last executing test programs: 15m1.848745713s ago: executing program 1 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0xf5ffffff, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 15m1.704241775s ago: executing program 1 (id=719): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff021f0000000000000000000000000104004e200023b0"], 0x0) 15m1.690747802s ago: executing program 1 (id=720): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x6, 0x0, 0x1, 0x0, r2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000500)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x3, r1, 0xdededede}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = eventfd(0x6) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000580)={0x0, r4}) r5 = syz_open_dev$I2C(&(0x7f00000005c0), 0x9, 0x80000) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000640)={0x0, 0x6, 0x6, &(0x7f0000000600)={0x2, "d5b5faffbfa2622e2017c7cb9e1337875cb6d059df0c9964ad3db3c49ca055a4dc"}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000840)={{r4, &(0x7f0000000680)='*@:%{),@\x00', 0x101200, &(0x7f00000006c0)={@align, {0x8eb, 0xb97, 0x4e4, 0x6}}, 0x2, &(0x7f0000000700), &(0x7f0000000740)}, {[0x9, 0x8, 0x9, 0x7f]}, 0x3680000, 0xa7, &(0x7f0000000780)=""/167}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f00000008c0)=0xffffffffffffffae, 0x8) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000940)) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000bc0)={&(0x7f0000000b80)=[{0x78, 0x410, 0xe8, &(0x7f0000000980)="939f430b1fd0dd204957b343ab42e44ccb2684c67ce1dc6754215b8af54d9d470e45c765b229886d210bfd10c4c467496ae0a52b9a49144ed386a95d849d2d057aea22aaaec18ff46ff9ac1cffa2749a6d95d1ed45bfbb2b07bff97fa10ef928084b54a8b25d497c9bb9582583cf5117e678204a8e65a9c46f530ae0667d240ef983009f773eac770c8f90187c53d3b54227a2d43681fa7a0cc0bd258efd322fed9840f1025510aff46cf085829b4f376081be3925ab7057459455f1be9d305235d4973ba1d12c857bff10c03bb63a167b854bffc33b4e4433b718128d188956633f75d577277225"}, {0x6, 0x0, 0xd6, &(0x7f0000000a80)="9a63a6c3a65b03804222fdf8c1a27db457d5402058dd280065d153840c3a8ead1c445b11c20a72a2b65e5c35a03fa4b765f6cb688eae017393bf0da4fe4fd37cdb9b1150e1b65f6ebe3908db2f4f41df3d28092743573ff84401fd9a7821a1e269ba761209cf6f9c6f751e8290348d6a86e7457e5d8d35e010466cad0c5f90a70a790c3c5615006695d9476cf26d8b54b6566bdb3dc75c363bf3ff4bfcb03871d7686198fa7fede3f24d7ccd568b6b99ecd1a3feca892ac16976e407e5cb7e918ece268ba0680154f757c18897439b0adbfb84c9a3fb"}], 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)) read$msr(0xffffffffffffffff, &(0x7f0000000d00)=""/59, 0x3b) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000d40)) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@setlink={0x58, 0x13, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x638751c4bb457a23, 0x801}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xcdb3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000f00)=0x1, 0x4) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000f40), 0x400, 0x0) ioctl$RTC_PLL_SET(r10, 0x40207012, &(0x7f0000000f80)={0x7, 0xfffffff7, 0x4, 0x5, 0x1, 0x2, 0x9}) 15m1.384426535s ago: executing program 1 (id=722): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\xff$\xdcG|\xbd1\xc2\xb1\x00\xadSP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea\x1fj\xac\xa35\x86\xe5\xechC\x0fz\'\xa9\xb3\x86\r&\"\xe6\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x4178, &(0x7f0000000040)={0x0, 0x900389b, 0x1c4c1, 0xfffffffd, 0x3b2}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) chdir(0x0) umount2(0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x1000000002, 0x191b80) writev(r5, &(0x7f0000000840), 0x2f) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 15m1.272372439s ago: executing program 1 (id=723): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 15m0.819510196s ago: executing program 1 (id=727): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x406841, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000040)={0x0, 0x80, 0x1, 'queue1\x00', 0x85}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 14m59.834023968s ago: executing program 32 (id=727): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x406841, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000040)={0x0, 0x80, 0x1, 'queue1\x00', 0x85}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 14m9.551588505s ago: executing program 0 (id=926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) 14m8.105225362s ago: executing program 0 (id=927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0xffffffffffffffff, 0x5, &(0x7f0000000140)={0x80000000, 0x4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003200), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c0d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x44a2, &(0x7f0000000000)={0x0, 0xbf12, 0x4000, 0x2, 0x31d}) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000200)={0x4, 0x8, 0x3}, 0x0) pread64(r3, &(0x7f0000019180)=""/102346, 0x18fca, 0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000180)={0x6, 0x5}) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x17, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x9997) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000033c0)={0xc, @win={{0x0, 0x0, 0x4701, 0x560}, 0x1, 0x1, 0x0, 0x9, 0x0, 0x4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 14m7.874216803s ago: executing program 0 (id=928): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000fb20000000a5"]) 14m7.660370427s ago: executing program 0 (id=929): socket$netlink(0x10, 0x3, 0x5) r0 = syz_io_uring_setup(0x5ad8, &(0x7f0000000000)={0x0, 0x47f2, 0x1, 0x2, 0x29}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000340)={&(0x7f0000001000)={[{&(0x7f0000000100)="63fd72549946ad10e3a9faa3b07a4237b2907000131e33aa46ffabf91427202dfd920a440a94e0b70e8b690bd4916773b58a9fe133388f7726568907aa899652b97a3b93e301993af7f9a4", 0x4b, 0x1}, {&(0x7f0000000180)="62931b5375813d9c06fafbfc81649b5d3f4327aa1347aa92cdbf85c88c26ebbe89ee395cac71e9ab00158038444d53a71dfc567ce41f31fe1d174d0c20fc0a79c20ac5160df1605243bd448a0a284db4a597bc1fc3777c93840493eee496c360a27ce7c9031a7b7a21f530e5c9404da7332cca120edec6cd9beb60e667d1bc5ffc01afd7244d07210f7b8fa722731bff9ee90c727bc9dde7044c57a68d2536c53483c2e5172c10d03632d7d8adc19e3e0e37d6e2b2", 0xb5, 0x3}, {&(0x7f0000000240)="fd1e", 0x2, 0x2}, {&(0x7f0000000280)="56f01a86e43102a9b2f69657c3a2a4d7664b282a882b56d907b9acf22771000c2273ad130d5ae12f376f5f800c302687cd316fa519012dcfc202dd685830d70f43db84cbc181d19e578653cbab0ca85c67e71a6d44b4765e028e91c5abb6fe93bcb1a41c4fca821b006349adda212fa8d1ed97cf1a2b80feba490d566c726ae788430df4b4e1049ead2c43798810c41ce102ae5b45968863d7338da69f29042a5f8c8ccf2b7af1404aaf26e6e5db5ec292f4889255c6cccb63bd3a0788f4be", 0xbf, 0x2}]}, 0x4, 0x2}, 0x1) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) fsetxattr$security_capability(r1, 0x0, &(0x7f00000002c0)=@v1={0x1000000, [{0x38000000, 0x53f5}]}, 0xc, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, 0x0, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async, rerun: 32) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x224) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@private2, @in=@private=0xa010102, 0x4e20, 0x0, 0x4e20, 0x60d, 0xa, 0x90, 0x80, 0x4, r2, r4}, {0x7, 0x2, 0x4526ff3a, 0x10001, 0x0, 0x8, 0x7, 0x4}, {0x2, 0x3}, 0x6, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, 0xa, @in=@multicast2, 0x34ff, 0x1, 0x2, 0x26, 0x0, 0xf, 0x3}}, 0xe8) 14m6.219044392s ago: executing program 0 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2, 0xa, 0x400) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TCFLSH(r1, 0x40087101, 0x20000080000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007e0a0a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x18) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0xffffffffffffff36) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001200010300000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000026334cad815f27b43a48793013"], 0x54}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(0x0, 0x2) 14m4.904134835s ago: executing program 0 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00402fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 14m4.713236781s ago: executing program 33 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00402fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4m2.32239186s ago: executing program 6 (id=3242): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x40010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f00005d6000/0x4000)=nil, 0x4000, 0x2, 0x8031, r0, 0xc13f0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) msgget$private(0x0, 0x1c0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_pidfd_open(0x0, 0x0) process_mrelease(r3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x11, 0x80002, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x230000) 3m58.832395045s ago: executing program 6 (id=3264): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@local=@item_012={0x1, 0x2, 0x1, '_'}, @main=@item_4={0x3, 0x0, 0xa, "c9aa7bc7"}, @main=@item_4={0x3, 0x0, 0xc, "0000a3ff"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) 3m56.756091088s ago: executing program 6 (id=3274): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfffffffffffffe3c}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0xfeff}, 0x0) 3m56.402418715s ago: executing program 6 (id=3276): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000500)=0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) 3m54.27326303s ago: executing program 6 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8c0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="af82e9122c030000000400000004001a160a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5f1}}]}, &(0x7f0000000180)='GPL\x00'}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x40000, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8010, 0x101, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES32=r3, @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0, @ANYRES16=r0]) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="804b40485b37db06f10d54bdead74c8fc1a80191ec5a108db74dab0e76adfddf6af3b7a0d13bd97184b5143652465a08164da4352eecf444f362e01bf1320ecfd1ce3b697d2d5009d00a93de00b3991e77532a802ec5437dc554aea28ef3785051737e175d8ee48058e3597d1e3e2ec9019eaf2386bb1febf57788965f79fee592c95ca77ebb54ca7742459d9d14ad7757d5c437470b8be07b352fb421cce7aae03e7a1d2cc92b5cf88fce5512b2eb73b084697f443fb2640b06bbcb985bc0f1f684988e6ccd294d1afd97247029c480b7336a8a1ba1aa7d700b4bb151773cd95e9cb5167a093e4df272", 0xea) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m44.086502146s ago: executing program 6 (id=3335): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x5, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x4008}}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905ad0aff03f70709090587"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)=""/159, 0x9f) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r9], 0x27) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 3m43.807766978s ago: executing program 34 (id=3335): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x5, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x4008}}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905ad0aff03f70709090587"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)=""/159, 0x9f) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r9], 0x27) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 11.643079721s ago: executing program 7 (id=4151): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(0x0, 0x2, 0xc8d03) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="8000020041f019000a00080f393c0408"], 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x5a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto$inet_nvme_of_msg(r1, &(0x7f0000000680)={@cmd={{0x4, 0xd, 0x48, 0xa}, {@get_log_page={0x2, 0xfa, 0x9, 0x7, '\x00', @ksgl={0x1, "2bf2f1", "2e86771e", 0xe}, 0x6, 0x5, 0xfffb, 0x4, 0x0, @lpo=0x1, '\x00', 0x7}}}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r7, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005200010003000000000000001c0000f103000100"], 0x18}}, 0x0) socket(0x2, 0x80805, 0x0) 9.385659972s ago: executing program 4 (id=4156): syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.295132898s ago: executing program 4 (id=4157): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b0000000000060001"], 0x40}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003c8c799107d0491c2bd330102030109022400010303b007090431dd02dd7b9e0909050b100004000505096ddac96262058c03"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 8.896538167s ago: executing program 5 (id=4161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff0000ffffffffffffff800000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 8.850006571s ago: executing program 5 (id=4162): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000180)='\x00V', 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x400, 0x0, 'queue0\x00', 0xff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lsm_get_self_attr(0x67, &(0x7f0000000600)={0x0, 0x0, 0xc2, 0xa2, ""/162}, &(0x7f0000000440)=0xc2, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x143, @time={0x97200d, 0x74a}, 0xff, {0x1}}) socket$inet6(0xa, 0x1, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000007060500000000004000000001002002050001000700fbffffff30a41f6464400840deafff4a6ae02e2a0c0ed4a8092a87c7220d306b645376e156ad58a0e9661056e5aa3507ed140d7a346ad97711b50d8e022a05372b0ed160d5cc2f7dc41109ffd81b0ee788a63a67ad1e45803fbf716da2a9f4a34c63d6fcaef9ccb2b0c37758d0"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 7.371448531s ago: executing program 7 (id=4163): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x4200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0xfffe, 0x40, 0x0, 0x47, [0xfffffffc, 0x80]}}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f006000ff02000200000000", 0x1c) 7.352080694s ago: executing program 5 (id=4164): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) lseek(0xffffffffffffffff, 0xa904, 0x1) syz_io_uring_setup(0x66da, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0xfffffff7}, &(0x7f0000000000), &(0x7f0000000040)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x20, 0x24048844}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000002c0)={0xc74, 0x0, '\x00', {0x0, @reserved}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x2b, &(0x7f0000000280)=0x2) fallocate(0xffffffffffffffff, 0xc, 0x9, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800040000ffeb0008001b"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) 4.803784231s ago: executing program 7 (id=4166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000040050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 4.542293459s ago: executing program 4 (id=4168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="1400000010000100000000fffffff5000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000050a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xc8}}, 0x0) 4.46419179s ago: executing program 5 (id=4169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000000000000000000f2aaad6fd038c4a703296a64484cf188d90491a061bfd78aa64941ca9a4be1ebd2a24a76645cd79ba288313daa55b66ec9add3f21be458a230b2f5b7bb880de3e9d9193f0f62b908b957492da630e0", @ANYRESDEC=r4, @ANYBLOB="21000000000000000000250004000000000034800000350076657468315f746f5f68737200000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x6d) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x0, 0x5], 0x0, 0x0, 0x2, 0x1, r9}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x1c12c000) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f00000006c0)=@ethtool_rxnfc={0x30, 0xd, 0x9, {0xd, @ah_ip6_spec={@loopback, @mcast2, 0x0, 0xff}, {0x0, @multicast, 0xa, 0x8, [0x7f]}, @ether_spec={@broadcast, @broadcast, 0x3}, {0x0, @local, 0x0, 0x7, [0x3, 0x6]}, 0x7, 0xa486}}}) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) 4.456866483s ago: executing program 7 (id=4170): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.406497692s ago: executing program 4 (id=4171): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000180)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffffaf, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$TIOCGICOUNT(r1, 0x5409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.555784787s ago: executing program 7 (id=4173): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x10002e78) epoll_wait(r4, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x5a2b, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x1, 0xa0002f1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000009e00)={{{@in=@multicast1, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000009f00)=0xe8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009fc0)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000280)="16a2d710e008934891f74fd4d567235ca277b41555e89e898191eb667dbf0107e8e6475d7f74dd46ff9ae949f2fdeaefb01413446ed56ea9a76c", 0x3a}, {&(0x7f0000000480)="0e1996f75c063d2eef18ee", 0xb}, {&(0x7f00000004c0)="b751f703e52b2b56e67f", 0xa}, {&(0x7f0000000500)="8d820fa7682d8fcd0f675e340c5549892546f7f4fc606ed948331832eaf2746cc145befd009dc6749633d0e4df0069a19ac23eea874670db1b96b69106bdfc10f5e038f0bcfe1ab36195b292f181dde203affe296142612e9d7ef1e80918f4c2fc027cf6080f5cd8a4c2b218c3e3565c39d4fa9a18985d5a94ea2cae6f19cc4e2c96ed7295eb9ae5d587be456ec94f7dbb952c459bde7196c7f5eb8e5a36b66b5269796e3d17f4d9c8d5a8e72398972aaeda1cb4e3e41476ffa27b1b5a13e3e511", 0xc1}, {&(0x7f0000000600)="f657560f2b01bdf44c6814a0ba4ac571e6e9f19e50c9be6d1a3c", 0x1a}, {&(0x7f0000000680)="d513e284df4efa15bc0ce9d8da2c2ba05f3925a5a11096a81b59dd52e20e004cf666c9f3dc1cab170594982f53b50368b24e843cc94ea703e0a7c96e83cbfc384eeae8891f20a9a6955129b38624b07e19ef5df279a203ea15cc0cbe0256c32d67399f044858bbf9b34a76fc0699473f9c8f265c732ae1012b48338d3e448370ba73ac9b022d66442a334ca8d56c5a561d06b4fcb7120ce4ed536ef61536cacdf3ff7011ca07a3b78da5efea0dd17471e75928f486abb51480870410", 0xbc}, {&(0x7f0000000740)="5557d3720ae7ea388ae7c204ff83999f47e45810456ff39aa76c0734d3c85f993b117346fce17175c671e843c316624d5af5f2db0df672e1", 0x38}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="4b35f5b31ac85a38667b6bb0e5c17a0e3ecae241ed7f79e30f31af602abf293e6f46d57ed9b7cdd2dc27", 0x2a}, {&(0x7f0000000800)="39e6e52ba0f89cca3c311738be23cc1be981cddc36955418cb443dd0368e4a3d263d4cc9cb972198dce6740e", 0x2c}], 0xa, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [r6, r3, r2, r5, r1]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r3, r7, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x34, 0x1, 0x1, [r5, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r2, r7]}}], 0x100, 0x80}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="b4cc3f57a45825892424bfdedfebac4ff615c5cf595d2b24b9330d5aac3ee3f37831b4134e9f8e20a3e9a7bf1c582504b96a76636019e6cf8aa41550ca2ae116ae249fc94b3ecbef578465c293de7f9f59249a9fb99fda9c8a528838145ddd5365edfb000d379d8af226d5172edf313200d00c0354de2f3f44b2e12b39f7686230a70b26e02d9bc4781bf7a4d42a4df2796a6afba54a362de99dd842bd959948b9157731214f5dd4096d4591f8d9931e4d9c5d95835502232fc705a6d20af7d434b346135519c60a97e390a9ab36672dedbc8ef3f1d96da13b9f5b0c1cbe3caea15577c37b2a786b5bad6f574d77278666f12eaf1ff0", 0xf6}, {&(0x7f0000001e00)="bf787747ac0b181c7a9d6c2d520cfb0f497d84077d06be989363b475c83121936876d73977c8bf10a72ca8c787b2be106bb949739781606abcc5c1528b89a398ca1232503a4a57b4e99c647ce2dcf790b0f8aea9209181004ea22ae20024d24154f822d52e7051bc07c347d7044218fc6852822a16b0a964a22c0b4eb5c06a9f9822b03437d08f22dd9c965d71672babc1c79585b51989eb2c15f3415edea7a6cf", 0xa1}], 0x3, &(0x7f0000004540)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r7, r6, r5, r2, r7]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, r7, r7, r1, r6, r1, r1]}}], 0x148, 0x80}}, {{&(0x7f00000046c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004740)="c5f88c9cd53d", 0x6}, {&(0x7f0000004780)="f283c5fd784716cdf3d977661b898bd0e9258668", 0x14}, {&(0x7f00000048c0)="6b3c3183a367716363cf04efe1fc5d6c073d08fe86232a7b0e09faac1bb5fd7ed05881c7551df0aa35af986f9ad67f2dca8c70128a76b22a52020eb03513e6460eb253e7bd6d4dcfde1aa37056710cb40fe3c404cf6a3f87c61e0cc0a74ef60644", 0x61}, {&(0x7f0000004940)="b675ee19e54027c18c156c0c9d17add741988e7b76ca480a44278f21e75113faa65f5b72d2297213f8c383d1bf665e1272d12cd1e1a65e8d3b738ffc7ab2557dfd613ed4593386011471d0bcc3c58437441a8a57c1fa10dbbf31a739e9119f2ffbc1704c88aed44209ba6a5282a286f836d4e4f08be340b3fb50c0ba1812855cdcf461a839c79c16d7c05d83b94837d51e0a6f5f91fc34e34f7954dcafe7ad6f5a73bdae5cff6e645f1d1f7a426699d5b6e8ae1818af205e0742deb5c5e26ee9206884f814e09099178964a5f0f0150e25ca552e05eb010a9d93509b4dbc92350b161288673d5f23a2b8d9e3bf55c9", 0xef}], 0x4, &(0x7f0000004b40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r2, r2, r7, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x68, 0x41041}}, {{&(0x7f0000004bc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005100)=[{&(0x7f0000004c40)="2ed2b8aa5b904043fdde481cd995a940f1ffb875a76fbba771ec71be7f4208c4772e5b76ba8f602a486b48afae5df4bc997b911c5b2008c52d07310777911e80ba7ee3281f07abf909179caa594cd31081fa44bc0aeef84a1066236c1195e6c48a4a63c5ad36a4675a5951ea747d2ad2ccbe638ad167f7a54ef204914fa3095e60fd9773030e78bcc22ba2fe5ba8d3198f8a4bbb07bb4c17b24f26339ba7307bb966822e49550f", 0xa7}, {&(0x7f0000004d00)="54cd5673e533b8d7d514b27529405808f9773d9db14b6767c2d315c53d0713ed2a0a25f084ce22033d88909ca91edf22ec63e161d5883fb125388f1136e54a5cf2d32ed3de81a31eb73d09d10c361569b7c08e17bb368029729ec72d9871cc517bc26f04670ab9dc66406b27fac4072ad25a785cc58fd58f86295de8d38a1fca1179ec185bc8d6ed652d5744aa872396988d4917596bf66760bb8bdfb32520ca63c1d65042de47446a2886e22b949f005bbb31465d90bc000d1b60248da4e0ec3b60673fd37aa5151be347bb0afa617188d833f9502778da489b6ed1c03b", 0xde}, {&(0x7f0000004e00)="e23f61dc8a5e96f0d67501f8a650cde65ee93ae4a90b611ea53bb5c5c467603d3a225cfbbed911fba31b561c264c365f9854ac3f8726b502fc07293c445bc6e576b180c7b51d662f88209bd4c0d27074f778fb6869bfd176af3c303d925dce79b10f8f9aad9eb6299608841d804e894a6c3cd49b3812411930c33946c658d7739482dadbaeef0b36be60c362214aa8c399247787e67880e452e1471b30ccee5f7fd32c9cd4966192905de5492bedb034", 0xb0}, {&(0x7f0000004ec0)="3c8f0dc9d9cfa63abbca3352afb83143c5037af4876e6183ad7a0f568d6c75f870b0ffefc6b9c6252972e71c3550da874e907475b48b1bccff9151aabba270034ba9008bd573a8e55265a920373527b5e9a20af6a3bb7796ed438344764201c01b5a6d", 0x63}, {&(0x7f0000004f40)="816f0a0f42fa273232fabcdfeec86c0c9d85c52ce7d472d321e7e746219ebe324883b0757837abddc32778feebb08769f4ac772f48ec16888010e1c54d91693e00dc5eff63d0cc1ccb928af2b57ad931fb54e38cb9906921e18b49012fcc007fa6d4befdd41cdfbe516f8d720e27f38e5903924fc0cf141146cd424271c221fbfc68d74f4b55cdb31ef2998a23011180fbff273e1c30d0c0555c6c4df9cef1a4c74330a51dc1df083e0c065b464bd2aadbdd502481f4e1c67468c3ee7518bbb406d350fef5d2c691d37fb24c173f5aeeb38b2d5344429591166a5cde169dd29d5ea5ebcaa3cb96d3fe39da390e2ee2191e2f09e9fd37694f", 0xf8}, {&(0x7f0000005040)="5003c582836e9db6b8a7451ac784e00760c5960c9723160e0a6bfd2c6e8fc2b6bced0928909a4266b168473bb1a69b8cfc6205e67a3c42e421fe506ba42deaa05347861f582930ffb42ef8ce55ea5c9a3f5b3e68df3ff883aecd492fb657b03b9654d31f14e6c1184aedf7cb8c7ddd4a22122b701bd5c3fa0b3434b4346a91f7b3281023fbb79647ed15a546c6910d8360a9a04a4297d028aac0c04d46af865c585c9ab04eb13992840c96e2", 0xac}], 0x6, 0x0, 0x0, 0x40810}}, {{&(0x7f0000005180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006440)=[{0xfffffffffffffffd}, {&(0x7f0000005200)="a14f16b2faacd71c7869f49ba6b86beb085b662bcdfb923c35cebcf942a4c169beb33ef23fa92e3082a7d0d97ad72a22363ac8e702e7fd8954d9f93d3cacef9b92549626448a34e4061b17c60f34b18fc0f490074f8b4fd2bd4c89f626a04e07f5dd53", 0x63}, {&(0x7f0000005280)="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", 0x1000}, {&(0x7f0000006280)="66eea5d70fec3d908530cd811f7a9e9aa28113fa064f7366cd79951220516fe437eba85b435e5f6ccf3079028de2c6367201f8c4636398526f58bd02731a796e77b2a30201a2508aa024221e1c620b56e22f14140573393de5e17c6b129eb43428b6", 0x62}, {&(0x7f0000006300)="b4096ba8a60c22412473f46b59b92e7a0ab838d1a14fabec9e43fce6187812f5aaf89f69042914530b1e8cd474b48399455c05e54664807dc0ce317f9a6351ed959c444b367e4180c085e31e2a1ee7888688b7a7bc9a05f36596f502d39aeafbf237d3177870d448681d7aee6a", 0x6d}, {&(0x7f0000006380)="a29fa339ae4ec19b8939b7727289523e68670753855b982b2057ff7c58889a49c8e9927f68029680021de12cfd8f7ddc419a8021ccb0a23b3b2517d1d62ba661254ac360672da17b42bd806c85a98184d6fbc619e595e1809fe6b5ee129bed95dbe2c2cc9b6d746ac998655cce1a77a075d3f8865a7e36e7208068408d0d041f2bec6ff4", 0x84}], 0x6, &(0x7f0000008600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r2, r3, r7]}}], 0x88, 0x22000001}}, {{&(0x7f00000086c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000099c0)=[{&(0x7f0000008740)="3afbcca8b65bef", 0x7}, {&(0x7f0000008780)="7816c99d13f97e0b3edbd0172b811434b6e4f1e3dc9ba58e6359524d8c5ff588af58b0aad7b1a8638025a304b609be976955c5a4c60333f343bfff59c19e09557402af28bb", 0x45}, {&(0x7f0000008840)="4ebf351f9fb26a23fd553106c04a06460d80390edb99378aa2f44d3881c42658295fff407a788d410fde4ba5084ae440f668309875a8", 0x36}, {&(0x7f0000008880)="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", 0x1000}, {&(0x7f0000009880)="4a19529eb9cee6ba082d0517ba146085f2e8733c259c15e77910e6866370f8fae7bcd84722b2a8351f8310fc0e4479d4bd2951ec330928f7fbc2d34dbe35b80662087733b75997738f18b28c959634a747babe3066ac5fa66fd3a6", 0x5b}, {&(0x7f0000009900)="f75ed0d8b75ed402e648626f2a03fe3c6a89ca897b108b71e64b674924059e82f4fce9c69bfc3766b41cd1e0904996eae841416578e26ad9e2bd095940813496e5f1e78e8b3f518d4352ece7512aaa6290c349b62ebcdf2c90741bef59816696b24ece23f5e475d5ca1f20f1cce1161d842ae32d5eb56a56faa22b6abf6b55b08563aa116924e5eabbeaae0709d540e3b0615efbb3bfc58403f09fc44aff76c6ab6aeae448456bb5a59cbdba63", 0xad}], 0x6, &(0x7f0000009f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}], 0x60, 0x40010}}], 0x6, 0x44081) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)={0x0}) r12 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f00000000c0)={0x4000201a}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000001c0)={r11, 0x3, 0x9}) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002000000103512100040000102030109021f000101021004090400000101032007090506082000077ef7042501007577b16e465cf8bbc23b9db8a723bac33b82f1c01a2faa0046ca6591e8d79c3e46c44b0cc7f420cd18712862e9dc91ef97d732dca5cda3318ceca4c7011163982a47fe8d60507146c7a7bc4f6975e31e14f3ff1a8a285fb8db"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x96, &(0x7f0000000640)=ANY=[], 0x0) 3.494347606s ago: executing program 4 (id=4174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}}, 0x20}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001c00011028bd700000dcdf2507000000", @ANYRES32=r5, @ANYBLOB="400000090a000200bbbbbbbbbbbb0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @broadcast, @void, {@generic={0x4305}}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000000c0)=0xe8) r9 = geteuid() pread64(r6, &(0x7f0000000880)=""/123, 0x7b, 0x10000) setreuid(r8, r9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000001000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9ce63de803f2939a5c1a49b972faa94d8ae2c32368eac5e026df2a960c70e9f095ffbd4fd7852290585439866edaf7a3d564dfe518056c4a5676d618a34e4df43c0d50c90c5e51cbebe83cccf946ca53369eb903a3bc0b8f5fc3ed63bf59611818f676fe5b0c3dd627624cd8a9966b33ceb067aa98962099053c6d61322c498aa8dc465458b0722d739d614fcd34969cbbad9710d4", @ANYBLOB="9a07d62ced4449c13b67ebcdab136d4f22e866004c809b02d346a8e0e2ecb6c59390a754844c63e5d36af6cbec941dd620804fd8443f0aad28caeb074235528bd3e736a07f2bf7dcf350d5e075ab1bde180288ba291840e1b6a71309e726b984090ff78c91b231fce675e46bbebc3c5d1fdaee097015b6f8ff4beef1fea52a3bb1998fe216e9b0b23de2b70439fcf0", @ANYRES32=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4004895) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000029bd7000fedbdf2505001a00"], 0x38}}, 0x40408c0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.820187727s ago: executing program 5 (id=4177): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x22}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x5c}}, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) close_range(r6, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2.819927211s ago: executing program 3 (id=4178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x5, 0xe, 0x10, 0xf9, 0x6f, 0x9, 0x0, 0xff, 0x5, 0x3, 0x8, 0x10, 0x100}, {0xe, 0x0, 0x7, 0x9, 0xe, 0xf7, 0x7, 0x7, 0x4, 0x7, 0xe4, 0x3, 0x7}, {0x4, 0x8, 0x7, 0xe7, 0x5, 0x8, 0x3, 0x80, 0xd, 0x2, 0xf8, 0x5, 0x6}], 0x10001}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x4, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x5, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.814977223s ago: executing program 4 (id=4179): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f02000000"], 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000140)={r7, @in={{0x2, 0x4e22, @empty}}, [0x4, 0x0, 0xffffffffffff0000, 0x2, 0x9, 0x100000000, 0xef, 0x9, 0x8, 0x1ff, 0x10000, 0x2, 0x9, 0x7, 0x6]}, &(0x7f0000000240)=0x100) r8 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000340)={'aio_iiro_16\x00', [0x8005, 0xb, 0x0, 0x7a55f50e, 0x27, 0xcc6, 0xb, 0x7, 0x3, 0xff, 0x0, 0x0, 0x4000000a, 0x6, 0xa991, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x41000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0xb, 0x4, 0x0, 0x4fa7f95b, 0x5, 0x514b]}) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) 2.490386643s ago: executing program 2 (id=4180): add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000fe0000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) 2.368100336s ago: executing program 3 (id=4181): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0xfffffffffffffffe, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 2.367906459s ago: executing program 2 (id=4182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x121e, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) 2.32666719s ago: executing program 3 (id=4183): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.20270608s ago: executing program 2 (id=4184): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000500)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f910, 0xffffc081, '\x00', @p_u8=&(0x7f00000003c0)=0xc2}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) setresuid(0xee00, 0x0, 0xee00) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x337a4002) io_uring_enter(r5, 0x14e2, 0xc73c, 0x0, &(0x7f0000000000)={[0x8035]}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200342, 0x0) 2.088449451s ago: executing program 3 (id=4185): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100003fffffffffffff007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.727838164s ago: executing program 3 (id=4186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x400000000000000) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.582638168s ago: executing program 2 (id=4187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x5, 0xe, 0x10, 0xf9, 0x6f, 0x9, 0x0, 0xff, 0x5, 0x3, 0x8, 0x10, 0x100}, {0xe, 0x0, 0x7, 0x9, 0xe, 0xf7, 0x7, 0x7, 0x4, 0x7, 0xe4, 0x3, 0x7}, {0x4, 0x8, 0x7, 0xe7, 0x5, 0x8, 0x3, 0x80, 0xd, 0x2, 0xf8, 0x5, 0x6}], 0x10001}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x4, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x5, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.416487252s ago: executing program 3 (id=4188): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) r1 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffa, 0x80, 0x103fc, 0x3be}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000019300)=[{&(0x7f0000000240)=' ', 0x1}, {&(0x7f0000000280)="294c34df04d7ba5f776b8c9bf3a4e7fe171a116260b15d7220a681f0c378e35b5bcc7f79c969784cae41c221311f", 0x2e}], 0x2, 0x0, 0xfffffffffffffec8}, 0x20000050) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x9, 0x30, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) setuid(0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x800010, 0x0, 0x40000000, 0x376}, &(0x7f0000019380)=0x0, &(0x7f0000019340)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, 0xffffffffffffffff, 0x2000) (async, rerun: 32) socket$inet(0x2, 0x3, 0x2f) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000193c0)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 1.162953214s ago: executing program 35 (id=4188): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) r1 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffa, 0x80, 0x103fc, 0x3be}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000019300)=[{&(0x7f0000000240)=' ', 0x1}, {&(0x7f0000000280)="294c34df04d7ba5f776b8c9bf3a4e7fe171a116260b15d7220a681f0c378e35b5bcc7f79c969784cae41c221311f", 0x2e}], 0x2, 0x0, 0xfffffffffffffec8}, 0x20000050) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x9, 0x30, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) setuid(0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x800010, 0x0, 0x40000000, 0x376}, &(0x7f0000019380)=0x0, &(0x7f0000019340)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, 0xffffffffffffffff, 0x2000) (async, rerun: 32) socket$inet(0x2, 0x3, 0x2f) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000193c0)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 1.160022784s ago: executing program 5 (id=4190): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x40100001, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x4a2883, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190ec) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) r6 = gettid() syz_pidfd_open(r6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x7, {0x0, 0x0, 0x4}}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004805, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="04db5d294f7b7678358bb46e3fa02c10d76c55f3ab9f80c21f490526c1cf0a2fc94c874fce35d39f94a3da540d755bb1b16524a62a39f7af8ca6539765e039", 0x3f}, {&(0x7f0000000300)="44e7628a2e59eff0157a0ce8f85cf2ced1c055214e6941bf5f3adba7dc5f74", 0x1f}, {&(0x7f0000000600)="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", 0x1000}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x48}, 0x805) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.159161886s ago: executing program 2 (id=4191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x5, 0xe, 0x10, 0xf9, 0x6f, 0x9, 0x0, 0xff, 0x5, 0x3, 0x8, 0x10, 0x100}, {0xe, 0x0, 0x7, 0x9, 0xe, 0xf7, 0x7, 0x7, 0x4, 0x7, 0xe4, 0x3, 0x7}, {0x4, 0x8, 0x7, 0xe7, 0x5, 0x8, 0x3, 0x80, 0xd, 0x2, 0xf8, 0x5, 0x6}], 0x10001}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x4, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x5, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 171.85567ms ago: executing program 7 (id=4192): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendto$packet(r0, &(0x7f00000000c0)="36a595ee8b6ccdf9c73a13631a647f2f5ba17c9ee64584b46ef309b4dc2cab65c99eb6687eb2394a4b48846b9bb52d927851fe3c3fb06a5f6d5b1a16e07098feb7e812dc9aeee79f65abf7b58673d6371cb8bba71ab5048576924dc7f4488bf2b838a414fc59cee9b9e5287367e8ade23cee5c181c691d235b4a", 0x7a, 0x14, &(0x7f00000001c0)={0x11, 0x2, r3, 0x1, 0x6}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x27) syz_usb_connect$hid(0x6, 0x5d, 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) 0s ago: executing program 2 (id=4193): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x3, &(0x7f0000000040)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e20, @multicast2}, 0x1ce, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000080)='ip6tnl0\x00', 0x1, 0x5a, 0x3}) kernel console output (not intermixed with test programs): adm_t pid=19475 comm="syz.2.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91dd9c799 code=0x7ffc0000 [ 982.199985][T19503] IPv6: NLM_F_CREATE should be specified when creating new route [ 982.941805][ T5808] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 983.116121][ T5808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 983.151870][ T5808] usb 6-1: not running at top speed; connect to a high speed hub [ 983.161520][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 983.185685][ T5808] usb 6-1: config 3 has an invalid interface number: 49 but max is 0 [ 983.205393][ T5808] usb 6-1: config 3 has no interface number 0 [ 983.222228][ T5808] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 983.271051][ T5808] usb 6-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.295056][ T5808] usb 6-1: config 3 interface 49 has no altsetting 0 [ 983.310570][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 983.312215][ T5808] usb 6-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 983.317082][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.341031][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.369718][ T5808] usb 6-1: Product: syz [ 983.375829][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.379575][ T5808] usb 6-1: Manufacturer: syz [ 983.400690][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.411014][ T5808] usb 6-1: SerialNumber: syz [ 983.428498][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.450538][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.483217][T19509] netlink: 'syz.7.3525': attribute type 1 has an invalid length. [ 983.493997][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 983.509235][T19509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 983.536637][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 983.570841][ T24] usb 3-1: Manufacturer: syz [ 983.578115][ T24] usb 3-1: config 0 descriptor?? [ 983.820872][ T4167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 983.940583][ T24] rc_core: IR keymap rc-hauppauge not found [ 983.946691][ T24] Registered IR keymap rc-empty [ 983.956119][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 983.981441][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.081135][T19526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.093634][T19526] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.164522][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 984.183913][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input119 [ 984.233898][T19526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.337247][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.364607][ T5808] usb 6-1: USB disconnect, device number 71 [ 984.384388][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.432135][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.466103][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.497264][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.521868][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.540994][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.561824][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.605210][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.671221][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 984.790590][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 984.810946][T19532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.819755][T19532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.829572][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 984.924030][ T5860] usb 3-1: USB disconnect, device number 86 [ 984.986909][T19538] syzkaller0: entered promiscuous mode [ 984.996354][T19538] syzkaller0: entered allmulticast mode [ 985.352290][T19542] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 985.670645][ T5860] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 985.801021][ T7173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 986.093212][T19549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 986.383717][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 986.402477][ T5860] usb 6-1: not running at top speed; connect to a high speed hub [ 986.426894][ T5860] usb 6-1: config 4 has an invalid interface number: 241 but max is 0 [ 986.457136][ T5860] usb 6-1: config 4 has an invalid descriptor of length 123, skipping remainder of the config [ 986.560391][ T5860] usb 6-1: config 4 has no interface number 0 [ 986.567003][ T5860] usb 6-1: config 4 interface 241 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 986.581137][ T5860] usb 6-1: config 4 interface 241 has no altsetting 0 [ 986.590400][ T5860] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=9e.3c [ 986.617542][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.634715][ T5860] usb 6-1: Product: syz [ 986.640815][ T5860] usb 6-1: Manufacturer: syz [ 986.730985][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 987.184552][ T5860] usb 6-1: SerialNumber: syz [ 987.372429][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 987.372468][ T29] audit: type=1400 audit(1773142310.708:1607): avc: denied { bind } for pid=19555 comm="syz.7.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 987.611209][ T29] audit: type=1400 audit(1773142310.718:1608): avc: denied { name_bind } for pid=19555 comm="syz.7.3538" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 987.633423][ T29] audit: type=1400 audit(1773142310.718:1609): avc: denied { node_bind } for pid=19555 comm="syz.7.3538" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 987.686816][ T29] audit: type=1400 audit(1773142311.038:1610): avc: denied { write } for pid=19555 comm="syz.7.3538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 988.047478][ T29] audit: type=1400 audit(1773142311.428:1611): avc: denied { create } for pid=19576 comm="syz.7.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 988.115220][ T29] audit: type=1326 audit(1773142311.498:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz.7.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec359c799 code=0x7ffc0000 [ 988.164342][ T29] audit: type=1326 audit(1773142311.528:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz.7.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec359c799 code=0x7ffc0000 [ 988.188693][ T29] audit: type=1326 audit(1773142311.568:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz.7.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ec359c799 code=0x7ffc0000 [ 988.217613][ T29] audit: type=1326 audit(1773142311.598:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz.7.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec359c799 code=0x7ffc0000 [ 988.245493][T19581] input: syz0 as /devices/virtual/input/input120 [ 988.255482][ T29] audit: type=1326 audit(1773142311.598:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz.7.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec359c799 code=0x7ffc0000 [ 988.450751][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 988.611278][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 988.654203][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 988.686134][ T24] usb 4-1: string descriptor 0 read error: -22 [ 988.692609][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 988.712353][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.777194][ T24] usb 4-1: selecting invalid altsetting 1 [ 988.812533][T19587] ipt_rpfilter: unknown options [ 988.875044][ T5860] kvaser_usb 6-1:4.241: error -ENODEV: Cannot get usb endpoint(s) [ 988.898893][ T5860] usb 6-1: USB disconnect, device number 72 [ 988.916279][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 989.310739][T19590] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 989.332649][T19590] block device autoloading is deprecated and will be removed. [ 989.532637][T19602] macvlan0: entered promiscuous mode [ 989.539307][T19602] macvlan0: entered allmulticast mode [ 989.545042][T19602] veth1_vlan: entered allmulticast mode [ 989.581290][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 989.703330][T19604] fuse: Bad value for 'rootmode' [ 990.594217][T19617] lo: entered allmulticast mode [ 990.741045][T18061] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 990.750348][ T47] usb 4-1: USB disconnect, device number 83 [ 990.821491][T19625] vcan0: entered allmulticast mode [ 990.827944][T19625] pim6reg: left allmulticast mode [ 990.833430][T19625] vcan0: left allmulticast mode [ 991.231290][T18061] usb 5-1: device descriptor read/64, error -71 [ 991.427267][T19616] lo: left allmulticast mode [ 991.491752][T18061] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 991.531855][ T7173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 991.630576][T18061] usb 5-1: device descriptor read/64, error -71 [ 991.706479][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'. [ 991.724474][T19640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3561'. [ 991.765966][T18061] usb usb5-port1: attempt power cycle [ 992.202261][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 992.340573][T18061] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 992.371256][T18061] usb 5-1: device descriptor read/8, error -71 [ 992.383049][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 992.383066][ T29] audit: type=1400 audit(1773142315.768:1668): avc: denied { map } for pid=19655 comm="syz.3.3565" path="socket:[67733]" dev="sockfs" ino=67733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 992.417093][ T29] audit: type=1400 audit(1773142315.768:1669): avc: denied { accept } for pid=19655 comm="syz.3.3565" path="socket:[67733]" dev="sockfs" ino=67733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 992.498356][T19658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3566'. [ 992.616002][ T29] audit: type=1400 audit(1773142315.998:1670): avc: denied { bind } for pid=19659 comm="syz.5.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 992.641809][T18061] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 992.650581][ T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 992.681432][T18061] usb 5-1: device descriptor read/8, error -71 [ 992.786638][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.793158][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.803494][T18061] usb usb5-port1: unable to enumerate USB device [ 992.804263][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 992.834680][ T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 992.854352][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 993.220627][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 993.222378][ T29] audit: type=1400 audit(1773142316.508:1671): avc: denied { connect } for pid=19667 comm="syz.4.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 993.381997][ T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 993.557375][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 993.579920][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 993.614132][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 993.623218][ T24] usb 4-1: Product: syz [ 993.630962][ T24] usb 4-1: Manufacturer: syz [ 993.648059][ T24] usb 4-1: SerialNumber: syz [ 993.680918][ T24] usb 4-1: config 0 descriptor?? [ 993.699518][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 993.724623][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3573'. [ 993.745086][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3573'. [ 993.746044][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 993.850550][ T47] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 993.881478][T19682] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3574'. [ 993.909847][T14433] usb 4-1: USB disconnect, device number 84 [ 993.922316][T14433] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 994.002822][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.123216][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.133207][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 994.146359][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 994.155566][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.732208][ T47] usb 5-1: config 0 descriptor?? [ 995.058165][T19696] loop8: detected capacity change from 0 to 7 [ 995.070426][T19696] Dev loop8: unable to read RDB block 7 [ 995.076051][T19696] loop8: AHDI p1 p2 [ 995.080111][T19696] loop8: partition table partially beyond EOD, truncated [ 995.087985][T19696] loop8: p1 start 1702000233 is beyond EOD, truncated [ 995.424984][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 995.619786][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 995.647489][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 995.702445][ T47] usb 5-1: USB disconnect, device number 75 [ 995.809292][T19699] tipc: Started in network mode [ 995.824479][T19699] tipc: Node identity cedb15928c75, cluster identity 4711 [ 995.843138][T19699] tipc: Enabled bearer , priority 0 [ 995.872643][T19699] syzkaller0: entered promiscuous mode [ 995.880226][T19699] syzkaller0: entered allmulticast mode [ 995.902044][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3579'. [ 995.953210][ T29] audit: type=1400 audit(1773142319.222:1672): avc: denied { listen } for pid=19704 comm="syz.5.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 995.983438][T19699] tipc: Resetting bearer [ 996.012713][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3582'. [ 996.173993][T19698] tipc: Resetting bearer [ 996.298001][T19708] nbd: socks must be embedded in a SOCK_ITEM attr [ 996.456189][T19720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3583'. [ 996.648303][T19698] tipc: Disabling bearer [ 997.471008][ T4167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 997.547996][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3581'. [ 997.633157][T14433] tipc: Node number set to 1118705042 [ 997.966727][T19715] fuse: Bad value for 'fd' [ 998.007910][ T29] audit: type=1400 audit(1773142321.139:1673): avc: denied { append } for pid=19728 comm="syz.3.3585" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 998.140795][T14413] udevd[14413]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.157661][T19732] netlink: 'syz.7.3586': attribute type 4 has an invalid length. [ 998.184151][T14413] udevd[14413]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1001.553619][T19754] macvlan0: left promiscuous mode [ 1001.668504][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1001.966123][T19759] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1002.642738][T19778] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1002.752545][T19776] nft_compat: unsupported protocol 13 [ 1003.131162][ T5860] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1003.312893][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 1003.321527][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1003.354718][ T5860] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1003.358014][ T29] audit: type=1400 audit(1773142582.139:1674): avc: denied { cmd } for pid=19794 comm="syz.2.3606" path="socket:[68128]" dev="sockfs" ino=68128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1003.391897][T18061] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1003.461991][T19797] tmpfs: Unknown parameter 'nsrquota' [ 1003.970547][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1004.023617][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.068818][T18061] usb 5-1: config 0 has no interfaces? [ 1004.078193][T18061] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1004.108991][T18061] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1004.122178][T18061] usb 5-1: Product: syz [ 1004.127218][T18061] usb 5-1: Manufacturer: syz [ 1004.139034][T18061] usb 5-1: SerialNumber: syz [ 1004.157955][ T5860] usb 4-1: Product: syz [ 1004.158346][T18061] usb 5-1: config 0 descriptor?? [ 1004.162183][ T5860] usb 4-1: Manufacturer: syz [ 1004.183443][ T5860] usb 4-1: SerialNumber: syz [ 1004.246946][ T5860] usb 4-1: config 0 descriptor?? [ 1004.259462][ T5860] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 1004.299036][T19801] sp0: Synchronizing with TNC [ 1004.371728][T19803] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1004.429079][ T5860] usb 5-1: USB disconnect, device number 76 [ 1004.744341][ T792] usb 4-1: USB disconnect, device number 85 [ 1004.764079][ T29] audit: type=1400 audit(1773142583.467:1675): avc: denied { ioctl } for pid=19807 comm="syz.5.3611" path="socket:[68149]" dev="sockfs" ino=68149 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1005.418960][ T29] audit: type=1400 audit(1773142583.467:1676): avc: denied { connect } for pid=19807 comm="syz.5.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1005.860577][T19815] tipc: Started in network mode [ 1005.870965][T19815] tipc: Node identity 8a17d7182456, cluster identity 4711 [ 1005.881964][T19815] tipc: Enabled bearer , priority 0 [ 1005.921821][T19815] syzkaller0: entered promiscuous mode [ 1005.927306][T19815] syzkaller0: entered allmulticast mode [ 1005.978728][T19822] fuse: Bad value for 'rootmode' [ 1006.133061][T19815] tipc: Resetting bearer [ 1006.417133][T19835] netlink: 'syz.2.3621': attribute type 3 has an invalid length. [ 1006.655966][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3619'. [ 1006.759102][T19813] tipc: Resetting bearer [ 1006.805104][T19813] tipc: Disabling bearer [ 1006.909710][T19841] fuse: Bad value for 'rootmode' [ 1007.136299][T19849] syzkaller0: entered promiscuous mode [ 1007.143051][T19849] syzkaller0: entered allmulticast mode [ 1007.167581][T19849] tc action pedit offset must be on 32 bit boundaries [ 1007.360721][T19860] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3626'. [ 1007.841189][T19865] syzkaller0: left promiscuous mode [ 1008.679917][ T29] audit: type=1400 audit(1773142586.900:1677): avc: denied { remount } for pid=19864 comm="syz.7.3632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1009.010807][T19882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1009.610302][T19886] CUSE: info not properly terminated [ 1009.763385][ T29] audit: type=1400 audit(1773142587.985:1678): avc: denied { shutdown } for pid=19884 comm="syz.5.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1009.784544][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1010.727307][T19907] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1010.906637][T19911] netlink: 'syz.4.3642': attribute type 1 has an invalid length. [ 1011.104970][T19911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1011.112501][T19912] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 1011.121579][T19920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.163364][T19919] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3644'. [ 1011.835698][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1012.915002][ T29] audit: type=1400 audit(1773142591.072:1679): avc: denied { write } for pid=19960 comm="syz.7.3654" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1012.949834][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1012.993073][ T29] audit: type=1400 audit(1773142591.072:1680): avc: denied { open } for pid=19960 comm="syz.7.3654" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1013.277512][ T29] audit: type=1400 audit(1773142591.437:1681): avc: denied { read append } for pid=19960 comm="syz.7.3654" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1013.730806][ T29] audit: type=1400 audit(1773142591.437:1682): avc: denied { ioctl } for pid=19960 comm="syz.7.3654" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1014.260073][ T5808] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1014.399082][T19981] netlink: 'syz.2.3659': attribute type 1 has an invalid length. [ 1014.442382][ T5808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1014.458024][ T5808] usb 6-1: not running at top speed; connect to a high speed hub [ 1014.507461][ T5808] usb 6-1: config 3 has an invalid interface number: 49 but max is 0 [ 1014.515663][ T5808] usb 6-1: config 3 has no interface number 0 [ 1014.545046][ T5808] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1014.566114][ T5808] usb 6-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.695104][ T5808] usb 6-1: config 3 interface 49 has no altsetting 0 [ 1014.710136][ T5808] usb 6-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 1014.719339][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.880527][ T5808] usb 6-1: Product: syz [ 1014.884781][ T5808] usb 6-1: Manufacturer: syz [ 1014.889395][ T5808] usb 6-1: SerialNumber: syz [ 1015.772834][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1016.122439][T19987] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1016.789554][T20010] input: syz0 as /devices/virtual/input/input123 [ 1016.861273][T20010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.878384][T20010] netlink: 'syz.3.3666': attribute type 10 has an invalid length. [ 1017.074480][ T5808] usb 6-1: USB disconnect, device number 73 [ 1017.121703][T20010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.615540][T20010] bond0: (slave team0): Enslaving as an active interface with an up link [ 1017.991402][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.239140][T20030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.246270][T20030] bridge0: port 2(bridge_slave_1) entered listening state [ 1018.253642][T20030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.260772][T20030] bridge0: port 1(bridge_slave_0) entered listening state [ 1018.600728][T20030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1019.085683][T20040] IPv6: Can't replace route, no match found [ 1019.164645][T20042] sctp: [Deprecated]: syz.2.3674 (pid 20042) Use of int in max_burst socket option. [ 1019.164645][T20042] Use struct sctp_assoc_value instead [ 1019.332912][T20045] syzkaller0: entered promiscuous mode [ 1019.359819][T20045] syzkaller0: entered allmulticast mode [ 1019.396115][T20045] 0: reclassify loop, rule prio 0, protocol 800 [ 1019.427730][T20047] syzkaller0: entered promiscuous mode [ 1019.433189][T20047] syzkaller0: entered allmulticast mode [ 1019.509242][T20036] SELinux: Context ? is not valid (left unmapped). [ 1020.214815][ T5953] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1020.235671][T20055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.461001][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 1020.473601][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1020.498171][ T5953] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1020.535732][ T5953] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1020.544957][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.563536][ T5953] usb 4-1: Product: syz [ 1020.578236][ T5953] usb 4-1: Manufacturer: syz [ 1020.585240][ T5953] usb 4-1: SerialNumber: syz [ 1020.842541][ T5953] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1021.285085][ T5953] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1021.413117][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1021.615211][ T29] audit: type=1400 audit(1773142599.220:1683): avc: denied { ioctl } for pid=20072 comm="syz.5.3686" path="socket:[67551]" dev="sockfs" ino=67551 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1021.722126][ T29] audit: type=1400 audit(1773142599.313:1684): avc: denied { write } for pid=20074 comm="syz.4.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1021.846234][ T29] audit: type=1400 audit(1773142599.313:1685): avc: denied { bind } for pid=20074 comm="syz.4.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1021.909814][ T5953] usb 4-1: USB disconnect, device number 86 [ 1021.923324][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1022.028099][ T29] audit: type=1400 audit(1773142599.612:1686): avc: denied { ioctl } for pid=20081 comm="syz.4.3690" path="socket:[67564]" dev="sockfs" ino=67564 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1022.417042][ T5953] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1022.632498][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1022.749738][ T5953] usb 4-1: not running at top speed; connect to a high speed hub [ 1022.828610][ T5953] usb 4-1: config 3 has an invalid interface number: 49 but max is 0 [ 1022.838320][T20100] xt_hashlimit: size too large, truncated to 1048576 [ 1022.879616][ T5953] usb 4-1: config 3 has no interface number 0 [ 1022.900287][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3693'. [ 1022.918694][ T5953] usb 4-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1022.964414][ T5953] usb 4-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1023.000839][ T5953] usb 4-1: config 3 interface 49 has no altsetting 0 [ 1023.044549][ T5953] usb 4-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 1023.059255][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.071992][ T5953] usb 4-1: Product: syz [ 1023.077521][ T5953] usb 4-1: Manufacturer: syz [ 1023.088310][ T5953] usb 4-1: SerialNumber: syz [ 1023.678556][ T47] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1023.897849][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 1024.013488][ T5953] usb 4-1: USB disconnect, device number 87 [ 1024.381121][ T47] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1024.393108][ T47] usb 3-1: config 0 has no interface number 0 [ 1024.413811][ T47] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1024.441519][T20122] loop5: detected capacity change from 0 to 7 [ 1024.454604][ T47] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1024.495082][ T47] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1024.522749][T20122] loop5: [ 1024.531454][ T47] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1024.575454][T20122] loop5: partition table partially beyond EOD, truncated [ 1024.586059][ T47] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1024.626593][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.655400][ T47] usb 3-1: config 0 descriptor?? [ 1024.748691][ T47] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1024.844678][ T29] audit: type=1400 audit(1773142602.250:1687): avc: denied { unmount } for pid=17797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1024.867244][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1025.772928][ T29] audit: type=1400 audit(1773142603.111:1688): avc: denied { getopt } for pid=20134 comm="syz.4.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1026.415314][T14433] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1026.977112][ T47] usb 3-1: USB disconnect, device number 87 [ 1026.994782][T14433] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1027.002934][T14433] usb 5-1: not running at top speed; connect to a high speed hub [ 1027.011852][T14433] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 1027.024634][T14433] usb 5-1: config 1 has no interface number 0 [ 1027.034090][ T47] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1027.069101][T14433] usb 5-1: config 1 interface 93 has no altsetting 0 [ 1027.112010][T14433] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1027.122653][T14433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.145868][T14433] usb 5-1: Product: syz [ 1027.150065][T14433] usb 5-1: Manufacturer: syz [ 1027.199108][T14433] usb 5-1: SerialNumber: syz [ 1027.449087][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.484049][T20166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1027.568365][T20163] kvm: MWAIT instruction emulated as NOP! [ 1027.575897][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.584755][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.719819][T14433] peak_usb 5-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1027.744504][T14433] peak_usb 5-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1027.849551][T14433] peak_usb 5-1:1.93: probe with driver peak_usb failed with error -22 [ 1027.865318][T14433] usb 5-1: USB disconnect, device number 77 [ 1027.912135][ T5953] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1028.204549][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1028.219385][ T5953] usb 6-1: not running at top speed; connect to a high speed hub [ 1028.239555][ T5953] usb 6-1: config 3 has an invalid interface number: 49 but max is 0 [ 1028.248982][ T5953] usb 6-1: config 3 has no interface number 0 [ 1028.259831][ T5953] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1028.316320][ T5953] usb 6-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.347589][T20178] binder_alloc: 20177: binder_alloc_buf size 4112 failed, no address space [ 1028.357199][T20178] binder_alloc: allocated: 24 (num: 1 largest: 24), free: 4072 (num: 1 largest: 4072) [ 1028.368814][ T5953] usb 6-1: config 3 interface 49 has no altsetting 0 [ 1028.385573][ T5953] usb 6-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 1028.405960][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.418764][ T5953] usb 6-1: Product: syz [ 1028.422935][ T5953] usb 6-1: Manufacturer: syz [ 1028.455104][ T5953] usb 6-1: SerialNumber: syz [ 1028.959660][T20190] sp0: Synchronizing with TNC [ 1029.112853][T20190] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 1030.652628][ T5953] usb 6-1: USB disconnect, device number 74 [ 1030.906360][ T29] audit: type=1400 audit(1773142607.863:1689): avc: denied { read } for pid=20199 comm="syz.5.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1031.244693][ T29] audit: type=1400 audit(1773142607.966:1690): avc: denied { bind } for pid=20199 comm="syz.5.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1031.681712][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.057932][T14433] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1032.259874][T20235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.264924][T14433] usb 4-1: Using ep0 maxpacket: 8 [ 1032.304862][T14433] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1032.329400][T14433] usb 4-1: config 179 has no interface number 0 [ 1032.342302][T14433] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1032.366818][T14433] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1032.392964][T14433] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 1032.417592][ T5953] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1032.419805][T14433] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 1032.543104][T14433] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1032.583722][T14433] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1032.609587][T14433] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1032.611155][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1032.631983][ T5953] usb 6-1: not running at top speed; connect to a high speed hub [ 1032.632321][T14433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.641556][ T5953] usb 6-1: config 3 has an invalid interface number: 49 but max is 0 [ 1032.775949][ T5953] usb 6-1: config 3 has no interface number 0 [ 1032.861757][ T5953] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1032.898175][ T5953] usb 6-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.915628][ T5953] usb 6-1: config 3 interface 49 has no altsetting 0 [ 1032.924256][ T5953] usb 6-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 1032.952704][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.966274][ T5953] usb 6-1: Product: syz [ 1032.970706][ T5953] usb 6-1: Manufacturer: syz [ 1032.975364][ T5953] usb 6-1: SerialNumber: syz [ 1033.106767][T14433] usb 4-1: USB disconnect, device number 88 [ 1033.254168][ T5913] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1033.300783][T17969] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1033.419407][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 1033.441118][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1033.460529][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.469746][ T5913] usb 3-1: Product: syz [ 1033.478689][T17969] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1033.489718][ T5913] usb 3-1: Manufacturer: syz [ 1033.494492][T17969] usb 5-1: config 0 has no interface number 0 [ 1033.502757][ T5913] usb 3-1: SerialNumber: syz [ 1033.508354][T17969] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1033.526540][T20249] tmpfs: Unknown parameter 'nsrquota_block_hardlimit' [ 1033.557198][ T5913] usb 3-1: config 0 descriptor?? [ 1033.565378][T17969] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 19475, setting to 64 [ 1033.649613][T17969] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1033.669856][T17969] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1033.679672][T17969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.743301][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.792448][T17969] usb 5-1: Product: syz [ 1033.830266][T17969] usb 5-1: Manufacturer: syz [ 1033.854713][T17969] usb 5-1: SerialNumber: syz [ 1033.882907][T17969] usb 5-1: config 0 descriptor?? [ 1033.888381][ T5953] usb 6-1: USB disconnect, device number 75 [ 1033.902413][T20241] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1033.927731][T20241] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1033.969428][ T29] audit: type=1400 audit(1773142610.781:1691): avc: denied { ioctl } for pid=20251 comm="syz.5.3741" path="pid:[4026532799]" dev="nsfs" ino=4026532799 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1034.390528][T17969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1034.561889][ T5953] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1034.649083][T17969] usb 5-1: USB disconnect, device number 78 [ 1034.723568][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1034.734735][ T5953] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1034.744380][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.752461][ T5953] usb 6-1: Product: syz [ 1034.759017][ T5953] usb 6-1: Manufacturer: syz [ 1034.774213][ T5953] usb 6-1: SerialNumber: syz [ 1034.996688][T14418] udevd[14418]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1035.043084][T20265] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3742'. [ 1035.189330][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1035.310887][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1035.403439][ T5953] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 1035.437918][ T5953] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1035.476437][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1035.488936][ T5953] usb 6-1: USB disconnect, device number 76 [ 1035.778449][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1036.170150][T14433] usb 3-1: USB disconnect, device number 88 [ 1036.458003][T20281] dummy0: entered promiscuous mode [ 1036.463215][T20281] macvtap1: entered promiscuous mode [ 1036.479545][T20281] macvtap1: entered allmulticast mode [ 1036.610194][T20281] dummy0: entered allmulticast mode [ 1036.766837][T20295] netlink: 'syz.4.3750': attribute type 1 has an invalid length. [ 1037.211967][T20295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1037.591500][T20302] vlan2: entered allmulticast mode [ 1037.673108][T20302] veth0_to_bond: entered allmulticast mode [ 1037.825303][T20302] bond2: (slave vlan2): making interface the new active one [ 1037.833159][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1037.897989][T20302] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1038.112137][ T29] audit: type=1400 audit(1773142614.654:1692): avc: denied { lock } for pid=20286 comm="syz.2.3749" path="socket:[69001]" dev="sockfs" ino=69001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1038.612148][T20323] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1038.686612][ T29] audit: type=1400 audit(1773142615.196:1693): avc: denied { mount } for pid=20324 comm="syz.3.3758" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1038.837034][T20328] loop5: detected capacity change from 0 to 7 [ 1038.894229][T20328] loop5: [ 1038.913149][T20328] loop5: partition table partially beyond EOD, truncated [ 1039.111229][ T29] audit: type=1400 audit(1773142615.589:1694): avc: denied { watch } for pid=20324 comm="syz.3.3758" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1039.855750][T20336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1039.886749][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.050324][T20339] syzkaller0: entered promiscuous mode [ 1040.065030][T20339] syzkaller0: entered allmulticast mode [ 1040.128100][T20339] tc action pedit offset must be on 32 bit boundaries [ 1040.546038][T20343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1040.832645][T16410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1040.843970][T16410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1040.853857][T16410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1040.861581][T16410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1040.871047][T16410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1040.930335][T20352] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1041.025595][T20352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.033218][T20352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.404117][T20360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.525049][T20366] binder: BINDER_SET_CONTEXT_MGR already set [ 1041.531280][T20366] binder: 20363:20366 ioctl 4018620d 200000004a80 returned -16 [ 1041.909845][ T1089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.354942][ T5913] IPVS: starting estimator thread 0... [ 1042.412127][ T1089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.452673][T20381] IPVS: using max 82 ests per chain, 196800 per kthread [ 1042.505587][ T792] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1042.675950][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 1043.062351][T16410] Bluetooth: hci3: command tx timeout [ 1043.106139][ T792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1043.144466][ T792] usb 4-1: string descriptor 0 read error: -22 [ 1043.158430][ T792] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1043.173728][ T1089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.197340][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.230148][T20389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1043.256076][T20350] chnl_net:caif_netlink_parms(): no params data found [ 1043.268925][ T792] usb 4-1: selecting invalid altsetting 1 [ 1043.413025][ T1089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.550700][ T792] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1043.864503][T14413] udevd[14413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.921041][T20350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.948717][T20350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.977570][T20350] bridge_slave_0: entered allmulticast mode [ 1044.007025][T20350] bridge_slave_0: entered promiscuous mode [ 1044.030385][T20350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.041787][T20350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.081510][T20350] bridge_slave_1: entered allmulticast mode [ 1044.096815][T20350] bridge_slave_1: entered promiscuous mode [ 1044.195296][T20350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.230442][T20350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.286893][T20350] team0: Port device team_slave_0 added [ 1044.304768][T20350] team0: Port device team_slave_1 added [ 1044.763986][T20413] netlink: 'syz.2.3778': attribute type 10 has an invalid length. [ 1045.274929][T16410] Bluetooth: hci3: command tx timeout [ 1045.345601][ T5953] usb 4-1: USB disconnect, device number 89 [ 1045.528320][ T1089] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1046.051898][ T1089] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1046.188809][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.200673][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.216227][ T1089] bond0 (unregistering): Released all slaves [ 1046.225777][ T1089] bond1 (unregistering): Released all slaves [ 1046.237410][ T1089] bond2 (unregistering): (slave vlan2): Releasing active interface [ 1046.249030][ T1089] bond2 (unregistering): Released all slaves [ 1046.265504][ T1089] bond3 (unregistering): Released all slaves [ 1046.276223][T20350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.283416][T20350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.310215][T20350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.332884][T20413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.340526][T20413] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1046.406245][T20350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.414881][T20350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.454830][T20350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.718404][T20350] hsr_slave_0: entered promiscuous mode [ 1047.148627][T20438] loop8: detected capacity change from 0 to 7 [ 1047.316251][T20438] Dev loop8: unable to read RDB block 7 [ 1047.329207][T20350] hsr_slave_1: entered promiscuous mode [ 1047.361010][T20350] debugfs: 'hsr0' already exists in 'hsr' [ 1047.373101][T20438] loop8: AHDI p1 p2 [ 1047.384476][T20350] Cannot create hsr debugfs directory [ 1047.510986][T16410] Bluetooth: hci3: command tx timeout [ 1047.518941][ T1089] : left promiscuous mode [ 1048.551209][T20438] loop8: partition table partially beyond EOD, truncated [ 1048.555086][ T29] audit: type=1400 audit(1773142623.596:1695): avc: denied { read write } for pid=20443 comm="syz.3.3785" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1048.588350][T20438] loop8: p1 start 1702000233 is beyond EOD, truncated [ 1048.599089][ T5953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1048.611334][ T1089] !: left promiscuous mode [ 1048.889568][ T29] audit: type=1400 audit(1773142623.596:1696): avc: denied { open } for pid=20443 comm="syz.3.3785" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1049.080362][ T29] audit: type=1400 audit(1773142623.605:1697): avc: denied { ioctl } for pid=20443 comm="syz.3.3785" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1049.169977][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1049.207122][ T29] audit: type=1400 audit(1773142623.605:1698): avc: denied { override_creds } for pid=20443 comm="syz.3.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1049.296993][T20449] tipc: Started in network mode [ 1049.301889][T20449] tipc: Node identity 8261dab63ee7, cluster identity 4711 [ 1049.373149][T20449] tipc: Enabled bearer , priority 0 [ 1049.457881][T20452] tipc: Resetting bearer [ 1049.463979][T20456] syzkaller0: entered promiscuous mode [ 1049.471785][T20456] syzkaller0: entered allmulticast mode [ 1049.599640][T20448] tipc: Resetting bearer [ 1049.655486][T20448] tipc: Disabling bearer [ 1049.725481][T16410] Bluetooth: hci3: command tx timeout [ 1049.826779][T20472] syzkaller0: entered promiscuous mode [ 1049.832479][T20472] syzkaller0: entered allmulticast mode [ 1050.277434][ T1089] hsr_slave_0: left promiscuous mode [ 1050.284630][ T1089] hsr_slave_1: left promiscuous mode [ 1050.293986][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.301508][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.322921][ T1089] batman_adv: batadv0: Interface deactivated: vlan1 [ 1050.334416][ T1089] batman_adv: batadv0: Removing interface: vlan1 [ 1050.350234][ T1089] dummy0: left allmulticast mode [ 1050.355960][ T1089] veth1_macvtap: left promiscuous mode [ 1050.362365][ T1089] veth0_macvtap: left promiscuous mode [ 1050.368110][ T1089] veth1_vlan: left allmulticast mode [ 1050.392800][ T1089] veth1_vlan: left promiscuous mode [ 1050.399302][ T1089] veth0_vlan: left promiscuous mode [ 1050.832719][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1050.840332][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1050.879310][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 1053.132116][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3797'. [ 1053.454895][ T1089] IPVS: stop unused estimator thread 0... [ 1054.455028][ T29] audit: type=1400 audit(1773142629.910:1699): avc: denied { getopt } for pid=20543 comm="syz.2.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1054.485810][T20350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1054.514946][ T29] audit: type=1400 audit(1773142629.919:1700): avc: denied { read } for pid=20543 comm="syz.2.3801" path="socket:[69576]" dev="sockfs" ino=69576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1054.553722][T20350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1054.625901][T20350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1054.643134][T20350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1054.710548][T20548] syzkaller0: entered promiscuous mode [ 1054.716490][T20548] syzkaller0: entered allmulticast mode [ 1055.144177][T16410] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.168230][T20350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.188586][T20350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.202439][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.209662][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.246021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.253256][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.906437][ T29] audit: type=1400 audit(1773142631.266:1701): avc: denied { map } for pid=20578 comm="syz.2.3806" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1056.541814][ T29] audit: type=1400 audit(1773142631.893:1702): avc: denied { create } for pid=20592 comm="syz.7.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1056.950076][T20350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.136775][ T29] audit: type=1400 audit(1773142632.454:1703): avc: denied { write } for pid=20610 comm="syz.4.3811" path="socket:[71761]" dev="sockfs" ino=71761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1058.323100][T20350] veth0_vlan: entered promiscuous mode [ 1058.404284][T20646] binder: 20641:20646 ioctl c018620c 200000000000 returned -1 [ 1058.741871][ T5913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1058.752710][T17969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1058.767839][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1058.775717][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.833494][T20350] veth1_vlan: entered promiscuous mode [ 1058.884118][ T29] audit: type=1400 audit(1773142634.091:1704): avc: denied { append } for pid=20648 comm="syz.3.3816" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1059.119364][T20350] veth0_macvtap: entered promiscuous mode [ 1059.333640][ T792] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1059.710317][T20350] veth1_macvtap: entered promiscuous mode [ 1059.850949][ T792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1060.010794][ T792] usb 4-1: config 2 has an invalid interface number: 20 but max is 0 [ 1060.124557][ T792] usb 4-1: config 2 has no interface number 0 [ 1060.325141][ T792] usb 4-1: config 2 interface 20 has no altsetting 0 [ 1060.343542][T20350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.427156][T20660] program syz.7.3818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.777403][ T792] usb 4-1: string descriptor 0 read error: -22 [ 1060.878345][ T29] audit: type=1400 audit(1773142635.270:1705): avc: denied { mount } for pid=20656 comm="syz.7.3818" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1060.888401][ T792] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=62.fd [ 1060.901008][ T29] audit: type=1400 audit(1773142635.522:1706): avc: denied { watch_sb } for pid=20656 comm="syz.7.3818" path="/82/file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1060.911269][T20350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.120790][ T792] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1061.161778][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.594468][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.686943][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.736569][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.989323][T20650] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 1062.438186][T20652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58128 sclass=netlink_route_socket pid=20652 comm=syz.3.3816 [ 1062.472906][T20675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.500556][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.524297][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.584878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.718801][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.323630][T18061] usb 4-1: USB disconnect, device number 90 [ 1064.002772][T20697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1066.378963][T20730] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1066.768169][ T29] audit: type=1400 audit(1773142641.116:1707): avc: denied { relabelto } for pid=20722 comm="syz.5.3829" name="2" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1066.811681][ T29] audit: type=1400 audit(1773142641.116:1708): avc: denied { associate } for pid=20722 comm="syz.5.3829" name="2" dev="tmpfs" ino=24 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1066.841619][ T29] audit: type=1400 audit(1773142641.191:1709): avc: denied { add_name } for pid=20722 comm="syz.5.3829" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1066.879482][ T29] audit: type=1400 audit(1773142641.191:1710): avc: denied { create } for pid=20722 comm="syz.5.3829" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1066.978397][ T29] audit: type=1400 audit(1773142641.191:1711): avc: denied { associate } for pid=20722 comm="syz.5.3829" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1067.020031][ T29] audit: type=1400 audit(1773142641.490:1712): avc: denied { mount } for pid=20722 comm="syz.5.3829" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1067.167354][T20741] netlink: 'syz.4.3831': attribute type 4 has an invalid length. [ 1067.175534][T20741] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1067.226694][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1067.395106][ T29] audit: type=1400 audit(1773142642.042:1713): avc: denied { remove_name } for pid=20350 comm="syz-executor" name="bus" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1067.464439][T20736] tipc: Enabled bearer , priority 0 [ 1067.488484][ T29] audit: type=1400 audit(1773142642.052:1714): avc: denied { rmdir } for pid=20350 comm="syz-executor" name="bus" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1067.566579][ T29] audit: type=1400 audit(1773142642.052:1715): avc: denied { unmount } for pid=20350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1067.587257][T20741] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1067.655894][ T29] audit: type=1400 audit(1773142642.145:1716): avc: denied { rmdir } for pid=20350 comm="syz-executor" name="2" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1068.320057][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3833'. [ 1068.330303][T20736] tipc: Resetting bearer [ 1068.340533][T20718] tipc: Disabling bearer [ 1068.599406][T20757] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1068.683082][T17969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1068.728961][T20754] Bluetooth: MGMT ver 1.23 [ 1068.791423][T20754] netlink: 'syz.3.3834': attribute type 32 has an invalid length. [ 1069.247439][T17969] kernel read not supported for file /dsp1 (pid: 17969 comm: kworker/1:2) [ 1071.339779][T20792] tipc: Enabled bearer , priority 0 [ 1071.348678][T20792] syzkaller0: entered promiscuous mode [ 1071.355013][T20792] syzkaller0: entered allmulticast mode [ 1071.369922][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3844'. [ 1071.392957][T20792] tipc: Resetting bearer [ 1071.441632][T20788] tipc: Resetting bearer [ 1071.780202][T20788] tipc: Disabling bearer [ 1071.864750][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1072.912971][ T5913] tipc: Node number set to 2923550488 [ 1073.088563][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 1073.316095][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1073.316110][ T29] audit: type=1400 audit(1773142647.589:1720): avc: denied { load_policy } for pid=20818 comm="syz.2.3853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1074.254139][T20837] binder: 20836:20837 ioctl c0306201 2000000003c0 returned -14 [ 1075.073754][T20826] SELinux: failed to load policy [ 1075.080090][T20862] netlink: 'syz.4.3865': attribute type 4 has an invalid length. [ 1075.088443][T20856] ptrace attach of "./syz-executor exec"[20860] was attempted by "./syz-executor exec"[20856] [ 1075.104216][T20864] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3866'. [ 1076.117389][T20871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1076.368784][T20880] syzkaller0: entered promiscuous mode [ 1076.375379][T20880] syzkaller0: entered allmulticast mode [ 1077.324371][T14433] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1077.508289][T14433] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1077.559136][T14433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.607353][T14433] usb 6-1: config 0 descriptor?? [ 1077.651602][T14433] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1078.046725][T20899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3874'. [ 1078.600596][T20909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1078.885833][ T5913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.981438][T14433] gspca_cpia1: usb_control_msg 03, error -110 [ 1079.002725][T14433] gspca_cpia1: usb_control_msg 01, error -32 [ 1079.020065][T14433] gspca_cpia1: usb_control_msg 01, error -32 [ 1079.042722][T14433] gspca_cpia1: usb_control_msg 01, error -32 [ 1079.071413][T14433] gspca_cpia1: usb_control_msg 01, error -32 [ 1079.100839][T14433] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1079.571950][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.287652][T20921] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3882'. [ 1080.364645][T14433] usb 6-1: USB disconnect, device number 77 [ 1080.720978][T20930] syzkaller0: entered promiscuous mode [ 1080.731650][T20934] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3886'. [ 1080.767074][T20930] syzkaller0: entered allmulticast mode [ 1080.807081][T20934] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 1080.846305][T20930] tc action pedit offset must be on 32 bit boundaries [ 1081.232399][ T29] audit: type=1400 audit(1773142654.998:1721): avc: denied { bind } for pid=20943 comm="syz.5.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1081.457677][ T29] audit: type=1400 audit(1773142655.016:1722): avc: denied { listen } for pid=20943 comm="syz.5.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1082.518431][T20958] syzkaller0: entered promiscuous mode [ 1082.525006][T20958] syzkaller0: entered allmulticast mode [ 1082.990091][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.997345][ C1] bridge0: topology change detected, propagating [ 1083.003986][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.011191][ C1] bridge0: topology change detected, propagating [ 1083.086193][T18061] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1083.258941][T18061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.270578][T18061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.280695][T18061] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1083.300177][T18061] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.315541][T18061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.346870][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1083.347548][T18061] usb 3-1: config 0 descriptor?? [ 1083.481411][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1083.964648][T18061] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1084.077096][T20988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1084.152200][T18061] usb 3-1: USB disconnect, device number 89 [ 1084.207612][T20989] fido_id[20989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1085.370654][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1085.729732][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.510890][T21034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1086.660624][T21036] xt_hashlimit: size too large, truncated to 1048576 [ 1088.151193][T21051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1088.217802][ T5913] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1088.436508][ T5860] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1088.529790][ T29] audit: type=1400 audit(1773142661.798:1723): avc: denied { setopt } for pid=21052 comm="syz.7.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1088.538567][T17969] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1088.570524][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 1088.579723][ T5913] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1088.592975][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1088.624188][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1088.656189][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1088.666373][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.736670][ T5860] usb 4-1: device descriptor read/64, error -71 [ 1088.758845][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1088.769333][T17969] usb 6-1: Using ep0 maxpacket: 16 [ 1088.776349][T17969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.790708][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1088.818224][T17969] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1088.828047][ T5913] usb 5-1: Manufacturer: syz [ 1088.833001][T17969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1088.849381][ T5913] usb 5-1: config 0 descriptor?? [ 1088.886988][T17969] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1089.356168][ T5860] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1089.376971][ T5953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.512590][T17969] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1089.522303][T17969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1089.548365][T17969] usb 6-1: SerialNumber: syz [ 1089.567887][T17969] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1089.576319][ T5913] rc_core: IR keymap rc-hauppauge not found [ 1089.582202][ T5913] Registered IR keymap rc-empty [ 1089.591554][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1089.629258][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1089.651488][ T5860] usb 4-1: device descriptor read/64, error -71 [ 1089.667408][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1089.687875][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input125 [ 1089.704506][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1089.737190][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1089.768216][ T5860] usb usb4-port1: attempt power cycle [ 1089.773769][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1089.791435][T21050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.811166][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1089.811180][T21050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.951242][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1090.079436][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1090.162463][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1090.167750][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.191105][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1090.223380][ T5953] usb 6-1: USB disconnect, device number 78 [ 1090.238718][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.247126][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1090.281044][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1090.304240][ T5913] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1090.399539][ T5913] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1090.411942][ T5913] usb 5-1: USB disconnect, device number 79 [ 1090.457033][ T29] audit: type=1400 audit(1773142663.622:1724): avc: denied { read } for pid=21074 comm="syz.3.3928" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1090.516049][ T29] audit: type=1400 audit(1773142663.641:1725): avc: denied { open } for pid=21074 comm="syz.3.3928" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1090.546584][ T29] audit: type=1400 audit(1773142663.678:1726): avc: denied { ioctl } for pid=21074 comm="syz.3.3928" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1090.628880][ T29] audit: type=1400 audit(1773142663.781:1727): avc: denied { execute } for pid=21076 comm="syz.3.3929" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=73058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1090.763469][T21079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1091.624738][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1091.681561][T21111] tipc: Started in network mode [ 1091.687474][T21111] tipc: Node identity e662ecbb472, cluster identity 4711 [ 1091.701766][T21111] tipc: Enabled bearer , priority 0 [ 1091.722996][T21111] syzkaller0: entered promiscuous mode [ 1091.789756][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3940'. [ 1091.820540][T21111] syzkaller0: entered allmulticast mode [ 1091.847026][T21111] tipc: Resetting bearer [ 1091.888627][T21110] tipc: Resetting bearer [ 1091.987352][T21110] tipc: Disabling bearer [ 1092.253831][T21123] sp0: Synchronizing with TNC [ 1092.320172][T21123] macvtap1: left promiscuous mode [ 1094.036401][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1094.271933][ T29] audit: type=1400 audit(1773142667.195:1728): avc: denied { ioctl } for pid=21140 comm="syz.4.3949" path="socket:[74416]" dev="sockfs" ino=74416 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1094.446479][T21148] syzkaller0: entered promiscuous mode [ 1094.452967][T21148] syzkaller0: entered allmulticast mode [ 1094.477128][T21148] 0: reclassify loop, rule prio 0, protocol 800 [ 1094.543331][T21151] fuse: Unknown parameter '0x0000000000000003' [ 1094.572009][T14433] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1094.742444][T14433] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1094.752838][T14433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.774160][T14433] usb 4-1: Product: syz [ 1094.786173][T14433] usb 4-1: Manufacturer: syz [ 1094.790807][T14433] usb 4-1: SerialNumber: syz [ 1094.846392][T18061] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1094.937463][T21162] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1094.947032][T21162] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1095.396129][T14433] usb 4-1: USB disconnect, device number 94 [ 1095.429212][T14413] udevd[14413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.449996][T18061] usb 6-1: Using ep0 maxpacket: 16 [ 1095.458865][T18061] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1095.470865][T18061] usb 6-1: string descriptor 0 read error: -22 [ 1095.479171][T18061] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1095.501104][T18061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.559570][T18061] usb 6-1: selecting invalid altsetting 1 [ 1095.759915][T21166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.123200][T18061] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1096.225554][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1096.441687][T21178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1096.584394][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1097.081092][T21187] tipc: New replicast peer: 255.255.255.255 [ 1097.102766][T21187] tipc: Enabled bearer , priority 10 [ 1097.134144][T21187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3963'. [ 1097.157900][ T29] audit: type=1400 audit(1773142669.889:1729): avc: denied { create } for pid=21186 comm="syz.3.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1097.285168][T21192] syzkaller0: entered promiscuous mode [ 1097.288906][T18061] usb 6-1: USB disconnect, device number 79 [ 1097.290775][T21192] syzkaller0: entered allmulticast mode [ 1097.340016][T21195] 0: reclassify loop, rule prio 0, protocol 800 [ 1097.509593][T14433] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1097.799361][T14433] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1097.808613][T14433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.816595][T14433] usb 4-1: Product: syz [ 1097.884015][T14433] usb 4-1: Manufacturer: syz [ 1097.961182][T14433] usb 4-1: SerialNumber: syz [ 1098.255236][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'. [ 1098.441701][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1098.570128][T21194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.598295][T21224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.621847][ T5913] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1098.649290][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3973'. [ 1098.668244][T21194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.682584][T21224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.782477][T14433] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1098.798638][T14433] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1098.902050][ T5913] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 1098.914648][ T5913] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.977118][ T5913] usb 5-1: config 246 has no interface number 0 [ 1099.002420][ T5913] usb 5-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1099.052797][T14433] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1099.054027][ T5913] usb 5-1: config 246 interface 166 has no altsetting 0 [ 1099.070041][T14433] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1099.083034][ T29] audit: type=1400 audit(1773142671.666:1730): avc: denied { name_connect } for pid=21229 comm="syz.2.3978" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1099.102368][ T5913] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1099.162148][T14433] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1099.175846][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.186275][ T5913] usb 5-1: Product: syz [ 1099.215765][ T5913] usb 5-1: Manufacturer: syz [ 1099.223179][ T5913] usb 5-1: SerialNumber: syz [ 1099.385461][T14433] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1099.414455][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.449147][ T5860] IPVS: starting estimator thread 0... [ 1099.492172][T21242] syzkaller0: entered promiscuous mode [ 1099.498787][T21242] syzkaller0: entered allmulticast mode [ 1099.573621][T21245] IPVS: using max 53 ests per chain, 127200 per kthread [ 1099.649915][T21248] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3982'. [ 1099.723375][T21242] 0: reclassify loop, rule prio 0, protocol 800 [ 1099.835824][T21252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.958235][ T29] audit: type=1400 audit(1773142672.499:1731): avc: denied { map } for pid=21251 comm="syz.5.3983" path="socket:[75084]" dev="sockfs" ino=75084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1099.990123][T21252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.999376][ T29] audit: type=1400 audit(1773142672.518:1732): avc: denied { read accept } for pid=21251 comm="syz.5.3983" path="socket:[75084]" dev="sockfs" ino=75084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1100.386448][T21256] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1100.397647][ T5913] usb 5-1: Limiting number of CPorts to U8_MAX [ 1100.407939][ T5913] usb 5-1: Not enough endpoints found in device, aborting! [ 1100.667355][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'. [ 1100.944761][T21265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.049387][T21265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.109588][ T9] usb 4-1: USB disconnect, device number 95 [ 1101.202909][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1101.335055][T14433] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1101.501855][T21275] lo speed is unknown, defaulting to 1000 [ 1101.507712][T21275] lo speed is unknown, defaulting to 1000 [ 1101.513806][T21275] lo speed is unknown, defaulting to 1000 [ 1101.523905][T21275] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1101.539713][T21275] lo speed is unknown, defaulting to 1000 [ 1101.546908][T21275] lo speed is unknown, defaulting to 1000 [ 1101.553813][T21275] lo speed is unknown, defaulting to 1000 [ 1101.560914][T21275] lo speed is unknown, defaulting to 1000 [ 1101.567676][T21275] lo speed is unknown, defaulting to 1000 [ 1101.574161][T21275] lo speed is unknown, defaulting to 1000 [ 1101.641559][ T29] audit: type=1326 audit(1773142674.080:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.7.3987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ec359c799 code=0x0 [ 1101.703562][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1101.770846][T14433] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.791762][T14433] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1101.802180][T14433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.821765][T14433] usb 6-1: Product: syz [ 1101.839158][T14433] usb 6-1: Manufacturer: syz [ 1101.850621][T14433] usb 6-1: SerialNumber: syz [ 1101.914573][T14433] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1101.939284][T14433] dvb-usb: bulk message failed: -22 (3/0) [ 1101.968060][T14433] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1101.981764][T14433] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1101.991347][T14433] dvb_usb_umt_010 6-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1102.006612][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1102.148909][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1102.223045][T14433] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1102.415032][T14433] usb 3-1: Using ep0 maxpacket: 16 [ 1102.560820][T14433] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1102.585910][T14433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.597133][T14433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1102.606800][T14433] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1102.617958][T14433] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.624379][ T5860] usb 5-1: USB disconnect, device number 80 [ 1102.638236][T14433] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1102.648903][T14433] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1102.670678][T14433] usb 3-1: Manufacturer: syz [ 1102.694041][T14433] usb 3-1: config 0 descriptor?? [ 1103.120366][T14433] rc_core: IR keymap rc-hauppauge not found [ 1103.126301][T14433] Registered IR keymap rc-empty [ 1103.252919][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.281011][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.302885][T14433] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1103.318348][T14433] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input127 [ 1103.337042][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.378368][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.398492][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.419864][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.441200][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.462657][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.470166][ T792] usb 6-1: USB disconnect, device number 80 [ 1103.496732][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.517825][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.537435][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.569513][T14433] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1103.605989][T14433] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1103.615379][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.635524][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.643328][T14433] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1103.667487][ T5913] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1103.704924][T14433] usb 3-1: USB disconnect, device number 90 [ 1103.836864][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 1103.843824][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.855835][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1103.870835][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1103.881008][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.891464][ T5913] usb 4-1: config 0 descriptor?? [ 1103.900185][ T5913] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1104.154180][ T29] audit: type=1400 audit(1773142676.409:1734): avc: denied { getopt } for pid=21300 comm="syz.3.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1104.223539][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1104.329083][T21319] fuse: Unknown parameter 'fd0x0000000000000003' [ 1104.592046][T21325] loop2: detected capacity change from 0 to 7 [ 1104.631238][T17103] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1104.640121][T17103] loop2: partition table partially beyond EOD, truncated [ 1104.649521][T17103] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 1104.669753][T17103] loop2: p2 start 445263249 is beyond EOD, truncated [ 1104.706990][T21325] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1104.719776][T21325] loop2: partition table partially beyond EOD, truncated [ 1104.728703][T21325] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 1104.741126][T21325] loop2: p2 start 445263249 is beyond EOD, truncated [ 1104.762468][ T5177] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1104.780859][ T5177] loop2: partition table partially beyond EOD, truncated [ 1104.788269][ T5177] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 1104.826177][ T5177] loop2: p2 start 445263249 is beyond EOD, truncated [ 1105.518155][ T792] usb 4-1: USB disconnect, device number 96 [ 1105.799468][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4005'. [ 1105.828600][T14413] udevd[14413]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1105.849094][T21342] loop7: detected capacity change from 0 to 7 [ 1105.920051][T12797] Dev loop7: unable to read RDB block 7 [ 1105.935109][T14413] udevd[14413]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1105.945154][T12797] loop7: unable to read partition table [ 1105.945334][T12797] loop7: partition table beyond EOD, truncated [ 1105.973018][T14413] udevd[14413]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1106.055399][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'. [ 1106.142748][T21342] Dev loop7: unable to read RDB block 7 [ 1106.275714][T21342] loop7: unable to read partition table [ 1106.456531][T21342] loop7: partition table beyond EOD, truncated [ 1106.474276][T21342] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1106.705523][T21362] fuse: Unknown parameter 'fd0x0000000000000003' [ 1107.057736][T21368] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4014'. [ 1107.364699][ T5953] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1108.473726][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1108.488839][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1108.780843][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 1108.826968][ T5953] usb 6-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1108.864750][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1108.979754][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1109.235601][ T792] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1109.464854][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.571836][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.717528][ T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1109.794689][ T792] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1109.815331][T21389] tipc: Enabled bearer , priority 0 [ 1109.822096][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.832178][T21389] syzkaller0: entered promiscuous mode [ 1109.849509][ T792] usb 4-1: config 0 descriptor?? [ 1109.854672][T21389] syzkaller0: entered allmulticast mode [ 1109.876292][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4020'. [ 1109.902221][T21386] tipc: Resetting bearer [ 1109.925717][T14433] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1109.949550][T21386] tipc: Disabling bearer [ 1109.977586][ T5953] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1109.987490][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.001747][ T5953] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1110.010896][ T5953] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1110.021811][ T5953] usb 6-1: Manufacturer: syz [ 1110.030272][ T5953] usb 6-1: config 0 descriptor?? [ 1110.359456][T21393] fuse: Unknown parameter 'fd0x0000000000000003' [ 1110.373139][T14433] usb 5-1: Using ep0 maxpacket: 16 [ 1110.385038][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1110.400236][ T792] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1110.421050][T14433] usb 5-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1110.506243][T14433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1110.528226][ T5953] rc_core: IR keymap rc-hauppauge not found [ 1110.534725][T14433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1110.542696][ T5953] Registered IR keymap rc-empty [ 1110.560306][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1110.564718][T14433] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1110.592405][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1110.604572][T14433] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.637481][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1110.701203][T21401] netlink: 'syz.7.4024': attribute type 4 has an invalid length. [ 1110.712711][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input128 [ 1110.753279][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1110.769978][T14433] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1110.779679][T14433] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1110.791588][T14433] usb 5-1: Manufacturer: syz [ 1110.798552][T14433] usb 5-1: config 0 descriptor?? [ 1111.181115][T14433] rc_core: IR keymap rc-hauppauge not found [ 1111.187628][T14433] Registered IR keymap rc-empty [ 1111.193966][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.226507][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.230296][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.249042][T14433] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1111.264800][T14433] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input130 [ 1111.266890][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.294704][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.320171][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.320218][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.352282][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.352300][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.374062][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.395055][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.405757][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.427051][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.427401][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.448430][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.460759][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.470233][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.480519][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.608806][ T5953] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1111.685918][ T5953] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1111.712078][T21388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.755521][ T5953] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1111.767628][T21388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.787946][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1111.806213][T21418] netlink: 'syz.7.4027': attribute type 5 has an invalid length. [ 1111.854922][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.858043][ T5953] usb 6-1: USB disconnect, device number 81 [ 1111.876091][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4027'. [ 1111.886815][T14433] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1111.930121][T14433] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1111.965803][T21423] input: syz1 as /devices/virtual/input/input131 [ 1111.972614][T14433] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1112.224932][ T29] audit: type=1400 audit(1773142683.864:1735): avc: denied { ioctl } for pid=21421 comm="syz.3.4030" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1112.266591][T14433] usb 5-1: USB disconnect, device number 81 [ 1112.352878][ T29] audit: type=1400 audit(1773142683.929:1736): avc: denied { getopt } for pid=21421 comm="syz.3.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1112.380673][T21430] Invalid logical block size (2049) [ 1112.457767][T21431] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1112.481537][T21431] team0: Port device batadv1 added [ 1112.536534][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1112.546233][T21434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1112.590080][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4028'. [ 1112.612863][ T29] audit: type=1400 audit(1773142684.341:1737): avc: denied { read } for pid=21433 comm="syz.3.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1112.924399][ T792] usb 4-1: USB disconnect, device number 97 [ 1113.600051][ T29] audit: type=1326 audit(1773142685.267:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1113.637211][ T29] audit: type=1326 audit(1773142685.267:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1113.661983][ T29] audit: type=1326 audit(1773142685.267:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1113.746308][ T29] audit: type=1326 audit(1773142685.267:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1113.795526][ T29] audit: type=1326 audit(1773142685.267:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1113.908856][ T29] audit: type=1326 audit(1773142685.267:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1114.024140][ T29] audit: type=1326 audit(1773142685.267:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21458 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff39c799 code=0x7ffc0000 [ 1114.030433][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1114.059219][ T792] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1114.546602][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1114.564496][ T7173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1114.668993][ T792] usb 6-1: config 10 has an invalid interface number: 178 but max is 0 [ 1114.682635][ T792] usb 6-1: config 10 has no interface number 0 [ 1114.691575][T21475] netlink: 'syz.2.4046': attribute type 7 has an invalid length. [ 1114.719804][ T792] usb 6-1: config 10 interface 178 has no altsetting 0 [ 1114.728756][ T792] usb 6-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=4b.50 [ 1114.738783][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.739282][T21475] : entered promiscuous mode [ 1114.747157][ T792] usb 6-1: Product: syz [ 1114.747178][ T792] usb 6-1: Manufacturer: syz [ 1114.747194][ T792] usb 6-1: SerialNumber: syz [ 1114.778624][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1115.056687][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1115.083001][ T792] usb 6-1: USB disconnect, device number 82 [ 1115.582428][T21491] tipc: Enabled bearer , priority 0 [ 1115.889293][T21492] syzkaller0: entered promiscuous mode [ 1115.927337][T21492] syzkaller0: entered allmulticast mode [ 1116.024719][T21491] tipc: Resetting bearer [ 1116.146594][T21490] tipc: Resetting bearer [ 1116.607325][ T7173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.677842][T21490] tipc: Disabling bearer [ 1117.244733][T21518] autofs: Unknown parameter 'm66ۦNLñ)+e3G qѸ{ߘ&r㒡6' [ 1117.502566][T21522] netlink: 'syz.2.4057': attribute type 8 has an invalid length. [ 1117.766414][T21525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1117.783088][T21525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1118.622133][T21534] sp0: Synchronizing with TNC [ 1119.515188][ T5860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.644126][T21534] lo speed is unknown, defaulting to 1000 [ 1119.662545][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.742452][T21540] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1119.779960][T21540] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 1120.327309][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4063'. [ 1120.415203][T21555] syzkaller0: entered promiscuous mode [ 1120.535470][T21555] syzkaller0: entered allmulticast mode [ 1120.801703][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1121.086754][T21555] 0: reclassify loop, rule prio 0, protocol 800 [ 1121.437796][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4063'. [ 1122.076975][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.221433][T21579] tipc: Enabled bearer , priority 0 [ 1122.239453][T21579] syzkaller0: entered promiscuous mode [ 1122.244941][T21579] syzkaller0: entered allmulticast mode [ 1122.348192][T21575] tipc: Resetting bearer [ 1122.404928][T21575] tipc: Disabling bearer [ 1122.731808][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4072'. [ 1123.360682][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1123.366802][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1123.443730][T21600] ceph: No mds server is up or the cluster is laggy [ 1123.822966][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 1123.829019][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 1124.046300][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1124.059694][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.261800][T21615] tipc: Enabled bearer , priority 0 [ 1124.396875][T21615] tipc: Resetting bearer [ 1124.407081][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1124.850002][ T5913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1124.893521][T21611] tipc: Disabling bearer [ 1124.927034][T21619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.934193][T21619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.941631][T21619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.948697][T21619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.968632][T21619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.250725][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1125.410888][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1125.454712][T21632] netlink: 'syz.7.4081': attribute type 12 has an invalid length. [ 1125.547381][T21632] netlink: 'syz.7.4081': attribute type 29 has an invalid length. [ 1125.558331][T21632] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4081'. [ 1125.569100][T21632] netlink: 'syz.7.4081': attribute type 2 has an invalid length. [ 1125.577454][T21632] netlink: 'syz.7.4081': attribute type 3 has an invalid length. [ 1125.588231][T21632] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4081'. [ 1126.273503][T21641] netlink: 'syz.7.4085': attribute type 2 has an invalid length. [ 1126.316625][T21641] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4085'. [ 1126.950226][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.162115][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.652606][T21665] netlink: 'syz.2.4092': attribute type 1 has an invalid length. [ 1128.660528][T21665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4092'. [ 1129.236226][T21676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4096'. [ 1129.471627][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1129.526921][ T5913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.614898][T21683] syzkaller0: entered promiscuous mode [ 1129.643482][T21683] syzkaller0: entered allmulticast mode [ 1129.873434][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4102'. [ 1129.895425][T21690] syzkaller0: entered promiscuous mode [ 1129.910077][T21690] syzkaller0: entered allmulticast mode [ 1130.046025][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1130.262787][T21700] binder: 21699:21700 ioctl c0306201 2000000003c0 returned -14 [ 1130.353335][T21703] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4106'. [ 1130.520267][ T5913] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1130.644836][T21711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4108'. [ 1130.708527][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1131.581732][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1132.233280][ T5953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1132.244192][ T5913] usb 5-1: not running at top speed; connect to a high speed hub [ 1132.273866][ T5913] usb 5-1: config 3 has an invalid interface number: 49 but max is 0 [ 1132.281981][ T5913] usb 5-1: config 3 has no interface number 0 [ 1132.306530][ T5913] usb 5-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1132.325787][ T5913] usb 5-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1132.345221][ T5913] usb 5-1: config 3 interface 49 has no altsetting 0 [ 1132.423713][ T5913] usb 5-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 1132.432780][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.442076][ T5913] usb 5-1: Product: syz [ 1132.446423][ T5913] usb 5-1: Manufacturer: syz [ 1132.451111][ T5913] usb 5-1: SerialNumber: syz [ 1132.982680][ T7173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1132.990151][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1132.990165][ T29] audit: type=1400 audit(1773142703.030:1804): avc: denied { bind } for pid=21709 comm="syz.7.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1133.093060][T21726] lo speed is unknown, defaulting to 1000 [ 1133.202651][T21732] netlink: 'syz.3.4114': attribute type 10 has an invalid length. [ 1133.227672][T21732] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1133.238492][T21732] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1133.252018][T21732] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1133.277497][ T29] audit: type=1400 audit(1773142703.676:1805): avc: denied { append } for pid=21730 comm="syz.3.4114" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1133.489468][ T5913] usb 5-1: USB disconnect, device number 82 [ 1134.591067][ T7173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.593663][ T29] audit: type=1400 audit(1773142704.892:1806): avc: denied { read } for pid=21730 comm="syz.3.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1135.295010][T21757] loop8: detected capacity change from 0 to 7 [ 1135.366916][T21757] Dev loop8: unable to read RDB block 7 [ 1135.373062][T21757] loop8: AHDI p1 p2 [ 1135.379253][T21757] loop8: partition table partially beyond EOD, truncated [ 1135.389685][T21757] loop8: p1 start 1702000233 is beyond EOD, truncated [ 1135.467200][T21764] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4121'. [ 1135.481624][T21764] netlink: 'syz.4.4121': attribute type 2 has an invalid length. [ 1135.489388][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4121'. [ 1135.817621][ T29] audit: type=1400 audit(1773142705.827:1807): avc: denied { ioctl } for pid=21762 comm="syz.3.4122" path="socket:[77669]" dev="sockfs" ino=77669 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1136.068940][T21772] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4123'. [ 1136.188413][T21775] netlink: 'syz.4.4125': attribute type 1 has an invalid length. [ 1136.192140][T21776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1136.331364][T21775] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1136.398783][T21778] bond3: (slave ip6erspan0): making interface the new active one [ 1136.472551][T21778] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1136.578327][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1137.607378][ T29] audit: type=1400 audit(1773142707.726:1808): avc: denied { read } for pid=21798 comm="syz.2.4132" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1137.672109][ T29] audit: type=1400 audit(1773142707.745:1809): avc: denied { open } for pid=21798 comm="syz.2.4132" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1137.695744][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.824839][ T29] audit: type=1400 audit(1773142707.829:1810): avc: denied { ioctl } for pid=21798 comm="syz.2.4132" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1137.915349][ T29] audit: type=1400 audit(1773142707.857:1811): avc: denied { lock } for pid=21798 comm="syz.2.4132" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1138.134424][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1138.885817][ T29] audit: type=1400 audit(1773142708.905:1812): avc: denied { listen } for pid=21826 comm="syz.2.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1138.943907][T21836] kAFS: unable to lookup cell '(,c' [ 1138.993688][ T29] audit: type=1400 audit(1773142708.905:1813): avc: denied { accept } for pid=21826 comm="syz.2.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1139.094804][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1139.826627][T21845] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 1140.466022][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1140.666263][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1140.691646][T21866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4152'. [ 1140.807588][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4151'. [ 1140.847017][T21868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.893863][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1140.903147][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.911115][ T9] usb 3-1: Product: syz [ 1140.926165][ T9] usb 3-1: Manufacturer: syz [ 1140.930894][ T9] usb 3-1: SerialNumber: syz [ 1141.809129][ T29] audit: type=1400 audit(1773142711.655:1814): avc: denied { write } for pid=21855 comm="syz.2.4150" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1141.846158][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1142.156126][ T29] audit: type=1400 audit(1773142711.701:1815): avc: denied { mounton } for pid=21876 comm="syz.3.4153" path="/proc/740/task" dev="proc" ino=78994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1142.194827][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1142.226708][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1142.322415][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1142.531462][T17969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.547472][ T9] usb 3-1: USB disconnect, device number 91 [ 1142.712945][T21889] syzkaller0: entered promiscuous mode [ 1142.718549][T21889] syzkaller0: entered allmulticast mode [ 1142.727952][T21889] 0: reclassify loop, rule prio 0, protocol 800 [ 1143.062956][ T9] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1143.203755][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1143.245006][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1143.260524][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1143.277187][ T9] usb 5-1: config 3 has an invalid interface number: 49 but max is 0 [ 1143.286347][ T9] usb 5-1: config 3 has no interface number 0 [ 1143.292665][ T9] usb 5-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1143.339104][ T29] audit: type=1400 audit(1773142713.086:1816): avc: denied { write } for pid=21897 comm="syz.3.4154" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1143.441931][T21911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1143.581184][T21913] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1144.075594][ T9] usb 5-1: config 3 interface 49 altsetting 221 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1144.088853][ T9] usb 5-1: config 3 interface 49 has no altsetting 0 [ 1144.134059][ T5913] lo speed is unknown, defaulting to 1000 [ 1144.662700][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=c291, bcdDevice=33.bd [ 1144.682369][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.706957][ T9] usb 5-1: Product: syz [ 1144.711183][ T9] usb 5-1: Manufacturer: syz [ 1144.715784][ T9] usb 5-1: SerialNumber: syz [ 1144.720509][ T5923] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1144.951635][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 1145.822692][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1145.828749][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.989817][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.000812][ T5923] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1146.046649][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1147.467645][ T9] usb 5-1: USB disconnect, device number 83 [ 1147.553424][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1147.568883][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1147.606853][ T5923] usb 4-1: can't set config #1, error -71 [ 1147.638746][ T5923] usb 4-1: USB disconnect, device number 98 [ 1147.822054][T21933] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4169'. [ 1147.880100][T21937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4171'. [ 1148.005544][ T29] audit: type=1326 audit(1773142717.435:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91dd9c799 code=0x7ffc0000 [ 1148.228944][ T29] audit: type=1326 audit(1773142717.435:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91dd9c799 code=0x7ffc0000 [ 1148.256750][ T29] audit: type=1326 audit(1773142717.445:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff91dd9c799 code=0x7ffc0000 [ 1148.324333][ T29] audit: type=1326 audit(1773142717.754:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91dd9c799 code=0x7ffc0000 [ 1148.406423][ T29] audit: type=1326 audit(1773142717.754:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21930 comm="syz.2.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91dd9c799 code=0x7ffc0000 [ 1148.516779][T21933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input133 [ 1148.673711][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1148.736119][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'. [ 1148.940540][ T29] audit: type=1400 audit(1773142718.193:1822): avc: denied { create } for pid=21962 comm="syz.3.4175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1148.972151][T21960] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 1149.054479][ T29] audit: type=1400 audit(1773142718.371:1823): avc: denied { read write } for pid=21962 comm="syz.3.4175" name="file0" dev="tmpfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1149.238657][ T29] audit: type=1400 audit(1773142718.371:1824): avc: denied { open } for pid=21962 comm="syz.3.4175" path="/223/file0" dev="tmpfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1149.312275][T21966] xt_connbytes: Forcing CT accounting to be enabled [ 1149.319411][T21966] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 1149.362660][ T197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1149.502960][ T29] audit: type=1400 audit(1773142718.483:1825): avc: denied { ioctl } for pid=21962 comm="syz.3.4175" path="/223/file0" dev="tmpfs" ino=1185 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1149.604545][ T5860] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1149.723918][T21985] binder_alloc: 21984: binder_alloc_buf size 4112 failed, no address space [ 1149.734670][T21985] binder_alloc: allocated: 24 (num: 1 largest: 24), free: 4072 (num: 1 largest: 4072) [ 1149.764167][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 1149.772764][ T5860] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1149.782650][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.791665][ T5860] usb 5-1: Product: syz [ 1149.796260][ T5860] usb 5-1: Manufacturer: syz [ 1149.809541][ T5860] usb 5-1: SerialNumber: syz [ 1149.829351][ T5860] usb 5-1: config 0 descriptor?? [ 1150.083094][ T29] audit: type=1400 audit(1773142719.381:1826): avc: denied { getopt } for pid=21988 comm="syz.2.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1150.083480][ T5860] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1150.313079][T17456] overlayfs: failed lookup in lower (newroot/227, name='bus', err=-40): overlapping layers [ 1150.331519][T17456] overlayfs: failed lookup in lower (newroot/227, name='bus', err=-40): overlapping layers [ 1150.618403][T21994] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1150.943969][T21999] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1151.769286][ T5860] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1151.783687][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1151.811447][ T5860] usb 5-1: USB disconnect, device number 84 [ 1151.985504][T16402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.006551][T16402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.017753][ T197] bridge_slave_1: left allmulticast mode [ 1152.049231][T16402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.062969][ T197] bridge_slave_1: left promiscuous mode [ 1152.070565][T16402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.078444][T16402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1152.125709][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.277745][T22014] [ 1152.280113][T22014] ============================================ [ 1152.286252][T22014] WARNING: possible recursive locking detected [ 1152.292408][T22014] syzkaller #0 Tainted: G L [ 1152.298371][T22014] -------------------------------------------- [ 1152.304524][T22014] syz.7.4192/22014 is trying to acquire lock: [ 1152.310567][T22014] ffff888032dc90f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 1152.319451][T22014] [ 1152.319451][T22014] but task is already holding lock: [ 1152.326804][T22014] ffff888032dca0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1152.336465][T22014] [ 1152.336465][T22014] other info that might help us debug this: [ 1152.344591][T22014] Possible unsafe locking scenario: [ 1152.344591][T22014] [ 1152.352021][T22014] CPU0 [ 1152.355281][T22014] ---- [ 1152.358543][T22014] lock(&dev->mutex#4); [ 1152.362783][T22014] lock(&dev->mutex#4); [ 1152.367017][T22014] [ 1152.367017][T22014] *** DEADLOCK *** [ 1152.367017][T22014] [ 1152.375139][T22014] May be due to missing lock nesting notation [ 1152.375139][T22014] [ 1152.383445][T22014] 1 lock held by syz.7.4192/22014: [ 1152.388554][T22014] #0: ffff888032dca0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1152.398672][T22014] [ 1152.398672][T22014] stack backtrace: [ 1152.404546][T22014] CPU: 0 UID: 0 PID: 22014 Comm: syz.7.4192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.404571][T22014] Tainted: [L]=SOFTLOCKUP [ 1152.404577][T22014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1152.404587][T22014] Call Trace: [ 1152.404593][T22014] [ 1152.404599][T22014] dump_stack_lvl+0x100/0x190 [ 1152.404627][T22014] print_deadlock_bug.cold+0xbd/0xca [ 1152.404651][T22014] __lock_acquire+0x12bb/0x2630 [ 1152.404680][T22014] lock_acquire+0x1cf/0x380 [ 1152.404704][T22014] ? comedi_do_insn+0x2e/0x360 [ 1152.404722][T22014] ? __pfx___might_resched+0x10/0x10 [ 1152.404738][T22014] ? irqentry_exit+0x180/0x670 [ 1152.404756][T22014] __mutex_lock+0x1a2/0x1b90 [ 1152.404774][T22014] ? comedi_do_insn+0x2e/0x360 [ 1152.404790][T22014] ? comedi_do_insn+0x2e/0x360 [ 1152.404807][T22014] ? __pfx___mutex_lock+0x10/0x10 [ 1152.404823][T22014] ? lock_acquire+0x5e/0x380 [ 1152.404845][T22014] ? __pfx___might_resched+0x10/0x10 [ 1152.404861][T22014] ? __up_read+0x2c5/0x700 [ 1152.404877][T22014] ? comedi_do_insn+0x2e/0x360 [ 1152.404892][T22014] comedi_do_insn+0x2e/0x360 [ 1152.404910][T22014] comedi_dio_bitfield2+0x3c0/0x420 [ 1152.404929][T22014] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 1152.404949][T22014] ? do_insn_ioctl+0xda/0x4e0 [ 1152.404969][T22014] ? stack_trace_save+0x8e/0xc0 [ 1152.404987][T22014] ? __pfx_stack_trace_save+0x10/0x10 [ 1152.405012][T22014] bonding_dio_insn_bits+0x2b9/0x570 [ 1152.405033][T22014] ? kasan_save_track+0x14/0x30 [ 1152.405053][T22014] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 1152.405073][T22014] ? __x64_sys_ioctl+0x18e/0x210 [ 1152.405092][T22014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.405109][T22014] insn_rw_emulate_bits+0x2a2/0x5e0 [ 1152.405124][T22014] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 1152.405141][T22014] ? comedi_check_chanlist+0x27e/0x300 [ 1152.405164][T22014] parse_insn+0x83f/0x19f0 [ 1152.405182][T22014] ? trace_kmalloc+0x101/0x130 [ 1152.405206][T22014] ? __pfx_parse_insn+0x10/0x10 [ 1152.405224][T22014] ? __kmalloc_noprof+0x320/0x850 [ 1152.405245][T22014] do_insn_ioctl+0x152/0x4e0 [ 1152.405265][T22014] comedi_unlocked_ioctl+0xf68/0x3310 [ 1152.405290][T22014] ? irqentry_exit+0x180/0x670 [ 1152.405306][T22014] ? lockdep_hardirqs_on+0x78/0x100 [ 1152.405324][T22014] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1152.405348][T22014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1152.405368][T22014] ? do_vfs_ioctl+0x226/0x13e0 [ 1152.405388][T22014] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1152.405408][T22014] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1152.405430][T22014] ? __fget_files+0x215/0x3d0 [ 1152.405444][T22014] ? hook_file_ioctl_common+0x146/0x410 [ 1152.405466][T22014] ? selinux_file_ioctl+0x139/0x290 [ 1152.405482][T22014] ? selinux_file_ioctl+0xb4/0x290 [ 1152.405499][T22014] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1152.405521][T22014] __x64_sys_ioctl+0x18e/0x210 [ 1152.405542][T22014] do_syscall_64+0x106/0xf80 [ 1152.405557][T22014] ? clear_bhb_loop+0x40/0x90 [ 1152.405573][T22014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.405587][T22014] RIP: 0033:0x7f1ec359c799 [ 1152.405601][T22014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.405615][T22014] RSP: 002b:00007f1ec17ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.405628][T22014] RAX: ffffffffffffffda RBX: 00007f1ec3816180 RCX: 00007f1ec359c799 [ 1152.405638][T22014] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000006 [ 1152.405647][T22014] RBP: 00007f1ec3632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1152.405655][T22014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.405664][T22014] R13: 00007f1ec3816218 R14: 00007f1ec3816180 R15: 00007ffe7431c4f8 [ 1152.405677][T22014] [ 1152.801147][ T1089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1152.812245][ T197] bridge_slave_0: left allmulticast mode [ 1152.817866][ T197] bridge_slave_0: left promiscuous mode [ 1152.823559][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.959004][T22001] SELinux: failed to load policy SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1153.450845][ T197] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1153.730069][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.741424][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.752309][ T197] bond0 (unregistering): (slave team0): Releasing backup interface [ 1153.762794][ T197] bond0 (unregistering): Released all slaves [ 1153.769969][ T197] bond1 (unregistering): Released all slaves [ 1153.901648][ T197] tipc: Disabling bearer [ 1153.907170][ T197] tipc: Left network mode [ 1154.141566][ T197] hsr_slave_0: left promiscuous mode [ 1154.171359][ T197] hsr_slave_1: left promiscuous mode [ 1154.177126][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.193646][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.212158][ T197] dummy0: left allmulticast mode [ 1154.325464][ T197] team0 (unregistering): Port device team_slave_1 removed [ 1154.335222][ T197] team0 (unregistering): Port device team_slave_0 removed [ 1154.646273][ T197] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.686383][ T197] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.720993][ T197] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.780910][ T197] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.886206][ T197] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.943430][ T197] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.987802][ T197] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.038273][ T197] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.150719][ T197] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.221090][ T197] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.273272][ T197] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.318336][ T197] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.420277][ T197] bridge_slave_1: left allmulticast mode [ 1155.426059][ T197] bridge_slave_1: left promiscuous mode [ 1155.433876][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.442769][ T197] bridge_slave_0: left allmulticast mode [ 1155.448440][ T197] bridge_slave_0: left promiscuous mode [ 1155.454864][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.515299][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1155.648384][ T197] bridge_slave_1: left allmulticast mode [ 1155.655223][ T197] bridge_slave_1: left promiscuous mode [ 1155.660849][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.672226][ T197] bridge_slave_0: left allmulticast mode [ 1155.678075][ T197] bridge_slave_0: left promiscuous mode [ 1155.683668][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.692122][ T197] bridge_slave_1: left allmulticast mode [ 1155.697935][ T197] bridge_slave_1: left promiscuous mode [ 1155.703644][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.711791][ T197] bridge_slave_0: left allmulticast mode [ 1155.717418][ T197] bridge_slave_0: left promiscuous mode [ 1155.723212][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.925017][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.934570][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.943935][ T197] bond0 (unregistering): Released all slaves [ 1155.951156][ T197] bond1 (unregistering): Released all slaves [ 1156.024278][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.033850][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.043185][ T197] bond0 (unregistering): Released all slaves [ 1156.050639][ T197] bond1 (unregistering): Released all slaves [ 1156.062723][ T197] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 1156.145221][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.154512][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.163735][ T197] bond0 (unregistering): Released all slaves [ 1156.174831][ T197] bond1 (unregistering): Released all slaves [ 1156.183161][ T197] bond2 (unregistering): (slave vlan2): Releasing active interface [ 1156.198335][ T197] bond2 (unregistering): Released all slaves [ 1156.209297][ T197] bond3 (unregistering): Released all slaves [ 1156.322268][ T197] tipc: Left network mode [ 1156.358920][ T197] tipc: Left network mode [ 1156.371985][ T197] tipc: Left network mode [ 1156.687030][ T197] hsr_slave_0: left promiscuous mode [ 1156.693928][ T197] hsr_slave_1: left promiscuous mode [ 1156.699486][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1156.707897][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.715517][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.723008][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.732195][ T197] hsr_slave_0: left promiscuous mode [ 1156.737862][ T197] hsr_slave_1: left promiscuous mode [ 1156.743374][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1156.750834][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.758465][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.766001][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.774899][ T197] hsr_slave_0: left promiscuous mode [ 1156.781065][ T197] hsr_slave_1: left promiscuous mode [ 1156.786557][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1156.794288][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.802646][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.810109][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.821833][ T197] veth1_macvtap: left promiscuous mode [ 1156.827300][ T197] veth0_macvtap: left promiscuous mode [ 1156.832908][ T197] veth1_vlan: left promiscuous mode [ 1156.838105][ T197] veth0_vlan: left promiscuous mode [ 1156.844649][ T197] veth1_macvtap: left promiscuous mode [ 1156.850109][ T197] veth0_macvtap: left promiscuous mode [ 1156.855740][ T197] veth1_vlan: left promiscuous mode [ 1156.860945][ T197] veth0_vlan: left promiscuous mode [ 1156.866708][ T197] veth1_macvtap: left promiscuous mode [ 1156.872163][ T197] veth0_macvtap: left promiscuous mode [ 1156.877821][ T197] veth1_vlan: left allmulticast mode [ 1156.883088][ T197] veth1_vlan: left promiscuous mode [ 1156.888784][ T197] veth0_vlan: left promiscuous mode [ 1156.954327][ T197] team0 (unregistering): Port device batadv1 removed [ 1157.001996][ T197] team0 (unregistering): Port device team_slave_1 removed [ 1157.011205][ T197] team0 (unregistering): Port device team_slave_0 removed [ 1157.074410][ T197] team0 (unregistering): Port device team_slave_1 removed [ 1157.084970][ T197] team0 (unregistering): Port device team_slave_0 removed [ 1157.148353][ T197] team0 (unregistering): Port device team_slave_1 removed [ 1157.157665][ T197] team0 (unregistering): Port device team_slave_0 removed [ 1157.983820][ T197] IPVS: stop unused estimator thread 0... [ 1158.936790][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1160.903525][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration