep0 maxpacket: 16 [ 3024.269069][ T2690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3025.251314][T26145] libceph: mon0 (1)[c::]:6789 connect error [ 3025.460279][ T2690] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3025.528780][ T2690] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 3025.537846][ T2690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.583896][ T2690] usb 6-1: config 0 descriptor?? [ 3025.620549][ T2690] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3025.646867][ T7536] ceph: No mds server is up or the cluster is laggy [ 3025.796686][T26145] libceph: mon0 (1)[c::]:6789 connect error [ 3026.471952][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8632'. [ 3026.480999][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8632'. [ 3030.476639][ T7574] overlayfs: failed to clone upperpath [ 3030.572268][ T2690] usb 6-1: USB disconnect, device number 98 [ 3036.691440][T19341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3037.139014][T18305] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 3037.315361][T18305] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3037.326788][T18305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3037.335358][T18305] usb 6-1: Product: syz [ 3037.339724][T18305] usb 6-1: Manufacturer: syz [ 3037.348634][T18305] usb 6-1: SerialNumber: syz [ 3037.428726][T18305] usb 6-1: config 0 descriptor?? [ 3037.971595][T18305] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3038.196201][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8651'. [ 3040.098478][T18305] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3040.130678][T18305] usb 6-1: USB disconnect, device number 99 [ 3042.384003][ T7701] 9p: Bad value for 'rfdno' [ 3046.525007][ T7750] bond0: entered promiscuous mode [ 3046.538956][ T7750] debugfs: 'hsr1' already exists in 'hsr' [ 3046.544743][ T7750] Cannot create hsr debugfs directory [ 3046.551511][ T7750] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 3046.566370][ T7750] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 3046.579228][ T7750] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 3046.884333][ T7753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7753 comm=syz.1.8682 [ 3047.943208][ T7769] netlink: 'syz.4.8688': attribute type 10 has an invalid length. [ 3050.485294][ T7800] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 3050.505726][ T7800] /dev/nullb0: Can't lookup blockdev [ 3052.484583][ T29] audit: type=1400 audit(2000000122.546:5484): avc: denied { create } for pid=7805 comm="syz.5.8700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 3054.314922][ T791] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 3054.503634][ T7810] delete_channel: no stack [ 3054.929738][ T791] usb 6-1: Using ep0 maxpacket: 32 [ 3054.958360][ T791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3054.990310][ T791] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3055.078573][ T791] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3055.087617][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3055.125971][ T791] usb 6-1: Product: syz [ 3055.130171][ T791] usb 6-1: Manufacturer: syz [ 3055.783407][ T791] usb 6-1: SerialNumber: syz [ 3055.851011][ T791] usb 6-1: config 0 descriptor?? [ 3055.856394][ T791] usb 6-1: can't set config #0, error -71 [ 3055.863664][ T791] usb 6-1: USB disconnect, device number 100 [ 3057.825267][ T29] audit: type=1400 audit(2000000127.158:5485): avc: denied { watch } for pid=7858 comm="syz.1.8699" path="/1833/file0" dev="tmpfs" ino=9819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3059.209606][ T7844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3059.678994][ T7871] tipc: Enabling of bearer rejected, already enabled [ 3060.519131][ T29] audit: type=1400 audit(2000000130.011:5486): avc: denied { write } for pid=7872 comm="syz.5.8717" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3061.067339][ T7893] netlink: 'syz.3.8721': attribute type 4 has an invalid length. [ 3061.114172][ T7893] Failed to initialize the IGMP autojoin socket (err -2) [ 3061.630458][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.517955][ T29] audit: type=1804 audit(2000000132.359:5487): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.8719" name="/newroot/857/file1" dev="fuse" ino=1 res=1 errno=0 [ 3065.958806][ T7943] ªªªªªª5gæ¹Q[Ô: Caught tx_queue_len zero misconfig [ 3068.019115][ T7964] 9p: Bad value for 'rfdno' [ 3070.393489][ T29] audit: type=1326 audit(2000000139.318:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.0.8745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc7499c799 code=0x0 [ 3070.429847][ T7987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8740'. [ 3071.012126][T20826] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3071.484662][ T7962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3071.894502][T26145] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 3072.361686][ T8007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8007 comm=syz.1.8753 [ 3072.429893][T26145] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3072.448439][T26145] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3072.578923][T26145] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3072.603315][T26145] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3072.612264][T26145] usb 6-1: Manufacturer: syz [ 3072.635991][T26145] usb 6-1: config 0 descriptor?? [ 3072.660878][T26145] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3073.584277][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8756'. [ 3073.593236][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8756'. [ 3074.093389][ T29] audit: type=1400 audit(2000000142.779:5489): avc: denied { create } for pid=7998 comm="syz.5.8752" name="#97" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3074.156525][ T29] audit: type=1400 audit(2000000142.779:5490): avc: denied { link } for pid=7998 comm="syz.5.8752" name="#97" dev="tmpfs" ino=4623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3074.254050][ T29] audit: type=1400 audit(2000000142.779:5491): avc: denied { rename } for pid=7998 comm="syz.5.8752" name="#98" dev="tmpfs" ino=4623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3076.578055][T26145] usb 6-1: USB disconnect, device number 101 [ 3078.832254][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8763'. [ 3080.196001][ T8062] 9p: Bad value for 'rfdno' [ 3081.096779][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8771'. [ 3082.201429][ T8080] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 3086.407454][ T8132] /dev/nullb0: Can't lookup blockdev [ 3088.250929][ T29] audit: type=1400 audit(2000000155.444:5492): avc: denied { ioctl } for pid=8133 comm="syz.5.8779" path="socket:[131723]" dev="sockfs" ino=131723 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3090.662263][ T8164] Failed to initialize the IGMP autojoin socket (err -2) [ 3090.758714][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8791'. [ 3091.419088][ T29] audit: type=1400 audit(2000000158.952:5493): avc: denied { mount } for pid=8165 comm="syz.4.8795" name="/" dev="hugetlbfs" ino=132286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3093.361793][ T29] audit: type=1400 audit(2000000160.804:5494): avc: denied { read } for pid=8187 comm="syz.4.8796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 3093.373075][ T8189] fuse: Bad value for 'fd' [ 3093.896847][ T8196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3095.697149][ T8209] netlink: 'syz.0.8804': attribute type 10 has an invalid length. [ 3098.321980][ T8228] overlay: filesystem on ./file0 not supported as upperdir [ 3099.000744][ T8230] Can't find ip_set type bitmap:ip [ 3099.797838][ T8245] delete_channel: no stack [ 3100.010361][ T29] audit: type=1400 audit(2000000166.828:5495): avc: denied { ioctl } for pid=8239 comm="syz.3.8812" path="socket:[131838]" dev="sockfs" ino=131838 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3100.332919][ T8247] Failed to initialize the IGMP autojoin socket (err -2) [ 3100.401364][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8810'. [ 3104.594245][ T8289] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8823'. [ 3104.607823][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8823'. [ 3104.708239][ T8291] fuse: Bad value for 'fd' [ 3105.797884][ T6794] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3107.097706][ T8312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8827'. [ 3108.311740][ T8319] block nbd5: not configured, cannot reconfigure [ 3108.439661][ T29] audit: type=1400 audit(2000000174.910:5496): avc: denied { getopt } for pid=8318 comm="syz.5.8830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3108.440369][ T8324] tmpfs: Bad value for 'nr_blocks' [ 3108.563441][ T29] audit: type=1400 audit(2000000174.910:5497): avc: denied { write } for pid=8318 comm="syz.5.8830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3110.577957][ T8340] Failed to initialize the IGMP autojoin socket (err -2) [ 3111.298152][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8831'. [ 3111.314817][ T29] audit: type=1400 audit(2000000177.211:5498): avc: denied { mounton } for pid=8344 comm="syz.5.8837" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3111.355129][ T8351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3111.469138][ T29] audit: type=1400 audit(2000000177.726:5499): avc: denied { execute } for pid=8355 comm="syz.3.8836" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=132641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 3111.728613][ T29] audit: type=1800 audit(2000000177.969:5500): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.8839" name="SYSV00000000" dev="tmpfs" ino=21 res=0 errno=0 [ 3111.990241][ T29] audit: type=1400 audit(2000000177.978:5501): avc: denied { read write } for pid=8358 comm="syz.5.8839" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 3112.015229][ T29] audit: type=1400 audit(2000000177.978:5502): avc: denied { open } for pid=8358 comm="syz.5.8839" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 3140.003734][T32368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3173.531208][T19325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3207.739522][T20826] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3241.960078][T32368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3276.160224][T19341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3310.369559][ T6794] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3311.190773][ T29] audit: type=1400 audit(2000000364.562:5503): avc: denied { recv } for pid=0 comm="swapper/1" saddr=169.254.169.254 src=67 daddr=10.128.0.216 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 3311.253116][ T29] audit: type=1400 audit(2000000364.618:5504): avc: denied { remove_name } for pid=8399 comm="rm" name="eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3311.281908][ T29] audit: type=1400 audit(2000000364.618:5505): avc: denied { unlink } for pid=8399 comm="rm" name="eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3311.306557][ T29] audit: type=1400 audit(2000000364.646:5506): avc: denied { getattr } for pid=8396 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3311.332990][ T29] audit: type=1400 audit(2000000364.646:5507): avc: denied { add_name } for pid=8396 comm="dhcpcd-run-hook" name="eth0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3311.357623][ T29] audit: type=1400 audit(2000000364.646:5508): avc: denied { create } for pid=8396 comm="dhcpcd-run-hook" name="eth0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3311.380333][ T29] audit: type=1400 audit(2000000364.646:5509): avc: denied { write } for pid=8396 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=10236 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3311.410618][ T29] audit: type=1400 audit(2000000364.646:5510): avc: denied { read open } for pid=8400 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3311.468515][ T29] audit: type=1400 audit(2000000364.815:5511): avc: denied { append } for pid=8396 comm="dhcpcd-run-hook" name="resolv.conf.eth0.dhcp" dev="tmpfs" ino=10237 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3344.580039][T20826] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3350.435970][ T8448] Failed to initialize the IGMP autojoin socket (err -2) [ 3350.983210][ T791] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3351.137222][ T8486] netlink: 'syz.0.8872': attribute type 4 has an invalid length. [ 3351.147042][ T8486] netlink: 'syz.0.8872': attribute type 4 has an invalid length. [ 3351.260891][ T791] usb 6-1: Using ep0 maxpacket: 16 [ 3351.297854][ T791] usb 6-1: config 0 has no interfaces? [ 3351.306688][ T791] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3351.316924][ T791] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3351.325367][ T791] usb 6-1: Manufacturer: syz [ 3351.342118][ T791] usb 6-1: config 0 descriptor?? [ 3351.690378][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8855'. [ 3352.744806][ T29] audit: type=1400 audit(2000000403.428:5512): avc: denied { mounton } for pid=8526 comm="syz.3.8892" path="/1888/file0" dev="tmpfs" ino=10012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 3353.528681][ T8587] tmpfs: Bad value for 'mpol' [ 3353.639429][ T791] usb 6-1: USB disconnect, device number 102 [ 3353.898378][ T8590] input: syz0 as /devices/virtual/input/input29 [ 3354.619114][ T8620] Failed to initialize the IGMP autojoin socket (err -2) [ 3354.639276][ T2516] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3354.822620][ T2516] usb 6-1: Using ep0 maxpacket: 32 [ 3354.838317][ T2516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3354.893764][ T2516] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 3354.940294][ T2516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3354.958784][ T2516] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3354.968433][ T2516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.987987][ T2516] usb 6-1: Product: syz [ 3355.012849][ T2516] usb 6-1: Manufacturer: syz [ 3355.024177][ T2516] usb 6-1: SerialNumber: syz [ 3355.035427][ T2516] usb 6-1: config 0 descriptor?? [ 3355.449298][ T8636] binder: 8635:8636 ioctl c0306201 0 returned -14 [ 3355.457962][ T8636] binder: 8635:8636 ioctl c00c620f 200000000140 returned -22 [ 3355.493028][ T2516] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 3355.626627][ T29] audit: type=1400 audit(2000000406.131:5513): avc: denied { read } for pid=8637 comm="syz.1.8940" dev="sockfs" ino=134620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 3355.656960][ T8638] 9p: Bad value for 'wfdno' [ 3355.877914][ T8642] tmpfs: Bad value for 'mpol' [ 3356.436395][ T791] usb 6-1: USB disconnect, device number 103 [ 3357.443229][ T8691] tmpfs: Bad value for 'mpol' [ 3358.098264][ T8699] netlink: 'syz.0.8957': attribute type 18 has an invalid length. [ 3358.125071][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8957'. [ 3358.252036][ T8618] kernel read not supported for file /6630/net/igmp (pid: 8618 comm: kworker/1:0) [ 3358.277076][ T8699] netlink: 'syz.0.8957': attribute type 18 has an invalid length. [ 3358.292264][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8957'. [ 3358.696651][ T8617] Set syz1 is full, maxelem 65536 reached [ 3358.835653][ T8742] tmpfs: Bad value for 'mpol' [ 3358.848852][ T8743] Failed to initialize the IGMP autojoin socket (err -2) [ 3359.661317][ T29] audit: type=1400 audit(2000000409.901:5514): avc: denied { mounton } for pid=8753 comm="syz.5.8975" path="/892/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 3359.686390][ T8754] Invalid source name [ 3359.691351][ T8756] fuse: Bad value for 'fd' [ 3360.017026][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8981'. [ 3360.035744][ T8770] fuse: Bad value for 'fd' [ 3360.529752][ T8488] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 3360.723986][ T8488] usb 6-1: Using ep0 maxpacket: 32 [ 3360.740603][ T8488] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3360.751052][ T8488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3360.765190][ T8488] usb 6-1: Product: syz [ 3361.167489][ T8790] fuse: Bad value for 'fd' [ 3361.192445][ T8488] usb 6-1: Manufacturer: syz [ 3361.217884][ T8488] usb 6-1: SerialNumber: syz [ 3361.322403][ T8488] usb 6-1: config 0 descriptor?? [ 3361.361542][ T8488] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 3361.712708][ T29] audit: type=1326 audit(2000000411.819:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.1.9000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0b7d9c799 code=0x0 [ 3362.827325][ T8835] overlayfs: failed to clone upperpath [ 3362.909283][ T8488] gspca_ov534_9: reg_r err -71 [ 3362.929688][ T8842] geneve2: entered promiscuous mode [ 3363.289760][ T8853] 8021q: adding VLAN 0 to HW filter on device .` [ 3363.581655][ T8853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3363.683984][ T8488] gspca_ov534_9: Unknown sensor 0000 [ 3363.684072][ T8488] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 3363.712733][ T8488] usb 6-1: USB disconnect, device number 104 [ 3364.638027][ T29] audit: type=1326 audit(2000000414.559:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.1.9043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0b7d9c799 code=0x0 [ 3365.175516][ T8930] overlayfs: failed to clone upperpath [ 3365.438294][ T8944] 9p: Bad value for 'rfdno' [ 3365.729636][ T8957] fuse: Bad value for 'fd' [ 3366.207972][ T8972] fuse: Bad value for 'fd' [ 3366.399246][ T8982] fuse: Bad value for 'fd' [ 3366.431026][ T2516] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 3366.586020][ T8992] veth0_to_team: entered promiscuous mode [ 3366.597835][ T8991] veth0_to_team: left promiscuous mode [ 3366.616373][ T2516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3366.632442][ T2516] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 3366.641954][ T2516] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 3366.654536][ T2516] usb 6-1: config 63 has no interface number 0 [ 3366.665159][ T2516] usb 6-1: config 63 interface 66 has no altsetting 0 [ 3366.676129][ T2516] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 3366.686699][ T2516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.696986][ T2516] usb 6-1: Product: syz [ 3366.701572][ T29] audit: type=1400 audit(2000000416.486:5517): avc: denied { watch_mount } for pid=8994 comm="syz.1.9079" path="/1924" dev="tmpfs" ino=10297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3366.725006][ T2516] usb 6-1: Manufacturer: syz [ 3366.729618][ T2516] usb 6-1: SerialNumber: syz [ 3366.881363][ T9011] fuse: Bad value for 'fd' [ 3366.981101][ T2516] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 3367.087336][ T9021] fuse: Bad value for 'fd' [ 3367.110109][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3367.121057][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 3367.131786][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 3367.146576][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 3367.156898][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3367.166952][ T2516] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 3367.171046][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 3367.175638][ T2516] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 3367.194627][ T2516] usb 6-1: USB disconnect, device number 105 [ 3367.274599][ T9024] ceph: No mds server is up or the cluster is laggy [ 3367.533674][ T2516] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 3367.705511][ T2516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3367.715791][ T2516] usb 6-1: not running at top speed; connect to a high speed hub [ 3367.725722][ T2516] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 3367.734957][ T2516] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 3367.750908][ T2516] usb 6-1: config 63 has no interface number 0 [ 3367.768107][ T2516] usb 6-1: config 63 interface 66 has no altsetting 0 [ 3367.790856][ T2516] usb 6-1: string descriptor 0 read error: -22 [ 3367.799325][ T2516] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 3367.808696][ T2516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3367.830164][ T2516] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 3367.878555][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9100'. [ 3368.220984][ T9062] overlayfs: failed to clone upperpath [ 3368.239571][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9101'. [ 3368.391400][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 3368.463139][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 3368.512417][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 3368.540881][ T9069] fuse: Bad value for 'fd' [ 3368.545360][ T2516] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3368.567526][ T2516] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 3368.674745][ T2516] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 3368.714042][ T2516] usb 6-1: USB disconnect, device number 106 [ 3368.927101][ T9084] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9113'. [ 3369.332593][ T9109] 9p: Bad value for 'wfdno' [ 3369.624630][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9123'. [ 3369.670830][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9125'. [ 3369.801428][ T29] audit: type=1400 audit(2000000419.386:5518): avc: denied { write } for pid=9117 comm="syz.1.9126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 3370.588518][ T9154] overlayfs: failed to clone upperpath [ 3370.680518][ T29] audit: type=1326 audit(2000000420.209:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.705036][ T29] audit: type=1326 audit(2000000420.209:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.739541][ T29] audit: type=1326 audit(2000000420.209:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.766209][ T29] audit: type=1326 audit(2000000420.209:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.796729][ T29] audit: type=1326 audit(2000000420.209:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.857463][ T29] audit: type=1326 audit(2000000420.209:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.912062][ T29] audit: type=1326 audit(2000000420.209:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3370.940059][ T29] audit: type=1326 audit(2000000420.209:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ad9c799 code=0x7ffc0000 [ 3371.152207][ T9182] overlayfs: failed to clone upperpath [ 3371.508190][ T9204] fuse: Bad value for 'fd' [ 3371.513550][ T9206] fuse: Unknown parameter 'group_id00000000000000000000' [ 3372.068609][ T9239] fuse: Bad value for 'fd' [ 3372.188038][ T9249] fuse: Bad value for 'fd' [ 3372.340175][ T9260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9182'. [ 3373.221745][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'. [ 3373.426881][ T9324] fuse: Unknown parameter 'group_id00000000000000000000' [ 3373.679984][ T707] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 3373.772484][ T9337] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 3373.926271][ T9344] tipc: Enabling of bearer rejected, failed to enable media [ 3373.940970][ T9349] fuse: Bad value for 'fd' [ 3374.223607][ T9360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3374.292531][ T9369] binder: 9367:9369 ioctl c0306201 2000000003c0 returned -14 [ 3375.301527][ T9442] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9253'. [ 3376.946231][ T9491] fuse: Bad value for 'group_id' [ 3377.062656][ T9491] fuse: Bad value for 'group_id' [ 3377.375746][ T9507] netlink: 'syz.1.9269': attribute type 39 has an invalid length. [ 3377.526976][ T9515] overlayfs: failed to clone upperpath [ 3377.554588][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3377.566058][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 3377.566076][ T29] audit: type=1400 audit(2000000426.645:5543): avc: denied { execute_no_trans } for pid=9517 comm="syz.3.9273" path=2F6D656D66643A2D42D54E34A64579DBD1A7B177202864656C6574656429 dev="hugetlbfs" ino=137394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 3377.625650][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3377.738794][ T9494] batman_adv: batadv0: Interface deactivated: macvtap1 [ 3377.772333][ T9494] batman_adv: batadv0: Interface deactivated: macvtap2 [ 3377.816135][T19341] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3377.824619][T19341] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3377.868194][T19341] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3377.908650][T19341] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3377.957368][ T9530] fuse: Bad value for 'fd' [ 3378.596234][ T9548] fuse: Bad value for 'fd' [ 3378.798181][T19325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3378.985020][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9287'. [ 3379.457985][ T9575] overlayfs: failed to clone upperpath [ 3380.804310][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9309'. [ 3380.889705][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9302'. [ 3381.231633][ T9633] overlayfs: failed to clone upperpath [ 3381.503452][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9314'. [ 3381.907521][ T2516] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3382.126077][ T2516] usb 6-1: Using ep0 maxpacket: 32 [ 3382.133734][ T2516] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3382.145677][ T2516] usb 6-1: config 0 has no interface number 0 [ 3382.163984][ T2516] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3382.243390][ T2516] usb 6-1: config 0 interface 1 has no altsetting 0 [ 3382.283839][ T2516] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3382.293596][ T2516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.310746][ T2516] usb 6-1: Product: syz [ 3382.327551][ T2516] usb 6-1: Manufacturer: syz [ 3382.341958][ T2516] usb 6-1: SerialNumber: syz [ 3382.437112][ T2516] usb 6-1: config 0 descriptor?? [ 3382.975747][ T2516] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3383.008001][ T2516] cx231xx 6-1:0.1: Failed to read PCB config [ 3383.023461][ T2516] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 3383.042634][ T2516] usb 6-1: USB disconnect, device number 107 [ 3383.365961][ T29] audit: type=1400 audit(2000000432.005:5544): avc: denied { write } for pid=9649 comm="syz.1.9320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 3383.471782][ T9651] lec:lec_atm_close: lec0: Shut down! [ 3383.504821][ T2516] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3383.676480][ T9690] netlink: 'syz.0.9329': attribute type 10 has an invalid length. [ 3383.686418][ T9690] team0: Port device dummy0 added [ 3383.701757][ T2516] usb 6-1: Using ep0 maxpacket: 32 [ 3383.720605][ T2516] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3383.729671][ T2516] usb 6-1: config 0 has no interface number 0 [ 3383.743445][ T2516] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3383.755006][ T2516] usb 6-1: config 0 interface 1 has no altsetting 0 [ 3383.764729][ T2516] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3383.774388][ T2516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3383.820277][ T2516] usb 6-1: Product: syz [ 3383.831144][ T2516] usb 6-1: Manufacturer: syz [ 3383.849399][ T2516] usb 6-1: SerialNumber: syz [ 3383.894621][ T2516] usb 6-1: config 0 descriptor?? [ 3383.911850][ T9699] netlink: 'syz.3.9331': attribute type 1 has an invalid length. [ 3384.055892][ T9699] bond6: (slave geneve2): Opening slave failed [ 3384.138410][ T2516] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3384.171291][ T2516] cx231xx 6-1:0.1: bad config in buspower!!!! [ 3384.171291][ T2516] config_info=40 [ 3384.214541][ T2516] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 3384.348479][ T2516] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 3384.368719][ T2516] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 3384.531301][ T2516] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 3384.550522][ T2516] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 3384.560585][ T2516] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -32 [ 3384.599110][ T9740] blkio.reset_stats is deprecated [ 3384.649292][ T2516] i2c i2c-2: Added multiplexed i2c bus 4 [ 3384.680807][ T2516] i2c i2c-2: Added multiplexed i2c bus 5 [ 3384.704034][ T2516] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 3384.736052][ T2516] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 3384.841802][ T2516] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 3384.890823][ T2516] usb 6-1: USB disconnect, device number 108 [ 3385.538978][ T9795] fuse: Bad value for 'fd' [ 3385.986690][ T9808] fuse: Bad value for 'fd' [ 3386.184696][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9372'. [ 3387.186681][ T9845] netlink: 'syz.1.9380': attribute type 1 has an invalid length. [ 3387.283315][ T9845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3387.341823][ T9781] Bluetooth: hci1: command 0x0c1a tx timeout [ 3388.497090][ T9905] netlink: 45 bytes leftover after parsing attributes in process `syz.0.9395'. [ 3388.878183][ T9917] fuse: Bad value for 'fd' [ 3391.356169][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9416'. [ 3391.404556][ T9955] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9416'. [ 3393.015711][ T29] audit: type=1400 audit(2000000441.097:5545): avc: denied { remount } for pid=9972 comm="syz.5.9423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3394.055363][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9428'. [ 3394.297954][ T9991] tipc: Resetting bearer [ 3394.496825][ T29] audit: type=1400 audit(2000000442.490:5546): avc: denied { bind } for pid=9998 comm="syz.5.9431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3394.528537][ T9994] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9429'. [ 3395.372727][ T29] audit: type=1400 audit(2000000443.304:5547): avc: denied { append } for pid=10013 comm="syz.5.9434" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3395.405532][T10015] [ 3395.407889][T10015] ============================================ [ 3395.414035][T10015] WARNING: possible recursive locking detected [ 3395.420186][T10015] syzkaller #0 Tainted: G L [ 3395.426158][T10015] -------------------------------------------- [ 3395.432301][T10015] syz.5.9434/10015 is trying to acquire lock: [ 3395.438385][T10015] ffff88803217e0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 3395.447260][T10015] [ 3395.447260][T10015] but task is already holding lock: [ 3395.454601][T10015] ffff88803217f0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 3395.464248][T10015] [ 3395.464248][T10015] other info that might help us debug this: [ 3395.472295][T10015] Possible unsafe locking scenario: [ 3395.472295][T10015] [ 3395.479739][T10015] CPU0 [ 3395.483013][T10015] ---- [ 3395.486272][T10015] lock(&dev->mutex#4); [ 3395.490507][T10015] lock(&dev->mutex#4); [ 3395.494734][T10015] [ 3395.494734][T10015] *** DEADLOCK *** [ 3395.494734][T10015] [ 3395.502854][T10015] May be due to missing lock nesting notation [ 3395.502854][T10015] [ 3395.511154][T10015] 1 lock held by syz.5.9434/10015: [ 3395.516239][T10015] #0: ffff88803217f0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 3395.526328][T10015] [ 3395.526328][T10015] stack backtrace: [ 3395.532206][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.5.9434 Tainted: G L syzkaller #0 PREEMPT(full) [ 3395.532228][T10015] Tainted: [L]=SOFTLOCKUP [ 3395.532234][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3395.532243][T10015] Call Trace: [ 3395.532248][T10015] [ 3395.532254][T10015] dump_stack_lvl+0x100/0x190 [ 3395.532279][T10015] print_deadlock_bug.cold+0xbd/0xca [ 3395.532302][T10015] __lock_acquire+0x12bb/0x2630 [ 3395.532331][T10015] lock_acquire+0x1cf/0x380 [ 3395.532354][T10015] ? comedi_do_insn+0x2e/0x360 [ 3395.532371][T10015] ? __pfx___might_resched+0x10/0x10 [ 3395.532387][T10015] __mutex_lock+0x1a2/0x1b90 [ 3395.532403][T10015] ? comedi_do_insn+0x2e/0x360 [ 3395.532419][T10015] ? comedi_do_insn+0x2e/0x360 [ 3395.532435][T10015] ? __pfx___mutex_lock+0x10/0x10 [ 3395.532456][T10015] ? __pfx___might_resched+0x10/0x10 [ 3395.532473][T10015] ? __up_read+0x2c5/0x700 [ 3395.532489][T10015] ? comedi_do_insn+0x2e/0x360 [ 3395.532503][T10015] comedi_do_insn+0x2e/0x360 [ 3395.532519][T10015] comedi_dio_bitfield2+0x3c0/0x420 [ 3395.532536][T10015] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 3395.532552][T10015] ? __kernel_text_address+0xd/0x30 [ 3395.532568][T10015] ? arch_stack_walk+0xa6/0xf0 [ 3395.532590][T10015] bonding_dio_insn_bits+0x2b9/0x570 [ 3395.532613][T10015] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 3395.532632][T10015] ? __lock_acquire+0x4a5/0x2630 [ 3395.532654][T10015] insn_rw_emulate_bits+0x2a2/0x5e0 [ 3395.532679][T10015] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 3395.532702][T10015] ? rcu_read_unlock+0x17/0x60 [ 3395.532716][T10015] ? comedi_check_chanlist+0x27e/0x300 [ 3395.532739][T10015] parse_insn+0x83f/0x19f0 [ 3395.532757][T10015] ? trace_kmalloc+0x101/0x130 [ 3395.532770][T10015] ? __pfx_parse_insn+0x10/0x10 [ 3395.532787][T10015] ? __kmalloc_noprof+0x320/0x850 [ 3395.532807][T10015] do_insn_ioctl+0x152/0x4e0 [ 3395.532832][T10015] comedi_unlocked_ioctl+0xf68/0x3310 [ 3395.532852][T10015] ? tomoyo_path_number_perm+0x188/0x580 [ 3395.532869][T10015] ? futex_wait+0x125/0x380 [ 3395.532885][T10015] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 3395.532907][T10015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3395.532928][T10015] ? do_vfs_ioctl+0x226/0x13e0 [ 3395.532949][T10015] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3395.532968][T10015] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 3395.532988][T10015] ? __fget_files+0x215/0x3d0 [ 3395.533003][T10015] ? hook_file_ioctl_common+0x146/0x410 [ 3395.533026][T10015] ? selinux_file_ioctl+0x139/0x290 [ 3395.533041][T10015] ? selinux_file_ioctl+0xb4/0x290 [ 3395.533057][T10015] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 3395.533078][T10015] __x64_sys_ioctl+0x18e/0x210 [ 3395.533098][T10015] do_syscall_64+0x106/0xf80 [ 3395.533113][T10015] ? clear_bhb_loop+0x40/0x90 [ 3395.533129][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3395.533148][T10015] RIP: 0033:0x7fa6b8d9c799 [ 3395.533168][T10015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3395.533184][T10015] RSP: 002b:00007fa6b9b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3395.533200][T10015] RAX: ffffffffffffffda RBX: 00007fa6b9015fa0 RCX: 00007fa6b8d9c799 [ 3395.533211][T10015] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000005 [ 3395.533221][T10015] RBP: 00007fa6b8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3395.533231][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3395.533241][T10015] R13: 00007fa6b9016038 R14: 00007fa6b9015fa0 R15: 00007fffed841978 [ 3395.533256][T10015]