last executing test programs: 3m5.497529207s ago: executing program 0 (id=2023): socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 2m59.151866727s ago: executing program 0 (id=2034): quotactl$Q_SYNC(0xffffffff8000011f, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r10, 0x0, 0x400c0c0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x8001, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/49, 0x31, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000001c0)) sendfile(r0, r0, 0x0, 0x200000) 2m57.556328936s ago: executing program 0 (id=2038): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000062c002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x6e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x3}}, 0x48) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0xe4}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001100)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=@RTM_NEWMDB={0x78, 0x54, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x3, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x86dd}}}]}, 0x78}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000010c0)='ns/time\x00') 2m51.30195054s ago: executing program 0 (id=2052): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(r1, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x1, 0x1e8, &(0x7f00000021c0)}) io_pgetevents(r0, 0x4, 0x1, &(0x7f00000025c0)=[{}], &(0x7f0000002600)={0x0, 0x3938700}, &(0x7f0000002680)={&(0x7f0000002640)={[0x9]}, 0x8}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x143b) 2m41.531983416s ago: executing program 0 (id=2072): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xffffffffffffffff) keyctl$unlink(0x9, r3, r5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x14, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62c0c3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = socket$rxrpc(0x21, 0x2, 0xa) listen(r9, 0x2000000) 2m40.177958728s ago: executing program 0 (id=2076): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2m23.707601149s ago: executing program 32 (id=2076): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 20.281982589s ago: executing program 5 (id=2350): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCGFLAGS1(r1, 0x5380, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000200), 0x84000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r7, 0xffffffffffffffff, 0x0) 20.281616061s ago: executing program 1 (id=2351): timer_create(0x0, &(0x7f0000000200)={0x0, 0x22, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, &(0x7f00000001c0), 0x0}, 0x20) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x4004815) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) unshare(0x40400) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002140)='/proc/asound/card1/oss_mixer\x00', 0x600000, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x35, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x1004c808) mkdirat(0xffffffffffffffff, &(0x7f0000002180)='./file0\x00', 0x8) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000002c0)=0x10, 0x1) 19.823496372s ago: executing program 2 (id=2353): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xd) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102400, 0x19000) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x0, 0xcb, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x1, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b40000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) 18.796409784s ago: executing program 3 (id=2355): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r7) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4e000}, 0x40000) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioperm(0x0, 0x25a, 0x7) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000240001002abd7000fedbdf25440000004c000e804800518038003a802c0061800400548008000800050000000800e7", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0c000d00ff03000000000000080035007f0000010800de00", @ANYRES32=0x0, @ANYBLOB="b3938376"], 0x60}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 18.764256413s ago: executing program 2 (id=2356): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffe01}]}]}]}}]}, 0xb0}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x560f, &(0x7f0000000100)={0x1, 0x1, 0x19, 0x1f, 0xbb, 0x0}) ptrace$peeksig(0x4209, r7, &(0x7f0000000180)={0x9d, 0x1}, &(0x7f00000001c0)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001240)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061) 18.474550581s ago: executing program 5 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1020) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3cbd, 0x20000) write$snddsp(r7, &(0x7f0000000180)="9ecd88ba8125691fa606cd5185ca32c00f78063c3fd8efd343ef52d21c115369fe07369092", 0x25) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005f000100000000000000000500000000000ec3"], 0x1c}}, 0x40000) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f00000003c0)={@caif=@rfm={0x25, 0x8, "aaaf11b3e8d15f310bd7d29477025148"}, {&(0x7f0000000300)=""/147, 0x93}, &(0x7f0000000200), 0x44}, 0xa0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000280)=0xfffffffd) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000300000000000a05000116070000000900020073797a3100000000331a349aeecfc270ddee3452ef2e4c14a5e7a616289bf03a0a62b0cd42723141751c77a30f042cd82ae3f5d9894c8127bf13e2f4219109530433f46db1e3da6af6ddc994faf047a8d17acc1d29dd7837e8df455644662d69784c3dd47b7d8ca270f404c6fa9c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000002) 17.358246465s ago: executing program 1 (id=2358): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {0x0}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 17.34016213s ago: executing program 3 (id=2359): r0 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d"], 0x38}}, 0x0) 17.316546216s ago: executing program 2 (id=2360): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x428702, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r3, r3, 0x0, 0x200000) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001080)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendto$packet(r6, &(0x7f0000000100)="0120336e1559dd7bcd21d29e4120a46b", 0x10, 0xd1, &(0x7f0000000140)={0x11, 0xe3, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15.004867122s ago: executing program 5 (id=2362): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000340)=0x5) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$video(0x0, 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd"], 0x1c}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000be9149001000090c000000000000000000", @ANYRES32=0x0], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 14.043811786s ago: executing program 1 (id=2365): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x20000000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x405}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000021000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003412000085000000060000009500000000000000aa0b5bf908f5cba91e3b3eadb372cda72d766c4e4c12e8957f0346bfc9967846146c8449ace2473a098e2648a5b6cd0c6a9b4979d63c2a700737a25e4aac82e9ddcfe5aefc21"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) mkdir(&(0x7f0000000200)='./file0\x00', 0xb8) 11.773123178s ago: executing program 2 (id=2366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x6) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r7, 0xffffffffffffffff, 0x0) 11.73836443s ago: executing program 3 (id=2367): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_timer\x00', r1, 0x0, 0x2}, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000300)=""/112, 0x70) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1, 0x0) io_setup(0x9, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r2, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(rmd160-generic,ecb-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getrlimit(0x5, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x20, 0x9, 0x26, "fb3aec5fbd406ae4a6f330131dddf66b3390e0746e556d629366f65a474c32a85ffb78bf69ce"}, 0x0, 0x0}) 11.26752603s ago: executing program 5 (id=2368): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="0000f6fffe7f000007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r6, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x8c, r6, 0x28, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.059869221s ago: executing program 1 (id=2371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000240)=0x1ff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) shutdown(r2, 0x2) close(r2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921"], 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="280000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="08000014dd0d10cbab8b84dc474fb900", @ANYRES32=0xee00, @ANYBLOB="0800008004000100"], 0x28}], 0x1}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES16], 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200000}, 0x0, [0x9, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10003, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x1000000000000000, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x7, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x681f0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x6, 0x3, 0x0, 0x800, 0x0, 0x8, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x7, 0x8000000080000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x7, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x71, 0x0, 0x7fffffff]}) 10.556261321s ago: executing program 2 (id=2372): r0 = timerfd_create(0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80002, 0x0) 9.582853155s ago: executing program 5 (id=2374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="0000f6fffe7f000007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r6, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x8c, r6, 0x28, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.309048379s ago: executing program 4 (id=2375): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0xfdf0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) 7.775964359s ago: executing program 4 (id=2376): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x33, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES64, @ANYRES64], 0xffffffa5) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 6.779563636s ago: executing program 4 (id=2377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff00000000000000040000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007d18c55932c625720300000085000000060000"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x2, 0xffffff80, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x3, 0x1, 0xc, 0x8}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42060200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x457}, &(0x7f0000000340)=0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0xe) 6.747730268s ago: executing program 1 (id=2378): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) socket(0xa, 0x3, 0x3a) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) 6.675786852s ago: executing program 3 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000020605000000000000000000ebffffff030007800500010006000000050001000700000005000400000000000500010007000000100003006269746d61703a706f7274"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4080) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000000c0)='./bus\x00') pread64(0xffffffffffffffff, &(0x7f0000000080)=""/75, 0x8e, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 3.242427348s ago: executing program 4 (id=2380): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/uevent_helper', 0x7a9095e4ff480c4f, 0xba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000240), 0x0, &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r1, 0x0, 0x0, 0x200401) fallocate(r1, 0x0, 0x0, 0x200401) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{0x0}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r5, 0x6f58, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 3.178213965s ago: executing program 3 (id=2381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="380102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400010408020200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000400001002400010071756575655f696400"/222, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000f", @ANYRES32=r2, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setgroups(0x4000000000000190, &(0x7f0000000080)) 3.029978142s ago: executing program 3 (id=2382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000"], 0x24}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x5402, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x624182) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000001c0)="cf51b978a5b162b00f0f78dbe865536edc75e223c0b92df1d1e51e515cbcbb4775ba", 0x22}, {0x0}], 0x2) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.378645207s ago: executing program 2 (id=2383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) socket$netlink(0x10, 0x3, 0x12) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x6, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x163) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e10508041125010203010902"], 0x0) 2.211966829s ago: executing program 4 (id=2384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd}) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 731.162664ms ago: executing program 4 (id=2385): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf4, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb283acaa2a6a5bf5afdd0619ce173f1db717"}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 299.89054ms ago: executing program 1 (id=2386): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x7ef) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x1, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x82, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x26a9, &(0x7f00000004c0)={0x0, 0x1cb5, 0x2, 0x3, 0x7e}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 5 (id=2387): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x288200, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x400003, 0x800004, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r4, 0x0, 0x2fff, 0x1, &(0x7f0000000380)="9b", 0x5}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="9f0f4da5211a224c76c1483629bf0ac7f07815ab2a37a6b75cb6d7fd24d6e9d20371e58ed5382e54dac92a28aa243cd832b4fd2de800f006cb5da35009d2e199e7753214b602c07ad76b7f6626dd658db4d4cc8fbb75c95eeb99c39fd81727e80ef4", 0x62, 0x4000000, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x4) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000) kernel console output (not intermixed with test programs): adm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.665643][ T876] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 474.087975][T10189] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 474.108744][ T876] usb 4-1: Using ep0 maxpacket: 8 [ 474.115600][ T876] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 474.165156][ T876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.333188][T10189] usb 5-1: Using ep0 maxpacket: 32 [ 474.554315][T10189] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 475.070191][T10189] usb 5-1: config 0 has no interface number 0 [ 475.076784][ T876] usb 4-1: config 0 descriptor?? [ 475.087200][T10189] usb 5-1: config 0 interface 184 has no altsetting 0 [ 475.098353][T10189] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 475.107446][T10189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.115461][T10189] usb 5-1: Product: syz [ 475.119598][T10189] usb 5-1: Manufacturer: syz [ 475.124166][T10189] usb 5-1: SerialNumber: syz [ 475.231921][T10189] usb 5-1: config 0 descriptor?? [ 475.238187][T10189] smsc75xx v1.0.0 [ 475.680894][ T1608] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 475.892521][ T1608] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 475.894771][T11634] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1556'. [ 475.914965][ T1608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.923390][ T1608] usb 1-1: Product: syz [ 475.928954][ T1608] usb 1-1: Manufacturer: syz [ 475.933949][ T1608] usb 1-1: SerialNumber: syz [ 475.934067][T10189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 475.967495][T10189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 476.004831][ T30] audit: type=1400 audit(1759325379.330:521): avc: denied { setattr } for pid=11637 comm="syz.1.1558" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 476.018508][T11638] 9pnet: bogus RWRITE count (2 > 1) [ 476.090209][T11640] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 476.090209][T11640] program syz.2.1557 not setting count and/or reply_len properly [ 476.249442][T11644] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 476.249442][T11644] program syz.1.1559 not setting count and/or reply_len properly [ 477.138741][T11651] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 477.170080][T11651] bond14: entered promiscuous mode [ 477.175625][T11651] 8021q: adding VLAN 0 to HW filter on device bond14 [ 477.197901][T10189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 477.210990][T10189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 477.218048][T11651] 8021q: adding VLAN 0 to HW filter on device bond14 [ 477.220915][T10189] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 477.221352][T10189] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 477.224347][T10189] usb 5-1: USB disconnect, device number 37 [ 477.252913][T11651] bond14: (slave vcan5): The slave device specified does not support setting the MAC address [ 477.282137][T11651] bond14: (slave vcan5): Error -95 calling set_mac_address [ 477.561319][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 477.697963][ T876] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 477.714691][ T876] asix 4-1:0.0: probe with driver asix failed with error -71 [ 477.744409][ T876] usb 4-1: USB disconnect, device number 28 [ 477.747625][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 478.187508][T11662] syzkaller0: entered promiscuous mode [ 478.193221][T11662] syzkaller0: entered allmulticast mode [ 478.348608][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 478.363206][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 478.372931][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 478.391867][ T1608] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 478.406754][ T1608] usb 1-1: USB disconnect, device number 27 [ 478.534272][ T876] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 478.792769][ T876] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 478.852528][ T876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.884745][ T876] usb 3-1: Product: syz [ 479.052631][ T876] usb 3-1: Manufacturer: syz [ 479.057253][ T876] usb 3-1: SerialNumber: syz [ 479.066195][ T876] usb 3-1: config 0 descriptor?? [ 479.300639][ T876] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.573776][ T1608] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 479.769339][ T1608] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 479.779196][ T1608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.788179][ T1608] usb 1-1: Product: syz [ 479.792358][ T1608] usb 1-1: Manufacturer: syz [ 479.797520][ T1608] usb 1-1: SerialNumber: syz [ 479.921425][T11678] binder_alloc: 11677: pid 11677 spamming oneway? 1 buffers allocated for a total size of 4096 [ 479.993706][T11682] input: syz1 as /devices/virtual/input/input45 [ 480.003248][T11682] input: failed to attach handler leds to device input45, error: -6 [ 480.159783][ T5819] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 480.322746][ T5819] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 480.331870][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.341909][ T5819] usb 5-1: config 0 descriptor?? [ 480.970913][ T876] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 481.002778][ T876] usb 3-1: USB disconnect, device number 17 [ 481.029471][ T30] audit: type=1400 audit(1759325384.016:522): avc: denied { mount } for pid=11689 comm="syz.3.1574" name="/" dev="ramfs" ino=33728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 481.069021][ T30] audit: type=1400 audit(1759325384.026:523): avc: denied { watch watch_reads } for pid=11689 comm="syz.3.1574" path="/" dev="ramfs" ino=33728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 481.536104][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 481.989375][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 482.034173][ T5819] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 482.045904][ T5819] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 482.121148][ T5819] asix 5-1:0.0: probe with driver asix failed with error -71 [ 482.171249][ T5819] usb 5-1: USB disconnect, device number 38 [ 482.228670][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 482.311414][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 482.410754][ T1608] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 482.429853][ T1608] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 482.445267][ T1608] usb 1-1: USB disconnect, device number 28 [ 483.695802][T11725] SELinux: failed to load policy [ 483.816859][T11733] input: syz1 as /devices/virtual/input/input46 [ 485.739512][T11752] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 485.828038][T11752] bond7: entered promiscuous mode [ 485.833292][T11752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 486.789341][T11755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 486.798338][T11755] bond7: (slave vcan3): The slave device specified does not support setting the MAC address [ 486.808493][T11755] bond7: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 486.841475][T11755] bond7: (slave vcan3): making interface the new active one [ 486.848874][T11755] vcan3: entered promiscuous mode [ 486.863434][T11755] bond7: (slave vcan3): Enslaving as an active interface with an up link [ 487.091114][ T30] audit: type=1400 audit(1759325389.676:524): avc: denied { listen } for pid=11756 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 487.316717][T11769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.384130][ T30] audit: type=1400 audit(1759325389.676:525): avc: denied { accept } for pid=11756 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 488.487611][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.522576][T11812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 489.529174][T11812] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 489.536814][T11812] vhci_hcd vhci_hcd.0: Device attached [ 490.469715][T11821] vhci_hcd: connection closed [ 490.469915][ T2952] vhci_hcd: stop threads [ 490.478898][ T2952] vhci_hcd: release socket [ 490.483453][ T2952] vhci_hcd: disconnect device [ 490.572959][ T876] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 490.605520][ T876] usb 33-1: enqueue for inactive port 0 [ 490.728836][ T876] vhci_hcd: vhci_device speed not set [ 492.498133][T11853] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 497.164699][T11886] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 497.171303][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 497.279162][T11886] vhci_hcd vhci_hcd.0: Device attached [ 497.435605][T11898] vhci_hcd: connection closed [ 497.459928][ T13] vhci_hcd: stop threads [ 497.484752][ T5901] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 497.494660][ T13] vhci_hcd: release socket [ 497.505134][ T30] audit: type=1326 audit(1759325399.441:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 497.541644][ T13] vhci_hcd: disconnect device [ 497.578538][ T30] audit: type=1326 audit(1759325399.469:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 497.630935][ T30] audit: type=1326 audit(1759325399.469:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 497.825604][T11909] pimreg: entered allmulticast mode [ 497.896321][ T30] audit: type=1326 audit(1759325399.469:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 497.919816][ T30] audit: type=1326 audit(1759325399.479:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 497.943445][ T30] audit: type=1326 audit(1759325399.507:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 498.212094][ T30] audit: type=1326 audit(1759325399.507:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 498.254103][ T30] audit: type=1326 audit(1759325399.507:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 498.282228][ T30] audit: type=1326 audit(1759325399.507:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 498.307831][ T30] audit: type=1326 audit(1759325399.507:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 498.385849][T11908] pimreg: left allmulticast mode [ 500.882436][T11942] Can't find a SQUASHFS superblock on nullb0 [ 501.696250][T11950] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 501.913479][T11950] bond15: entered promiscuous mode [ 501.919764][T11950] 8021q: adding VLAN 0 to HW filter on device bond15 [ 501.983298][T11958] 8021q: adding VLAN 0 to HW filter on device bond15 [ 502.258808][T11958] bond15: (slave vcan5): The slave device specified does not support setting the MAC address [ 502.281930][T11958] bond15: (slave vcan5): Setting fail_over_mac to active for active-backup mode [ 502.282032][T11959] overlayfs: failed lookup in lower (newroot/321, name='bus', err=-40): overlapping layers [ 502.308010][T11965] binder: BINDER_SET_CONTEXT_MGR already set [ 502.314137][T11965] binder: 11962:11965 ioctl 4018620d 2000000002c0 returned -16 [ 502.345272][T11958] bond15: (slave vcan5): making interface the new active one [ 502.354535][T11958] vcan5: entered promiscuous mode [ 502.394043][T11958] bond15: (slave vcan5): Enslaving as an active interface with an up link [ 503.016179][ T5901] vhci_hcd: vhci_device speed not set [ 507.137049][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 507.196445][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 507.209592][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 507.297572][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 507.327185][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 507.348625][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 507.419584][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 507.429882][T12021] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 507.495339][T12021] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 507.645162][ T1608] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 507.861325][ T1608] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.871495][ T1608] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.881354][ T1608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.902598][ T1608] usb 1-1: config 0 descriptor?? [ 507.910420][ T1608] pwc: Askey VC010 type 2 USB webcam detected. [ 508.325918][T12058] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 508.358786][ T1608] pwc: recv_control_msg error -32 req 02 val 2b00 [ 508.433700][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 508.448395][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 508.485279][ T1608] pwc: recv_control_msg error -32 req 02 val 2700 [ 508.501496][ T1608] pwc: recv_control_msg error -32 req 02 val 2c00 [ 508.510304][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 508.534882][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 508.543847][ T1608] pwc: recv_control_msg error -32 req 04 val 1000 [ 508.554356][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 508.557456][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1660'. [ 508.586023][ T1608] pwc: recv_control_msg error -32 req 04 val 1300 [ 508.595389][ T1608] pwc: recv_control_msg error -32 req 04 val 1400 [ 508.609341][ T1608] pwc: recv_control_msg error -32 req 02 val 2000 [ 508.616105][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 508.616282][ T1608] pwc: recv_control_msg error -32 req 02 val 2100 [ 508.638273][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 508.648433][ T1608] pwc: recv_control_msg error -32 req 04 val 1500 [ 508.655828][T12056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 508.668636][T12058] bond8: (slave geneve2): making interface the new active one [ 508.678527][T12056] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 508.704798][T12058] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 508.746607][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 508.755914][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 508.846944][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 508.868831][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 508.997865][ T1608] pwc: recv_control_msg error -71 req 02 val 2400 [ 509.006103][ T1608] pwc: recv_control_msg error -71 req 02 val 2600 [ 509.041061][ T1608] pwc: recv_control_msg error -71 req 02 val 2900 [ 509.167375][ T1608] pwc: recv_control_msg error -71 req 02 val 2800 [ 509.183287][ T1608] pwc: recv_control_msg error -71 req 04 val 1100 [ 509.195505][ T1608] pwc: recv_control_msg error -71 req 04 val 1200 [ 509.257364][ T1608] pwc: Registered as video103. [ 509.674792][ T1608] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 509.713539][ T1608] usb 1-1: USB disconnect, device number 29 [ 510.969809][T12091] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 510.969809][T12091] program syz.4.1667 not setting count and/or reply_len properly [ 512.242169][ T876] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 512.434686][ T876] usb 3-1: device descriptor read/64, error -71 [ 512.539421][ T5901] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 512.691116][ T876] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 513.068684][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 513.097128][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 513.107077][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 513.118932][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 513.128691][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 513.137776][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.148042][ T5901] usb 1-1: config 0 descriptor?? [ 513.300563][ T876] usb 3-1: device descriptor read/64, error -71 [ 513.392019][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.416146][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.426903][T12120] tipc: Started in network mode [ 513.434350][ T5901] hdpvr 1-1:0.0: firmware version 0xd dated [ 513.508371][ T876] usb usb3-port1: attempt power cycle [ 513.602265][T12120] tipc: Node identity e2147bcf04d1, cluster identity 4711 [ 513.656271][T12120] tipc: Enabled bearer , priority 0 [ 513.663128][T12121] syzkaller0: entered promiscuous mode [ 513.668849][T12121] syzkaller0: entered allmulticast mode [ 513.683551][T12120] tipc: Resetting bearer [ 513.708403][T12119] tipc: Resetting bearer [ 513.750074][T12119] tipc: Disabling bearer [ 513.979320][ T1608] libceph: connect (1)[c::]:6789 error -101 [ 514.010910][ T1608] libceph: mon0 (1)[c::]:6789 connect error [ 514.042107][ T876] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 514.054911][ T1608] libceph: connect (1)[c::]:6789 error -101 [ 514.112486][ T1608] libceph: mon0 (1)[c::]:6789 connect error [ 514.163517][ T5901] hdpvr 1-1:0.0: Could not setup controls [ 514.170502][ T5901] hdpvr 1-1:0.0: registering videodev failed [ 514.182745][ T5901] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 514.193940][ T5901] usb 1-1: USB disconnect, device number 30 [ 514.206858][T12124] ceph: No mds server is up or the cluster is laggy [ 514.473266][ T876] usb 3-1: device descriptor read/8, error -71 [ 514.841724][T12140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.520596][T12149] netfs: Couldn't get user pages (rc=-14) [ 515.937956][T12155] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 515.972340][T12155] bond9: entered promiscuous mode [ 515.981572][T12155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 516.000963][T12155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 516.011722][T12155] bond9: (slave vcan5): The slave device specified does not support setting the MAC address [ 516.022197][T12155] bond9: (slave vcan5): Setting fail_over_mac to active for active-backup mode [ 516.036732][T12155] bond9: (slave vcan5): making interface the new active one [ 516.044866][T12155] vcan5: entered promiscuous mode [ 516.055127][T12155] bond9: (slave vcan5): Enslaving as an active interface with an up link [ 516.078262][T12155] overlayfs: missing 'lowerdir' [ 516.134555][T12162] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 516.134555][T12162] program syz.0.1684 not setting count and/or reply_len properly [ 518.804121][T12175] pim6reg: entered allmulticast mode [ 519.118371][T12192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.339902][T12195] tmpfs: Unexpected value for 'inode32' [ 519.365491][ T54] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 519.698418][ T54] usb 5-1: device descriptor read/64, error -71 [ 520.682451][T12206] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 520.682451][T12206] program syz.1.1696 not setting count and/or reply_len properly [ 520.760865][ T54] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 520.792553][T12171] pim6reg: left allmulticast mode [ 520.808179][T12207] random: crng reseeded on system resumption [ 520.814897][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 520.814910][ T30] audit: type=1400 audit(1759325421.236:550): avc: denied { read write } for pid=12204 comm="syz.3.1697" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 520.864405][ T30] audit: type=1400 audit(1759325421.236:551): avc: denied { ioctl open } for pid=12204 comm="syz.3.1697" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 521.331183][T12216] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 521.829470][T12216] bond9: entered promiscuous mode [ 521.862255][T12216] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.894104][T12216] overlayfs: missing 'lowerdir' [ 521.976539][T12220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.986061][T12220] bond9: (slave vcan4): The slave device specified does not support setting the MAC address [ 521.996312][T12220] bond9: (slave vcan4): Setting fail_over_mac to active for active-backup mode [ 522.038711][T12220] bond9: (slave vcan4): making interface the new active one [ 522.046187][T12220] vcan4: entered promiscuous mode [ 522.069881][T12220] bond9: (slave vcan4): Enslaving as an active interface with an up link [ 522.413787][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'. [ 523.353257][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 523.363048][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 523.373759][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 523.383527][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 523.393763][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 523.403435][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 523.413500][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 523.423182][T12228] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 523.432746][T12228] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 524.554918][T12249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 524.561560][T12249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 524.569445][T12249] vhci_hcd vhci_hcd.0: Device attached [ 524.916325][T12250] vhci_hcd: connection closed [ 524.927463][ T36] vhci_hcd: stop threads [ 525.167121][ T54] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 525.835903][ T36] vhci_hcd: release socket [ 525.840881][ T36] vhci_hcd: disconnect device [ 528.696106][T12283] input: syz1 as /devices/virtual/input/input48 [ 528.706407][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.713434][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.562107][T12288] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 529.562107][T12288] program syz.3.1716 not setting count and/or reply_len properly [ 529.658357][T12299] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 529.658357][T12299] program syz.2.1718 not setting count and/or reply_len properly [ 529.935231][T12306] syz_tun: entered allmulticast mode [ 529.944636][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 531.113003][ T54] vhci_hcd: vhci_device speed not set [ 531.122705][T12315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.195800][T12306] syz_tun (unregistering): left allmulticast mode [ 532.283804][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1726'. [ 533.835146][ T30] audit: type=1400 audit(1759325433.415:552): avc: denied { kexec_image_load } for pid=12339 comm="syz.3.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 535.145701][ T30] audit: type=1400 audit(1759325434.650:553): avc: denied { create } for pid=12360 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 536.505966][T12378] input: syz1 as /devices/virtual/input/input49 [ 537.345407][T12385] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 537.345407][T12385] program syz.0.1742 not setting count and/or reply_len properly [ 538.859915][T12401] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1747'. [ 539.022101][ T876] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 539.182935][ T876] usb 2-1: Using ep0 maxpacket: 16 [ 540.067122][ T876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 540.079094][ T876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.140210][ T876] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.149406][ T876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.183969][ T876] usb 2-1: Product: syz [ 540.197326][ T876] usb 2-1: Manufacturer: syz [ 540.217101][ T876] usb 2-1: SerialNumber: syz [ 540.251383][ T876] usb 2-1: config 0 descriptor?? [ 540.298149][ T876] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.389188][ T876] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 540.782328][T12424] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 540.782328][T12424] program syz.0.1753 not setting count and/or reply_len properly [ 541.104886][ T876] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 541.126258][ T876] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 541.813219][ T876] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 541.820826][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 541.828090][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 541.843042][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 541.889886][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 541.899146][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 542.121698][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 542.128669][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 542.193364][T12434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.531409][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 542.559621][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 542.579435][ T876] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 542.600418][ T876] usb 2-1: USB disconnect, device number 27 [ 544.780089][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 545.139811][T12459] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 545.146425][T12459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 545.160332][T12459] vhci_hcd vhci_hcd.0: Device attached [ 545.415345][ T876] usb 35-1: new high-speed USB device number 10 using vhci_hcd [ 545.423888][T12460] vhci_hcd: connection closed [ 545.424101][ T13] vhci_hcd: stop threads [ 546.248033][ T13] vhci_hcd: release socket [ 546.310893][ T13] vhci_hcd: disconnect device [ 546.488933][ T876] usb 35-1: enqueue for inactive port 0 [ 546.569708][ T876] vhci_hcd: vhci_device speed not set [ 547.425633][T12476] Invalid source name [ 547.429968][T12476] UBIFS error (pid: 12476): cannot open "./file0", error -22 [ 547.446947][ T30] audit: type=1400 audit(1759325446.127:554): avc: denied { lock } for pid=12471 comm="syz.1.1766" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 547.714676][ T30] audit: type=1400 audit(1759325446.127:555): avc: denied { ioctl } for pid=12471 comm="syz.1.1766" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 547.746886][ T30] audit: type=1400 audit(1759325446.127:556): avc: denied { mounton } for pid=12471 comm="syz.1.1766" path="/349/file0" dev="tmpfs" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 548.408809][T10189] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 548.855147][T12493] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 549.006585][T10189] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 549.021933][T12493] bond16: entered promiscuous mode [ 549.027112][T10189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.573927][T10189] usb 4-1: Product: syz [ 549.578202][T10189] usb 4-1: Manufacturer: syz [ 549.578266][T10189] usb 4-1: SerialNumber: syz [ 549.848944][T12493] 8021q: adding VLAN 0 to HW filter on device bond16 [ 549.927060][T12502] 8021q: adding VLAN 0 to HW filter on device bond16 [ 549.938567][T12502] bond16: (slave vcan6): The slave device specified does not support setting the MAC address [ 549.966581][T12502] bond16: (slave vcan6): Setting fail_over_mac to active for active-backup mode [ 550.193882][T10189] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 550.706290][T10189] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 550.712801][T12502] bond16: (slave vcan6): making interface the new active one [ 550.726855][T12502] vcan6: entered promiscuous mode [ 550.731952][T10189] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 550.769207][T12502] bond16: (slave vcan6): Enslaving as an active interface with an up link [ 550.798699][T10189] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 551.158222][T10189] usb 4-1: USB disconnect, device number 29 [ 551.255723][T12533] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 552.091024][T12534] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 552.097643][T12534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.105391][T12534] vhci_hcd vhci_hcd.0: Device attached [ 552.129743][T12538] vhci_hcd: connection closed [ 552.132673][ T12] vhci_hcd: stop threads [ 552.417543][ T5888] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 552.717325][ T12] vhci_hcd: release socket [ 552.775856][ T12] vhci_hcd: disconnect device [ 552.853039][T12515] tipc: Enabling of bearer rejected, failed to enable media [ 552.871862][T12533] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 554.617306][T12573] veth0_vlan: entered allmulticast mode [ 554.643556][T12573] tipc: Resetting bearer [ 556.866605][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 556.898950][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 559.009861][ T5888] vhci_hcd: vhci_device speed not set [ 559.135458][T12608] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 560.421868][ T30] audit: type=1400 audit(1759325457.324:557): avc: denied { create } for pid=12610 comm="syz.4.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 560.424375][T12608] bond9: entered promiscuous mode [ 560.447398][T12608] 8021q: adding VLAN 0 to HW filter on device bond9 [ 560.508028][ T30] audit: type=1400 audit(1759325457.324:558): avc: denied { connect } for pid=12610 comm="syz.4.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 560.583840][T12616] 8021q: adding VLAN 0 to HW filter on device bond9 [ 560.605694][T12616] bond9: (slave vcan3): The slave device specified does not support setting the MAC address [ 560.616450][T12616] bond9: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 561.635913][T12616] bond9: (slave vcan3): making interface the new active one [ 561.643324][T12616] vcan3: entered promiscuous mode [ 561.661049][T12616] bond9: (slave vcan3): Enslaving as an active interface with an up link [ 563.957145][T12642] input: syz1 as /devices/virtual/input/input50 [ 565.991533][T12659] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 566.195095][T12659] bond3: entered promiscuous mode [ 566.205528][T12659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.617216][T12659] overlayfs: missing 'workdir' [ 566.645752][T12664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.690352][T12664] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 566.710900][T12664] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 566.991114][T12664] bond3: (slave vcan0): making interface the new active one [ 566.998474][T12664] vcan0: entered promiscuous mode [ 567.019471][T12664] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 568.921607][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 568.932035][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 568.945684][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 568.960111][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 568.971346][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 568.981154][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 568.991860][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 569.002331][T12684] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 569.012085][T12684] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 569.057841][T12692] tipc: Enabled bearer , priority 0 [ 569.071933][T12692] syzkaller0: entered promiscuous mode [ 569.091379][T12692] syzkaller0: entered allmulticast mode [ 569.282760][T12692] tipc: Resetting bearer [ 569.431157][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 569.441170][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 569.452045][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 569.461825][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 569.472005][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 569.482264][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 569.495371][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 569.535550][T12691] tipc: Resetting bearer [ 569.671678][T12676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 569.681279][T12676] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 569.778359][T12691] tipc: Disabling bearer [ 570.153533][T12706] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 570.371412][ T30] audit: type=1400 audit(1759325467.594:559): avc: denied { listen } for pid=12698 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.825422][T12711] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1821'. [ 573.359148][ T30] audit: type=1400 audit(1759325469.278:560): avc: denied { read } for pid=12727 comm="syz.1.1824" path="socket:[36830]" dev="sockfs" ino=36830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 574.315984][T12749] IPVS: length: 90 != 112 [ 575.756238][T12767] tipc: Enabled bearer , priority 0 [ 575.818209][T12767] syzkaller0: entered promiscuous mode [ 575.832756][T12770] syz.1.1835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 575.922881][T12767] syzkaller0: entered allmulticast mode [ 575.964196][T12770] tipc: Bearer : already 2 bearers with priority 10 [ 576.179995][T12770] tipc: Bearer : trying with adjusted priority [ 576.212727][T12770] tipc: Enabled bearer , priority 9 [ 576.234318][T12767] tipc: Resetting bearer [ 576.246037][T12763] tipc: Resetting bearer [ 576.273508][T12763] tipc: Disabling bearer [ 576.340565][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 576.354088][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 576.365417][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 576.375292][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 576.386214][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 576.396364][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 576.407127][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 576.416831][T12762] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 576.426765][T12762] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 578.384976][ T30] audit: type=1400 audit(1759325475.068:561): avc: denied { bind } for pid=12785 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 578.868045][T12801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.359034][ T30] audit: type=1400 audit(1759325479.717:562): avc: denied { accept } for pid=12836 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 583.976219][ T30] audit: type=1400 audit(1759325479.717:563): avc: denied { read } for pid=12836 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 586.044425][T12861] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.542175][ T1608] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 586.890524][ T1608] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 586.899636][ T1608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.978858][ T1608] usb 2-1: Product: syz [ 587.028438][ T1608] usb 2-1: Manufacturer: syz [ 587.061806][ T1608] usb 2-1: SerialNumber: syz [ 587.104124][ T1608] usb 2-1: config 0 descriptor?? [ 587.129967][ T5888] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 587.330701][ T1608] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.018216][ T1608] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 589.049932][ T1608] usb 2-1: USB disconnect, device number 28 [ 589.617368][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'. [ 590.165709][T12899] netlink: 'syz.1.1866': attribute type 2 has an invalid length. [ 591.581526][T12903] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 591.588112][T12903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 591.668142][T12903] vhci_hcd vhci_hcd.0: Device attached [ 592.400416][T12908] vhci_hcd: connection closed [ 592.442825][ T6034] vhci_hcd: stop threads [ 592.453837][ T9] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 592.456158][ T6034] vhci_hcd: release socket [ 592.469155][ T6034] vhci_hcd: disconnect device [ 593.057486][ T30] audit: type=1400 audit(1759325488.482:564): avc: denied { bind } for pid=12914 comm="syz.4.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 594.378474][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.384741][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.054020][T12939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.471762][T12879] syz.2.1861 (12879): drop_caches: 1 [ 597.748581][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 597.798691][ T30] audit: type=1400 audit(1759325493.234:565): avc: denied { bind } for pid=12961 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 597.970227][ T9] vhci_hcd: vhci_device speed not set [ 599.298790][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.306643][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.314371][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.322440][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.330399][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.338117][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.345835][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.353706][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.361451][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 599.369188][T12937] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 600.461176][ T30] audit: type=1800 audit(1759325495.694:566): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1890" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 601.406788][T13013] binder: 13010:13013 unknown command 0 [ 601.412594][T13013] binder: 13010:13013 ioctl c0306201 200000000080 returned -22 [ 601.466916][T13013] binder: 13010:13013 ioctl 4008af20 200000000200 returned -22 [ 603.499146][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 603.508979][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 603.585621][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 603.597592][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 603.628788][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 603.696277][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 603.718216][T13034] tipc: Enabled bearer , priority 0 [ 603.723307][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 603.735941][T13034] syzkaller0: entered promiscuous mode [ 603.741408][T13034] syzkaller0: entered allmulticast mode [ 603.769802][T13034] tipc: Resetting bearer [ 603.780752][T13025] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 603.794516][T13025] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 603.810100][T13032] tipc: Resetting bearer [ 604.107635][T13032] tipc: Disabling bearer [ 604.219187][T13054] ISOFS: Unable to identify CD-ROM format. [ 606.819779][T13091] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1905'. [ 606.828952][T13091] 0{X: renamed from gretap0 (while UP) [ 606.844467][T13091] 0{X: entered allmulticast mode [ 606.850998][T13091] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 607.185858][T13092] tipc: Enabled bearer , priority 0 [ 607.259428][T13092] syzkaller0: entered promiscuous mode [ 607.281506][T13092] syzkaller0: entered allmulticast mode [ 607.357222][T13092] tipc: Resetting bearer [ 607.376977][T13090] tipc: Resetting bearer [ 607.453159][T13090] tipc: Disabling bearer [ 608.173222][T13111] batadv_slave_1: entered promiscuous mode [ 611.648282][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 611.660614][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 611.788681][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 611.799946][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 612.380462][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 612.451815][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 612.481782][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 612.531476][T13144] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 612.540950][T13144] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 612.681849][ T30] audit: type=1400 audit(1759325507.134:567): avc: denied { name_connect } for pid=13147 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 614.009560][T13157] syz.2.1922 (13157): drop_caches: 1 [ 614.519807][ T30] audit: type=1400 audit(1759325508.864:568): avc: denied { read } for pid=13147 comm="syz.3.1920" lport=54804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 616.610999][T13190] validate_nla: 38 callbacks suppressed [ 616.611038][T13190] netlink: 'syz.2.1929': attribute type 3 has an invalid length. [ 616.626517][T13190] netlink: 'syz.2.1929': attribute type 3 has an invalid length. [ 619.086523][ T1608] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 619.170538][ T1608] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 619.666515][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 619.688268][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 619.717564][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 619.880029][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 620.003764][ T5901] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 620.145377][ T30] audit: type=1400 audit(1759325514.140:569): avc: denied { firmware_load } for pid=13225 comm="syz.4.1938" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 620.249807][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 620.285613][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 620.302866][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 620.353764][T13227] syz.4.1938 (13227) used greatest stack depth: 19656 bytes left [ 620.386256][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 620.419107][ T54] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 620.436968][ T5901] usb 2-1: config 0 has no interfaces? [ 620.445747][ T5901] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 620.458739][ T54] hid-generic 00A0:0006:0003.0012: hidraw1: HID v0.05 Device [syz1] on syz0 [ 620.732502][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.758334][ T5901] usb 2-1: config 0 descriptor?? [ 623.000941][T13254] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1945'. [ 623.010047][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 623.146593][ T30] audit: type=1400 audit(1759325516.946:570): avc: denied { write } for pid=13253 comm="syz.2.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 623.959154][ T30] audit: type=1400 audit(1759325516.946:571): avc: denied { nlmsg_write } for pid=13253 comm="syz.2.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.821119][ T1608] usb 2-1: USB disconnect, device number 29 [ 625.023468][T13267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.182698][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.343289][T13282] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000006 [ 627.677127][ T30] audit: type=1400 audit(1759325521.202:572): avc: denied { execute } for pid=13277 comm="syz.3.1953" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 627.701017][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.950358][T13298] input: syz1 as /devices/virtual/input/input51 [ 628.429789][ T30] audit: type=1400 audit(1759325521.894:573): avc: denied { create } for pid=13277 comm="syz.3.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 629.710821][T13312] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1957'. [ 630.866010][T13317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 630.872631][T13317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 630.880388][T13317] vhci_hcd vhci_hcd.0: Device attached [ 631.153992][ T5901] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 631.569872][T13319] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 631.592093][T13318] vhci_hcd: connection closed [ 631.737864][ T1092] vhci_hcd: stop threads [ 631.873285][ T1092] vhci_hcd: release socket [ 631.877950][ T1092] vhci_hcd: disconnect device [ 631.949969][ T30] audit: type=1400 audit(1759325525.196:574): avc: denied { watch watch_reads } for pid=13325 comm="syz.4.1962" path="pipe:[40100]" dev="pipefs" ino=40100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 633.244970][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 633.255337][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 633.266060][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 633.275918][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 633.286378][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 633.296122][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 633.436723][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 633.452486][T13339] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 633.478344][T13339] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 635.392316][T13359] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 635.739740][T13359] bond4: entered promiscuous mode [ 635.771281][T13359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.005973][T13367] input: syz1 as /devices/virtual/input/input52 [ 636.496459][T13359] overlayfs: failed lookup in lower (newroot/366, name='bus', err=-40): overlapping layers [ 636.606478][ T5901] vhci_hcd: vhci_device speed not set [ 636.666817][T13361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.677924][T13361] bond4: (slave vcan4): The slave device specified does not support setting the MAC address [ 636.689556][T13361] bond4: (slave vcan4): Setting fail_over_mac to active for active-backup mode [ 636.714565][T13361] bond4: (slave vcan4): making interface the new active one [ 636.722139][T13361] vcan4: entered promiscuous mode [ 636.731211][T13361] bond4: (slave vcan4): Enslaving as an active interface with an up link [ 637.462583][ T30] audit: type=1400 audit(1759325530.350:575): avc: denied { write } for pid=13369 comm="syz.4.1972" name="file0" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.484996][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.749243][ T30] audit: type=1400 audit(1759325530.350:576): avc: denied { open } for pid=13369 comm="syz.4.1972" path="/376/file0" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.772045][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.274997][ T30] audit: type=1400 audit(1759325530.378:577): avc: denied { ioctl } for pid=13369 comm="syz.4.1972" path="/376/file0" dev="tmpfs" ino=2084 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 638.565338][ T30] audit: type=1400 audit(1759325530.706:578): avc: denied { connect } for pid=13378 comm="syz.3.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 638.828109][ T30] audit: type=1400 audit(1759325531.585:579): avc: denied { bind } for pid=13384 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 640.572320][ T54] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 640.696922][T13415] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1971'. [ 640.797600][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 640.840532][T13418] tipc: Resetting bearer [ 640.844845][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.923571][ T54] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 640.958582][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.976353][ T54] usb 2-1: Product: syz [ 641.085328][ T54] usb 2-1: Manufacturer: syz [ 641.100658][ T54] usb 2-1: SerialNumber: syz [ 641.110616][ T54] usb 2-1: config 0 descriptor?? [ 641.158549][ T54] mvusb_mdio 2-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 642.068382][T13426] input: syz1 as /devices/virtual/input/input53 [ 642.928460][ T5901] usb 2-1: USB disconnect, device number 30 [ 643.160405][T13446] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 644.508113][T13458] overlayfs: failed lookup in lower (newroot/399, name='bus', err=-40): overlapping layers [ 647.143005][T13418] tipc: Disabling bearer [ 647.622570][T13482] syz.4.1992 (13482): drop_caches: 1 [ 647.677375][T13446] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 649.238483][T13505] netlink: 'syz.1.1996': attribute type 11 has an invalid length. [ 652.051232][ T30] audit: type=1400 audit(1759325543.998:580): avc: denied { ioctl } for pid=13528 comm="syz.2.2002" path="socket:[40355]" dev="sockfs" ino=40355 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 653.668634][ T30] audit: type=1400 audit(1759325545.448:581): avc: denied { getopt } for pid=13541 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 654.735837][T13567] input: syz1 as /devices/virtual/input/input54 [ 655.119425][T13568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2009'. [ 656.041633][ T30] audit: type=1400 audit(1759325547.721:582): avc: denied { transfer } for pid=13577 comm="syz.4.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 656.511930][ T1608] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 656.777250][T13598] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.495534][ T1608] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 657.604129][ T1608] usb 2-1: config 0 has no interface number 0 [ 657.610764][ T1608] usb 2-1: too many endpoints for config 0 interface 149 altsetting 88: 114, using maximum allowed: 30 [ 657.644536][ T1608] usb 2-1: config 0 interface 149 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 657.719497][ T30] audit: type=1400 audit(1759325549.274:583): avc: denied { ioctl } for pid=13602 comm="syz.4.2015" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 658.074339][ T1608] usb 2-1: config 0 interface 149 has no altsetting 0 [ 658.090476][T13612] netlink: del zone limit has 4 unknown bytes [ 658.154854][ T1608] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 658.165023][ T1608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.174184][ T1608] usb 2-1: Product: syz [ 658.182053][ T1608] usb 2-1: Manufacturer: syz [ 658.190193][ T1608] usb 2-1: SerialNumber: syz [ 658.209366][ T1608] usb 2-1: config 0 descriptor?? [ 658.293473][T13618] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 658.373181][T13618] bond10: entered promiscuous mode [ 658.390769][T13618] 8021q: adding VLAN 0 to HW filter on device bond10 [ 658.455371][T13620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 658.600975][T13620] bond10: (slave vcan5): The slave device specified does not support setting the MAC address [ 658.684682][T13620] bond10: (slave vcan5): Setting fail_over_mac to active for active-backup mode [ 658.720743][T13620] bond10: (slave vcan5): making interface the new active one [ 658.728284][T13620] vcan5: entered promiscuous mode [ 658.742856][T13620] bond10: (slave vcan5): Enslaving as an active interface with an up link [ 658.971343][T13620] overlayfs: failed lookup in lower (newroot/387, name='bus', err=-40): overlapping layers [ 659.529804][T13631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.055650][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 660.062046][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.197578][ T1608] usb 2-1: USB disconnect, device number 31 [ 664.086803][T13674] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2029'. [ 664.153550][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 665.197414][T13664] ISOFS: Unable to identify CD-ROM format. [ 669.060409][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.275594][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.283544][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.291635][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.300575][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.312170][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.321979][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.757223][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.765133][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 669.813684][T13726] netlink: 'syz.3.2037': attribute type 3 has an invalid length. [ 671.498412][ T30] audit: type=1400 audit(1759325562.191:584): avc: denied { mount } for pid=13748 comm="syz.2.2043" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 671.595275][T13753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.480567][T13763] pimreg: entered allmulticast mode [ 674.821943][ T30] audit: type=1400 audit(1759325565.288:585): avc: denied { listen } for pid=13775 comm="syz.4.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.888369][ T30] audit: type=1400 audit(1759325565.288:586): avc: denied { accept } for pid=13775 comm="syz.4.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 676.501220][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 676.511953][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 676.526004][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 676.535908][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 676.546983][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 676.557349][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 676.568765][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 676.578848][T13796] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 676.588391][T13796] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 677.157194][T13815] syz.3.2057 (13815): drop_caches: 2 [ 677.163550][T13815] syz.3.2057 (13815): drop_caches: 2 [ 677.535259][ T30] audit: type=1400 audit(1759325567.841:587): avc: denied { listen } for pid=13816 comm="syz.2.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 678.502532][ T30] audit: type=1400 audit(1759325568.730:588): avc: denied { append } for pid=13822 comm="syz.2.2060" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 679.760274][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 679.771018][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 679.872991][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 679.907926][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 680.035012][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 681.015306][T13845] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 681.021900][T13845] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 681.029695][T13845] vhci_hcd vhci_hcd.0: Device attached [ 681.047126][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 681.057507][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 681.100429][T13836] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 681.109971][T13836] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 681.131545][T13852] vhci_hcd: connection closed [ 681.161866][ T6018] vhci_hcd: stop threads [ 681.175201][ T6018] vhci_hcd: release socket [ 681.243243][T13857] SELinux: syz.1.2066 (13857) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 681.324929][ T876] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 681.431900][ T6018] vhci_hcd: disconnect device [ 681.546326][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 682.065044][T13866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.472995][T13872] geneve2: entered promiscuous mode [ 682.478275][T13872] geneve2: entered allmulticast mode [ 684.040286][ T1608] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 684.254326][ T1608] usb 5-1: Using ep0 maxpacket: 32 [ 684.505895][ T1608] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 684.520455][ T1608] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 684.530779][ T1608] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 684.539037][ T1608] usb 5-1: Product: syz [ 684.544413][ T1608] usb 5-1: Manufacturer: syz [ 684.549045][ T1608] usb 5-1: SerialNumber: syz [ 684.556054][ T1608] usb 5-1: config 0 descriptor?? [ 684.562204][T13882] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 684.822332][ T1608] usb 5-1: USB disconnect, device number 42 [ 684.859791][ T30] audit: type=1400 audit(1759325574.688:589): avc: denied { listen } for pid=13887 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 684.879335][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.852470][T13896] validate_nla: 40 callbacks suppressed [ 685.852481][T13896] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 685.885695][T13896] bond5: entered promiscuous mode [ 685.891598][T13896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 685.907787][T13896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 685.915216][T13896] bond5: (slave vcan5): The slave device specified does not support setting the MAC address [ 685.926408][T13896] bond5: (slave vcan5): Setting fail_over_mac to active for active-backup mode [ 685.938752][T13896] bond5: (slave vcan5): making interface the new active one [ 685.947323][T13896] vcan5: entered promiscuous mode [ 685.952987][T13896] bond5: (slave vcan5): Enslaving as an active interface with an up link [ 685.969447][T13896] overlayfs: failed lookup in lower (newroot/387, name='bus', err=-40): overlapping layers [ 686.816636][ T30] audit: type=1400 audit(1759325576.335:590): avc: denied { map } for pid=13899 comm="syz.3.2075" path="/dev/video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 686.878721][ T876] vhci_hcd: vhci_device speed not set [ 687.646058][T13912] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2078'. [ 688.512159][T13920] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 688.777471][T13931] binder: 13927:13931 ioctl c0306201 0 returned -14 [ 689.128749][ T30] audit: type=1326 audit(1759325578.336:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018eec9 code=0x7ffc0000 [ 689.154784][ T30] audit: type=1326 audit(1759325578.336:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ac018d710 code=0x7ffc0000 [ 689.182088][ T30] audit: type=1326 audit(1759325578.336:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4ac01906f7 code=0x7ffc0000 [ 689.283796][ T30] audit: type=1326 audit(1759325578.336:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ac018eec9 code=0x7ffc0000 [ 689.315895][ T30] audit: type=1326 audit(1759325578.336:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4ac01906f7 code=0x7ffc0000 [ 689.348024][ T30] audit: type=1326 audit(1759325578.336:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4ac018db2a code=0x7ffc0000 [ 689.374882][ T30] audit: type=1326 audit(1759325578.336:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018eec9 code=0x7ffc0000 [ 689.400287][ T30] audit: type=1326 audit(1759325578.346:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13927 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4ac018eec9 code=0x7ffc0000 [ 689.603060][T13936] bond0: Error: Cannot enslave bond to itself. [ 690.767718][T13947] cgroup: subsys name conflicts with all [ 690.945924][T13948] ISOFS: Unable to identify CD-ROM format. [ 691.037804][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2083'. [ 691.202944][ T5881] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 691.515240][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.526178][ T5881] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 691.536378][ T5881] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 691.545635][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.555218][ T5881] usb 5-1: config 0 descriptor?? [ 691.564543][ T5881] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 691.573670][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 691.581686][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 691.591736][ T5881] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 691.601866][ T5881] usb 5-1: media controller created [ 691.608025][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.629272][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 691.643167][ T5881] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 691.658525][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 691.683563][ T5881] dvb-usb: schedule remote query interval to 150 msecs. [ 691.699837][ T5881] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 691.889799][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 691.904149][ T5881] dvb-usb: error while querying for an remote control event. [ 692.533458][ T5888] dvb-usb: bulk message failed: -22 (1/0) [ 692.540042][ T5888] dvb-usb: error while querying for an remote control event. [ 692.666557][ T5888] usb 5-1: USB disconnect, device number 43 [ 692.677537][ T5888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 699.019110][T14015] overlayfs: missing 'lowerdir' [ 700.011699][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 700.021742][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 700.033897][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 700.043665][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 700.054015][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 700.064061][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 700.074787][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 700.084533][T14006] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 700.094074][T14006] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 700.335144][T14021] SQUASHFS error: Failed to read block 0x0: -5 [ 700.341523][T14021] unable to read squashfs_super_block [ 700.430581][T14022] fuse: Bad value for 'fd' [ 700.741934][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 700.771458][ T30] audit: type=1326 audit(1759325589.524:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 700.794839][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.835731][T14031] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 700.861935][T14031] CIFS mount error: No usable UNC path provided in device string! [ 700.861935][T14031] [ 700.872175][T14031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 700.909050][T14031] binder: 14026:14031 ioctl c0046209 9999999999999999 returned -22 [ 701.356375][ T30] audit: type=1326 audit(1759325589.524:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 701.379824][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.545116][ T30] audit: type=1326 audit(1759325589.533:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 701.573565][ T30] audit: type=1326 audit(1759325589.533:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 701.596921][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.610215][ T30] audit: type=1326 audit(1759325589.533:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 701.736790][T14036] hub 9-0:1.0: USB hub found [ 701.746235][T14036] hub 9-0:1.0: 1 port detected [ 701.989816][ T30] audit: type=1326 audit(1759325589.533:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 702.545868][ T30] audit: type=1326 audit(1759325589.533:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 702.573070][ T30] audit: type=1326 audit(1759325589.533:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 702.606902][T14033] loop6: detected capacity change from 0 to 63 [ 702.617612][ T30] audit: type=1326 audit(1759325589.533:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.2.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 702.659972][ T30] audit: type=1400 audit(1759325590.001:626): avc: denied { mount } for pid=14019 comm="syz.3.2103" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 703.264499][T14050] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2110'. [ 703.274664][T14050] openvswitch: netlink: Key type 334 is out of range max 32 [ 705.798438][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 705.808060][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 705.815557][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 705.822992][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 705.830223][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.157965][T14059] lo speed is unknown, defaulting to 1000 [ 708.030040][ T5822] Bluetooth: hci5: command tx timeout [ 708.154441][T14059] chnl_net:caif_netlink_parms(): no params data found [ 708.197203][T14081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2117'. [ 708.275938][T14081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2117'. [ 708.487645][T14081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2117'. [ 711.996354][ T5822] Bluetooth: hci5: command tx timeout [ 712.051398][T14109] usb usb8: usbfs: process 14109 (syz.3.2120) did not claim interface 0 before use [ 713.624605][T14117] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2123'. [ 713.640671][T14117] openvswitch: netlink: Key type 334 is out of range max 32 [ 713.649124][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.677068][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.700968][T14059] bridge_slave_0: entered allmulticast mode [ 713.738219][T14059] bridge_slave_0: entered promiscuous mode [ 714.086258][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.086389][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.086537][T14059] bridge_slave_1: entered allmulticast mode [ 714.090058][T14059] bridge_slave_1: entered promiscuous mode [ 714.189603][ T5833] Bluetooth: hci5: command tx timeout [ 714.231720][T14126] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2125'. [ 714.295360][T14126] syz.1.2125 (14126): drop_caches: 2 [ 714.296710][T14126] syz.1.2125 (14126): drop_caches: 2 [ 715.149872][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 715.149887][ T30] audit: type=1400 audit(1759325602.189:635): avc: denied { mount } for pid=14122 comm="syz.1.2125" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 716.265995][T14059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.278851][T14059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.417216][ T5833] Bluetooth: hci5: command tx timeout [ 716.930493][ T30] audit: type=1400 audit(1759325604.294:636): avc: denied { getopt } for pid=14134 comm="syz.3.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 717.005193][T14059] team0: Port device team_slave_0 added [ 717.012266][T14059] team0: Port device team_slave_1 added [ 717.034521][T14059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.041583][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.069002][T14059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.082718][T14059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.091028][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.119368][T14059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.196882][T14059] hsr_slave_0: entered promiscuous mode [ 717.374080][T14121] tty tty3: ldisc open failed (-12), clearing slot 2 [ 717.400006][T14059] hsr_slave_1: entered promiscuous mode [ 717.856321][T14148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.874973][T14150] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 717.881564][T14150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 717.889597][T14150] vhci_hcd vhci_hcd.0: Device attached [ 717.950574][T14151] vhci_hcd: connection closed [ 717.952107][ T50] vhci_hcd: stop threads [ 717.962218][ T50] vhci_hcd: release socket [ 717.966663][ T50] vhci_hcd: disconnect device [ 718.231525][T14059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 718.248253][T14059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 718.264298][T14059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 718.286942][T14059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 718.536558][T14059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.616482][T14059] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.977115][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.308701][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.315830][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.358657][T14059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 719.369657][T14059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.430419][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.437561][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.300741][T14059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.320572][T14194] 9pnet_fd: p9_fd_create_tcp (14194): problem connecting socket to 127.0.0.1 [ 721.604597][T14059] veth0_vlan: entered promiscuous mode [ 722.062584][T14059] veth1_vlan: entered promiscuous mode [ 722.698742][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 722.714193][T14059] veth0_macvtap: entered promiscuous mode [ 723.670671][T14218] bond0: (slave bond_slave_1): Releasing backup interface [ 723.870120][T14230] input: syz0 as /devices/virtual/input/input57 [ 724.770483][T14059] veth1_macvtap: entered promiscuous mode [ 725.052582][T14242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 725.059181][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 725.066793][T14242] vhci_hcd vhci_hcd.0: Device attached [ 725.129220][T14244] vhci_hcd: connection closed [ 725.137926][T14059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.246437][T14059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.259312][ T6018] vhci_hcd: stop threads [ 725.273030][ T6018] vhci_hcd: release socket [ 725.980321][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.986643][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.265740][ T6018] vhci_hcd: disconnect device [ 726.592255][ T5888] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 726.599817][ T5888] usb 37-1: enqueue for inactive port 0 [ 726.644941][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.680623][ T5888] vhci_hcd: vhci_device speed not set [ 726.686077][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.694780][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.828797][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.017754][ T5833] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 727.061097][T14259] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 727.249387][T14259] bond11: entered promiscuous mode [ 727.262948][T14259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 727.463141][T14263] 8021q: adding VLAN 0 to HW filter on device bond11 [ 727.471881][T14263] bond11: (slave vcan6): The slave device specified does not support setting the MAC address [ 727.482146][T14263] bond11: (slave vcan6): Setting fail_over_mac to active for active-backup mode [ 727.512895][T14263] bond11: (slave vcan6): making interface the new active one [ 727.520361][T14263] vcan6: entered promiscuous mode [ 727.530880][T14263] bond11: (slave vcan6): Enslaving as an active interface with an up link [ 727.846828][T14255] overlayfs: failed lookup in lower (newroot/420, name='bus', err=-40): overlapping layers [ 728.213331][T14275] netlink: 'syz.1.2151': attribute type 4 has an invalid length. [ 728.428562][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.439723][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.452270][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2152'. [ 728.568898][T14267] block device autoloading is deprecated and will be removed. [ 728.991256][T14274] bond0: (slave bond_slave_1): Releasing backup interface [ 729.139083][ T6018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.160514][ T6018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.780312][ T30] audit: type=1400 audit(1759325616.155:637): avc: denied { mount } for pid=14059 comm="syz-executor" name="/" dev="gadgetfs" ino=6938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 729.977296][ T30] audit: type=1400 audit(1759325616.884:638): avc: denied { accept } for pid=14288 comm="syz.4.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 731.220371][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.239372][ T30] audit: type=1400 audit(1759325617.249:639): avc: denied { ioctl } for pid=14292 comm="syz.3.2156" path="socket:[43706]" dev="sockfs" ino=43706 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 732.067645][T14308] loop5: detected capacity change from 0 to 7 [ 732.387403][T14308] Dev loop5: unable to read RDB block 7 [ 732.393315][T14308] loop5: unable to read partition table [ 732.427425][T14308] loop5: partition table beyond EOD, truncated [ 732.434049][T14308] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 732.679440][T14313] fuse: Bad value for 'fd' [ 735.025824][T14333] overlayfs: missing 'lowerdir' [ 735.411698][ T6034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.010811][ T30] audit: type=1400 audit(1759325622.384:640): avc: denied { mount } for pid=14337 comm="syz.5.2163" name="/" dev="rpc_pipefs" ino=44766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 736.362585][ T6034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.479270][T14348] fuse: Bad value for 'fd' [ 736.947371][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 737.171771][ T6034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.554146][ T6034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.251065][ T6034] bridge_slave_1: left allmulticast mode [ 739.257228][ T6034] bridge_slave_1: left promiscuous mode [ 739.269333][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.357185][ T6034] bridge_slave_0: left allmulticast mode [ 740.527672][ T6034] bridge_slave_0: left promiscuous mode [ 740.864326][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.885943][T14395] overlayfs: missing 'lowerdir' [ 741.193057][ T6034] tipc: Resetting bearer [ 741.355524][ T6034] tipc: Disabling bearer [ 741.591919][ T6034] bond2 (unregistering): (slave gretap1): Releasing active interface [ 743.442300][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2180'. [ 744.066073][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.129006][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.199983][ T6034] bond0 (unregistering): Released all slaves [ 744.623122][T14426] ecryptfs: Unknown parameter 'cache' [ 744.943171][ T6034] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 744.952455][ T6034] vcan1: left promiscuous mode [ 744.959504][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 744.969011][ T6034] bond1 (unregistering): Released all slaves [ 744.986978][ T6034] bond2 (unregistering): Released all slaves [ 745.026143][ T6034] bond3 (unregistering): Released all slaves [ 745.537325][ T6034] bond4 (unregistering): Released all slaves [ 745.656895][ T6034] bond5 (unregistering): Released all slaves [ 745.761412][ T6034] bond6 (unregistering): Released all slaves [ 745.837900][ T6034] bond7 (unregistering): Released all slaves [ 745.926869][ T6034] bond8 (unregistering): Released all slaves [ 746.033582][ T6034] bond9 (unregistering): (slave vcan3): Releasing backup interface [ 746.041581][ T6034] vcan3: left promiscuous mode [ 746.048448][ T6034] bond9 (unregistering): Released all slaves [ 746.063821][T14366] lo speed is unknown, defaulting to 1000 [ 746.287387][T14435] binder: 14432:14435 ioctl c0306201 200000000080 returned -14 [ 746.790402][T14424] bond0: (slave bond_slave_1): Releasing backup interface [ 747.389879][ T6034] tipc: Left network mode [ 748.112359][ T30] audit: type=1400 audit(1759325633.506:641): avc: denied { create } for pid=14447 comm="syz.5.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 748.398393][ T876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 748.573246][ T876] usb 6-1: Using ep0 maxpacket: 16 [ 748.581396][ T6034] hsr_slave_0: left promiscuous mode [ 748.588103][ T6034] hsr_slave_1: left promiscuous mode [ 748.588802][ T876] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 748.609206][ T876] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 748.613294][ T6034] veth1_macvtap: left promiscuous mode [ 748.620206][ T876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 748.637036][ T876] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 748.638327][ T6034] veth0_macvtap: left promiscuous mode [ 748.647337][ T876] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 748.666731][ T876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.678919][ T876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 748.687354][ T876] usb 6-1: SerialNumber: syz [ 748.696623][ T876] cdc_acm 6-1:1.0: skipping garbage [ 748.704258][ T876] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 748.712213][ T876] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 748.722227][ T876] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 748.890715][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 748.964532][ T30] audit: type=1400 audit(1759325634.647:642): avc: denied { ioctl } for pid=14447 comm="syz.5.2189" path="socket:[45207]" dev="sockfs" ino=45207 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 748.991614][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 749.319605][T14366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.641372][T14467] overlayfs: missing 'lowerdir' [ 749.747505][ T6034] IPVS: stop unused estimator thread 0... [ 749.877333][T14465] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2191'. [ 750.068582][T14466] bridge0: left allmulticast mode [ 750.243897][ T30] audit: type=1400 audit(1759325635.845:643): avc: denied { append } for pid=14459 comm="syz.2.2192" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 750.437181][T14471] random: crng reseeded on system resumption [ 750.799067][ T876] usb 6-1: USB disconnect, device number 2 [ 751.385675][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 751.401354][ T30] audit: type=1400 audit(1759325636.930:644): avc: denied { execmod } for pid=14477 comm="syz.5.2194" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 751.641258][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 751.819111][ T30] audit: type=1400 audit(1759325636.930:645): avc: denied { execute } for pid=14477 comm="syz.5.2194" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 753.395270][T14497] sctp: [Deprecated]: syz.1.2198 (pid 14497) Use of int in max_burst socket option. [ 753.395270][T14497] Use struct sctp_assoc_value instead [ 755.882505][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 755.891403][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 755.945602][ T6034] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.956884][ T6022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.974534][ T6022] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.989038][ T6034] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.657238][T14539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 756.668453][T14539] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 757.848678][T14548] Bluetooth: hci1: Frame reassembly failed (-84) [ 758.076372][ T6018] Bluetooth: hci1: Frame reassembly failed (-84) [ 758.649544][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 758.661888][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 758.681502][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 758.715833][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 758.733873][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 758.749574][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 758.833794][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 758.908678][T14553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 758.918378][T14553] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 759.571568][ T876] hid_parser_main: 5 callbacks suppressed [ 759.571581][ T876] hid-generic 0005:16BF:5505.0013: unknown main item tag 0x0 [ 759.701998][ T876] hid-generic 0005:16BF:5505.0013: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 760.022832][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2215'. [ 760.200177][ T5822] Bluetooth: hci1: command 0x1003 tx timeout [ 760.948532][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 761.091413][T14582] geneve2: entered allmulticast mode [ 761.112144][ T30] audit: type=1326 audit(1759325645.966:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 761.146669][ T30] audit: type=1326 audit(1759325645.966:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 761.177360][ T30] audit: type=1326 audit(1759325645.966:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 761.231818][ T30] audit: type=1326 audit(1759325645.966:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 761.289417][ T30] audit: type=1326 audit(1759325645.966:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 762.280856][ T30] audit: type=1326 audit(1759325645.966:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 762.304440][ T30] audit: type=1326 audit(1759325645.966:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 762.328235][ T30] audit: type=1326 audit(1759325645.966:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 762.351586][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.358065][ T30] audit: type=1326 audit(1759325645.966:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 762.389899][T14595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 762.396501][T14595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 762.453162][T14594] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 762.459762][T14594] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 762.467393][T14594] vhci_hcd vhci_hcd.0: Device attached [ 762.485569][ T30] audit: type=1326 audit(1759325645.966:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.2.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3f18eec9 code=0x7ffc0000 [ 762.544510][T14600] vhci_hcd: connection closed [ 762.546151][T14595] vhci_hcd vhci_hcd.0: Device attached [ 762.552063][T14596] vhci_hcd: connection closed [ 762.559899][ T2952] vhci_hcd: stop threads [ 762.588882][ T2952] vhci_hcd: release socket [ 762.640851][ T2952] vhci_hcd: disconnect device [ 763.332482][ T5888] usb 35-1: new high-speed USB device number 11 using vhci_hcd [ 763.362938][ T2952] vhci_hcd: stop threads [ 763.469778][ T2952] vhci_hcd: release socket [ 763.474377][ T2952] vhci_hcd: disconnect device [ 764.587795][T14626] hub 9-0:1.0: USB hub found [ 764.595719][T14626] hub 9-0:1.0: 1 port detected [ 765.856896][T14630] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 765.863488][T14630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 765.894388][T14630] vhci_hcd vhci_hcd.0: Device attached [ 765.951712][T14631] vhci_hcd: connection closed [ 766.006126][ T1092] vhci_hcd: stop threads [ 766.019896][ T1092] vhci_hcd: release socket [ 766.106073][ T1092] vhci_hcd: disconnect device [ 766.116621][ T9] vhci_hcd: vhci_device speed not set [ 766.396893][T14643] smc: removing ib device syz2 [ 768.989893][ T5888] vhci_hcd: vhci_device speed not set [ 771.567860][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 771.567890][ T30] audit: type=1400 audit(1759325655.788:679): avc: denied { mount } for pid=14687 comm="syz.3.2236" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 771.902968][T14693] vlan0: entered promiscuous mode [ 773.442229][T14697] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 773.448823][T14697] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 773.544699][T14697] vhci_hcd vhci_hcd.0: Device attached [ 773.550258][T14699] vhci_hcd: connection closed [ 773.550455][ T6022] vhci_hcd: stop threads [ 773.561948][ T6022] vhci_hcd: release socket [ 774.150276][T14710] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 774.197015][ T6022] vhci_hcd: disconnect device [ 774.216507][ T10] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 774.230255][ T10] usb 39-1: enqueue for inactive port 0 [ 774.333333][ T10] vhci_hcd: vhci_device speed not set [ 774.812584][ T30] audit: type=1400 audit(1759325658.809:680): avc: denied { map } for pid=14717 comm="syz.4.2243" path="socket:[45742]" dev="sockfs" ino=45742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 774.935255][T14729] tipc: Can't bind to reserved service type 0 [ 774.946742][T14725] mkiss: ax0: crc mode is auto. [ 774.953982][ T30] audit: type=1400 audit(1759325658.959:681): avc: denied { listen } for pid=14717 comm="syz.4.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 774.973415][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.113931][T14738] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2244'. [ 778.149648][T10189] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 778.283882][T14756] loop6: detected capacity change from 0 to 2560 [ 778.295418][T14756] buffer_io_error: 40 callbacks suppressed [ 778.295427][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 778.377144][T14757] lo speed is unknown, defaulting to 1000 [ 778.440457][ T30] audit: type=1400 audit(1759325662.092:682): avc: denied { getattr } for pid=14747 comm="syz.1.2249" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 778.511364][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 778.535512][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 778.569733][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 778.649672][ T30] audit: type=1400 audit(1759325662.410:683): avc: denied { write } for pid=14747 comm="syz.1.2249" path="socket:[46900]" dev="sockfs" ino=46900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 779.350137][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 779.359626][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 779.368164][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 779.377519][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 779.385703][T14756] ldm_validate_partition_table(): Disk read failed. [ 779.392545][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 779.508710][T14756] Buffer I/O error on dev loop6, logical block 0, async page read [ 779.518597][T14756] Dev loop6: unable to read RDB block 0 [ 779.524697][T14756] loop6: unable to read partition table [ 779.531729][T14756] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 780.042093][ T30] audit: type=1400 audit(1759325663.720:684): avc: denied { write } for pid=14754 comm="syz.5.2250" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 781.145856][ T30] audit: type=1400 audit(1759325664.721:685): avc: denied { bind } for pid=14778 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 781.225555][ T30] audit: type=1400 audit(1759325664.721:686): avc: denied { setopt } for pid=14778 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 781.391457][T14790] ALSA: mixer_oss: invalid OSS volume '8' [ 781.598109][T14790] syz.4.2255 (14790): drop_caches: 2 [ 781.748219][ T30] audit: type=1400 audit(1759325665.319:687): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 782.565681][T14801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.618710][T14806] syzkaller1: entered promiscuous mode [ 783.748127][T14806] syzkaller1: entered allmulticast mode [ 784.758984][T14823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2261'. [ 784.852768][ T876] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 785.079830][ T876] usb 4-1: config 0 has no interfaces? [ 785.097733][ T876] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 785.110268][ T876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.123439][ T876] usb 4-1: Product: syz [ 785.128923][ T876] usb 4-1: Manufacturer: syz [ 785.924902][ T876] usb 4-1: SerialNumber: syz [ 785.957175][ T876] usb 4-1: config 0 descriptor?? [ 787.279720][T14845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 787.286335][T14845] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 787.322284][T14845] vhci_hcd vhci_hcd.0: Device attached [ 787.374055][T14846] vhci_hcd: connection closed [ 787.614149][ T6018] vhci_hcd: stop threads [ 787.726069][ T6018] vhci_hcd: release socket [ 787.732536][ T876] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 787.797735][ T6018] vhci_hcd: disconnect device [ 787.857936][T14853] input: syz1 as /devices/virtual/input/input60 [ 787.900866][T14850] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 788.686109][T14858] hub 8-0:1.0: USB hub found [ 788.700889][T14858] hub 8-0:1.0: 1 port detected [ 789.037902][T10189] usb 4-1: USB disconnect, device number 30 [ 790.948095][T14888] fuse: Bad value for 'fd' [ 790.998371][T14879] loop6: detected capacity change from 0 to 524287999 [ 791.126954][ T30] audit: type=1400 audit(1759325674.065:688): avc: denied { map } for pid=14884 comm="syz.2.2277" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 791.364524][ T30] audit: type=1400 audit(1759325674.075:689): avc: denied { execute } for pid=14884 comm="syz.2.2277" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 791.384703][T10189] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 791.504804][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 791.511091][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.240874][ T30] audit: type=1800 audit(1759325674.084:690): pid=14891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2277" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 792.242253][T10189] usb 2-1: Using ep0 maxpacket: 16 [ 792.363668][T10189] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 792.399918][T10189] usb 2-1: can't read configurations, error -61 [ 792.699603][T10189] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 793.316874][T10189] usb 2-1: Using ep0 maxpacket: 16 [ 793.347177][T10189] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 793.369987][T10189] usb 2-1: can't read configurations, error -61 [ 793.379739][ T876] vhci_hcd: vhci_device speed not set [ 793.407271][T10189] usb usb2-port1: attempt power cycle [ 793.628857][ T30] audit: type=1400 audit(1759325676.404:691): avc: denied { watch } for pid=14910 comm="syz.4.2282" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 793.990631][T10189] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 794.033788][T10189] usb 2-1: device descriptor read/8, error -71 [ 794.591158][ T30] audit: type=1400 audit(1759325677.330:692): avc: denied { getopt } for pid=14926 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 795.024166][T14929] lo speed is unknown, defaulting to 1000 [ 795.872100][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 795.893453][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 795.906892][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 795.917071][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 795.941675][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 795.951404][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 796.016703][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 796.357784][T14945] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 796.383345][T14945] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 798.412364][T14977] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 798.422787][T14977] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 798.762615][T14976] netlink: 'syz.2.2292': attribute type 11 has an invalid length. [ 798.927444][ T30] audit: type=1400 audit(1759325681.389:693): avc: denied { ioctl } for pid=14962 comm="syz.4.2290" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 800.724319][T14996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 800.730934][T14996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.738952][T14996] vhci_hcd vhci_hcd.0: Device attached [ 800.750495][T14997] vhci_hcd: connection closed [ 800.880139][ T13] vhci_hcd: stop threads [ 801.016993][ T1608] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 801.040617][ T13] vhci_hcd: release socket [ 801.078152][ T13] vhci_hcd: disconnect device [ 802.322491][T15017] fuse: Unknown parameter 'use00000000000000000000' [ 802.658079][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 802.670035][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 802.681702][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 802.691635][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 802.702693][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 802.712834][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 802.723332][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 802.733210][T15014] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 802.742936][T15014] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 803.570122][T15028] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 803.570484][T15029] IPVS: stopping master sync thread 15028 ... [ 804.831636][T15034] SQUASHFS error: Failed to read block 0x0: -5 [ 804.839497][T15034] unable to read squashfs_super_block [ 804.990862][T15043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 805.613511][T15053] 9pnet_fd: Insufficient options for proto=fd [ 806.693615][ T1608] vhci_hcd: vhci_device speed not set [ 807.666294][ T876] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 807.884596][ T876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 807.912344][ T876] usb 3-1: not running at top speed; connect to a high speed hub [ 807.922918][ T876] usb 3-1: config 11 has an invalid interface number: 217 but max is 0 [ 807.931578][ T876] usb 3-1: config 11 has no interface number 0 [ 807.938138][ T876] usb 3-1: config 11 interface 217 has no altsetting 0 [ 807.947186][ T876] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=5b.10 [ 807.956459][ T876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.964433][ T876] usb 3-1: Product: syz [ 807.968723][ T876] usb 3-1: Manufacturer: syz [ 807.973767][ T876] usb 3-1: SerialNumber: syz [ 808.592641][T15081] overlayfs: failed to resolve './file0': -2 [ 809.407665][T15084] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 809.486032][ T876] keyspan 3-1:11.217: Keyspan - (without firmware) converter detected [ 809.569197][T15087] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 809.818330][T15092] new mount options do not match the existing superblock, will be ignored [ 809.830767][T15092] option changes via remount are deprecated (pid=15085 comm=syz.1.2317) [ 809.855806][T15092] lo speed is unknown, defaulting to 1000 [ 810.740337][ T30] audit: type=1400 audit(1759325691.585:694): avc: denied { remount } for pid=15085 comm="syz.1.2317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 810.760160][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.030447][T15093] usb usb5: usbfs: process 15093 (syz.3.2318) did not claim interface 0 before use [ 811.042272][ T30] audit: type=1400 audit(1759325692.717:695): avc: denied { getopt } for pid=15089 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 811.375053][T15096] lo speed is unknown, defaulting to 1000 [ 811.416920][T15091] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 811.782081][T15084] trusted_key: encrypted_key: insufficient parameters specified [ 812.022544][T15094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.041557][T15094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.075262][ T876] usb 3-1: USB disconnect, device number 22 [ 812.759478][ T876] keyspan 3-1:11.217: device disconnected [ 812.983703][T15102] lo speed is unknown, defaulting to 1000 [ 813.568960][ T5833] Bluetooth: hci0: command tx timeout [ 813.958741][T15115] binder: 15112:15115 ioctl c0306201 200000000080 returned -14 [ 814.702611][ T30] audit: type=1400 audit(1759325696.122:696): avc: denied { mounton } for pid=15117 comm="syz.4.2324" path="/456/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 816.947376][T15147] netlink: 'syz.3.2329': attribute type 32 has an invalid length. [ 817.526446][T15153] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 818.201207][T15163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.953191][T15163] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 819.245823][ T30] audit: type=1400 audit(1759325700.387:697): avc: denied { attach_queue } for pid=15166 comm="syz.1.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 819.462011][T15167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 820.105885][T15183] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 820.938951][T15192] ieee802154 phy0 wpan0: encryption failed: -22 [ 821.472960][T15200] program syz.2.2341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.825327][ T54] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 822.030657][ T30] audit: type=1400 audit(1759325702.997:698): avc: denied { unmount } for pid=14059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 822.355569][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.367547][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.029967][T15221] syz.5.2344 (15221): drop_caches: 2 [ 823.036408][T15221] syz.5.2344 (15221): drop_caches: 2 [ 823.076259][ T54] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 823.098252][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.113891][ T54] usb 3-1: Product: syz [ 823.121021][ T54] usb 3-1: Manufacturer: syz [ 823.128628][ T54] usb 3-1: SerialNumber: syz [ 823.142219][ T54] usb 3-1: config 0 descriptor?? [ 823.164137][ T54] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 823.183205][T15213] ceph: No mds server is up or the cluster is laggy [ 823.193015][T10189] libceph: connect (1)[b::]:6789 error -101 [ 823.284427][T10189] libceph: mon0 (1)[b::]:6789 connect error [ 823.330568][T15212] ceph: No mds server is up or the cluster is laggy [ 823.339414][ T1608] libceph: connect (1)[c::]:6789 error -101 [ 823.349765][ T1608] libceph: mon0 (1)[c::]:6789 connect error [ 826.131302][ T5830] block device autoloading is deprecated and will be removed. [ 826.245734][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.253268][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.427663][ T5888] usb 3-1: USB disconnect, device number 23 [ 826.536147][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 826.773904][T15258] C: renamed from team_slave_0 (while UP) [ 826.806608][T15258] netlink: 'syz.1.2351': attribute type 3 has an invalid length. [ 826.859814][T15258] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2351'. [ 826.923488][T15258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 827.218878][T15262] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 827.795864][T15274] pimreg: entered allmulticast mode [ 827.873416][T15265] pimreg: left allmulticast mode [ 828.624804][T15263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.358830][ T30] audit: type=1400 audit(1759325709.928:699): avc: denied { ioctl } for pid=15286 comm="syz.2.2360" path="socket:[48088]" dev="sockfs" ino=48088 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 830.574490][T15298] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2359'. [ 830.750374][T15290] bond0: (slave bond_slave_0): Releasing backup interface [ 830.824061][T15299] Mount JFS Failure: -5 [ 830.828677][T15299] jfs_mount failed w/return code = -5 [ 830.900479][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2358'. [ 831.284614][T15290] team0: Port device team_slave_0 removed [ 831.306262][T15290] team0: Port device team_slave_1 removed [ 831.321995][T15290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.336953][T15290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.455689][T15290] bond1: (slave vcan1): Releasing backup interface [ 831.462225][T15290] vcan1: left promiscuous mode [ 831.471031][T15290] bond2: (slave vcan2): Releasing backup interface [ 831.479288][T15290] vcan2: left promiscuous mode [ 832.075582][T15290] bond5: (slave vcan3): Releasing backup interface [ 832.092932][T15290] vcan3: left promiscuous mode [ 832.111571][T15290] bond7: (slave vcan4): Releasing backup interface [ 832.118832][T15290] vcan4: left promiscuous mode [ 832.168711][T15290] bond9: (slave vcan5): Releasing backup interface [ 832.177021][T15290] vcan5: left promiscuous mode [ 832.216425][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.225106][T15306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.287789][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.295375][T15306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.443010][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 835.055797][ T54] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 835.219735][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 835.338784][ T30] audit: type=1400 audit(1759325715.438:700): avc: denied { name_bind } for pid=15330 comm="syz.4.2370" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 835.340531][T15335] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 835.556971][ T30] audit: type=1400 audit(1759325715.447:701): avc: denied { ioctl } for pid=15330 comm="syz.4.2370" path="/dev/nvram" dev="devtmpfs" ino=622 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 835.584653][ T10] IPVS: starting estimator thread 0... [ 835.589237][ T54] usb 4-1: config 0 interface 0 has no altsetting 0 [ 835.627950][ T54] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 835.637535][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.655979][ T54] usb 4-1: Product: syz [ 835.699014][T15336] IPVS: using max 83 ests per chain, 199200 per kthread [ 835.734049][ T54] usb 4-1: Manufacturer: syz [ 835.757373][ T54] usb 4-1: SerialNumber: syz [ 835.765959][ T54] usb 4-1: config 0 descriptor?? [ 836.577994][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 836.777077][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 836.798402][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 836.904548][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.918417][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.933550][ T54] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 836.987150][ T54] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 837.396681][ T30] audit: type=1400 audit(1759325717.290:702): avc: denied { setopt } for pid=15355 comm="syz.4.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 838.819986][T15364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 839.563723][ T5888] usb 4-1: USB disconnect, device number 31 [ 839.569861][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 839.608747][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 839.633676][ T10] usb 2-1: can't read configurations, error -71 [ 841.588871][T15375] lo speed is unknown, defaulting to 1000 [ 842.464367][T15373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 843.340757][ T30] audit: type=1400 audit(1759325722.921:703): avc: denied { read } for pid=15378 comm="syz.4.2380" name="file0" dev="tmpfs" ino=2608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 844.015979][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 844.524577][T15396] hub 8-0:1.0: USB hub found [ 844.532720][T15396] hub 8-0:1.0: 1 port detected [ 845.365415][ T30] audit: type=1400 audit(1759325724.156:704): avc: denied { ioctl } for pid=15390 comm="syz.4.2384" path="socket:[50206]" dev="sockfs" ino=50206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 845.786571][T15399] CUSE: info not properly terminated [ 845.817815][ T30] audit: type=1400 audit(1759325725.176:705): avc: denied { write } for pid=15388 comm="syz.2.2383" name="card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 846.312987][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 849.317420][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 849.325005][ T10] usb 3-1: can't read configurations, error -71 [ 849.428547][ T5834] ------------[ cut here ]------------ [ 849.434031][ T5834] ida_free called for id=1272 which is not allocated. [ 849.453635][ T5834] WARNING: CPU: 1 PID: 5834 at lib/idr.c:592 ida_free+0x1f9/0x2e0 [ 849.462338][ T5834] Modules linked in: [ 849.466238][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 849.475886][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 849.486038][ T5834] RIP: 0010:ida_free+0x1f9/0x2e0 [ 849.491532][ T5834] Code: 75 f6 41 83 fe 3e 76 72 e8 44 5b 75 f6 48 8b 7c 24 28 4c 89 ee e8 47 39 0d 00 90 48 c7 c7 e0 cb cf 8c 89 ee e8 38 e6 33 f6 90 <0f> 0b 90 90 e8 1e 5b 75 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 849.511191][ T5834] RSP: 0000:ffffc90004017980 EFLAGS: 00010286 [ 849.517255][ T5834] RAX: 0000000000000000 RBX: 1ffff92000802f31 RCX: ffffffff8179a5b8 [ 849.525522][ T5834] RDX: ffff888024c9c900 RSI: ffffffff8179a5c5 RDI: 0000000000000001 [ 849.533536][ T5834] RBP: 00000000000004f8 R08: 0000000000000001 R09: 0000000000000000 [ 849.541531][ T5834] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888030a68000 [ 849.549491][ T5834] R13: 0000000000000293 R14: 00000000000000f8 R15: ffff888030a68018 [ 849.557787][ T5834] FS: 0000000000000000(0000) GS:ffff888124f71000(0000) knlGS:0000000000000000 [ 849.566745][ T5834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.573775][ T5834] CR2: 000020000000f000 CR3: 000000006de0a000 CR4: 00000000003526f0 [ 849.581743][ T5834] Call Trace: [ 849.585502][ T5834] [ 849.588426][ T5834] ? __pfx_ida_free+0x10/0x10 [ 849.593101][ T5834] ? kasan_quarantine_put+0x10a/0x240 [ 849.598503][ T5834] ? namespace_unlock+0x4e7/0x920 [ 849.603528][ T5834] ? kfree+0x2b4/0x4d0 [ 849.607631][ T5834] free_mnt_ns+0xe0/0x110 [ 849.611957][ T5834] namespace_unlock+0x542/0x920 [ 849.617134][ T5834] ? umount_tree+0xaa2/0xf00 [ 849.621724][ T5834] ? __pfx_namespace_unlock+0x10/0x10 [ 849.627144][ T5834] ? find_held_lock+0x2b/0x80 [ 849.631820][ T5834] ? put_mnt_ns+0xf0/0x120 [ 849.636236][ T5834] ? free_nsproxy+0x3a/0x400 [ 849.640868][ T5834] put_mnt_ns+0xf5/0x120 [ 849.645105][ T5834] free_nsproxy+0x3a/0x400 [ 849.649844][ T5834] switch_task_namespaces+0xeb/0x100 [ 849.655130][ T5834] do_exit+0x86a/0x2bf0 [ 849.659298][ T5834] ? find_held_lock+0x2b/0x80 [ 849.663981][ T5834] ? __pfx_do_exit+0x10/0x10 [ 849.668560][ T5834] ? do_raw_spin_lock+0x12c/0x2b0 [ 849.673621][ T5834] ? find_held_lock+0x2b/0x80 [ 849.678724][ T5834] do_group_exit+0xd3/0x2a0 [ 849.683677][ T5834] get_signal+0x2671/0x26d0 [ 849.688192][ T5834] ? __pfx_get_signal+0x10/0x10 [ 849.693082][ T5834] ? __do_sys_wait4+0xd1/0x170 [ 849.697844][ T5834] arch_do_signal_or_restart+0x8f/0x7c0 [ 849.703422][ T5834] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 849.709582][ T5834] ? __pfx_fput_close_sync+0x10/0x10 [ 849.715196][ T5834] ? dnotify_flush+0xa9/0x4c0 [ 849.719877][ T5834] exit_to_user_mode_loop+0x7a/0x100 [ 849.725194][ T5834] do_syscall_64+0x419/0x4e0 [ 849.729785][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.735709][ T5834] RIP: 0033:0x7f5377f85017 [ 849.740114][ T5834] Code: Unable to access opcode bytes at 0x7f5377f84fed. [ 849.748046][ T5834] RSP: 002b:00007ffeeda832a0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 849.756845][ T5834] RAX: fffffffffffffe00 RBX: 00000000000006b9 RCX: 00007f5377f85017 [ 849.764807][ T5834] RDX: 0000000040000000 RSI: 00007ffeeda8330c RDI: 00000000ffffffff [ 849.773172][ T5834] RBP: 00007ffeeda8330c R08: 0000000000000000 R09: 0000000000000000 [ 849.781462][ T5834] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001c5 [ 849.789862][ T5834] R13: 0000555588738590 R14: 00000000000c355c R15: 00007ffeeda83360 [ 849.797977][ T5834] [ 849.801040][ T5834] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 849.808305][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 849.817739][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 849.827768][ T5834] Call Trace: [ 849.831019][ T5834] [ 849.833921][ T5834] dump_stack_lvl+0x3d/0x1f0 [ 849.838485][ T5834] vpanic+0x6e8/0x7a0 [ 849.842437][ T5834] ? __pfx_vpanic+0x10/0x10 [ 849.846912][ T5834] ? ida_free+0x1f9/0x2e0 [ 849.851213][ T5834] panic+0xca/0xd0 [ 849.854903][ T5834] ? __pfx_panic+0x10/0x10 [ 849.859294][ T5834] ? check_panic_on_warn+0x1f/0xb0 [ 849.864383][ T5834] check_panic_on_warn+0xab/0xb0 [ 849.869311][ T5834] __warn+0xf6/0x3c0 [ 849.873185][ T5834] ? preempt_schedule_notrace+0x62/0xe0 [ 849.878710][ T5834] ? ida_free+0x1f9/0x2e0 [ 849.883019][ T5834] report_bug+0x3c3/0x580 [ 849.887330][ T5834] ? ida_free+0x1f9/0x2e0 [ 849.891637][ T5834] handle_bug+0x184/0x210 [ 849.895948][ T5834] exc_invalid_op+0x17/0x50 [ 849.900433][ T5834] asm_exc_invalid_op+0x1a/0x20 [ 849.905284][ T5834] RIP: 0010:ida_free+0x1f9/0x2e0 [ 849.910209][ T5834] Code: 75 f6 41 83 fe 3e 76 72 e8 44 5b 75 f6 48 8b 7c 24 28 4c 89 ee e8 47 39 0d 00 90 48 c7 c7 e0 cb cf 8c 89 ee e8 38 e6 33 f6 90 <0f> 0b 90 90 e8 1e 5b 75 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 849.929792][ T5834] RSP: 0000:ffffc90004017980 EFLAGS: 00010286 [ 849.935836][ T5834] RAX: 0000000000000000 RBX: 1ffff92000802f31 RCX: ffffffff8179a5b8 [ 849.943786][ T5834] RDX: ffff888024c9c900 RSI: ffffffff8179a5c5 RDI: 0000000000000001 [ 849.951735][ T5834] RBP: 00000000000004f8 R08: 0000000000000001 R09: 0000000000000000 [ 849.959684][ T5834] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888030a68000 [ 849.967630][ T5834] R13: 0000000000000293 R14: 00000000000000f8 R15: ffff888030a68018 [ 849.975581][ T5834] ? __warn_printk+0x198/0x350 [ 849.980321][ T5834] ? __warn_printk+0x1a5/0x350 [ 849.985064][ T5834] ? __pfx_ida_free+0x10/0x10 [ 849.989720][ T5834] ? kasan_quarantine_put+0x10a/0x240 [ 849.995082][ T5834] ? namespace_unlock+0x4e7/0x920 [ 850.000089][ T5834] ? kfree+0x2b4/0x4d0 [ 850.004140][ T5834] free_mnt_ns+0xe0/0x110 [ 850.008450][ T5834] namespace_unlock+0x542/0x920 [ 850.013283][ T5834] ? umount_tree+0xaa2/0xf00 [ 850.017855][ T5834] ? __pfx_namespace_unlock+0x10/0x10 [ 850.023210][ T5834] ? find_held_lock+0x2b/0x80 [ 850.027889][ T5834] ? put_mnt_ns+0xf0/0x120 [ 850.032286][ T5834] ? free_nsproxy+0x3a/0x400 [ 850.036860][ T5834] put_mnt_ns+0xf5/0x120 [ 850.041082][ T5834] free_nsproxy+0x3a/0x400 [ 850.045495][ T5834] switch_task_namespaces+0xeb/0x100 [ 850.050776][ T5834] do_exit+0x86a/0x2bf0 [ 850.054911][ T5834] ? find_held_lock+0x2b/0x80 [ 850.059575][ T5834] ? __pfx_do_exit+0x10/0x10 [ 850.064142][ T5834] ? do_raw_spin_lock+0x12c/0x2b0 [ 850.069148][ T5834] ? find_held_lock+0x2b/0x80 [ 850.073816][ T5834] do_group_exit+0xd3/0x2a0 [ 850.078307][ T5834] get_signal+0x2671/0x26d0 [ 850.082811][ T5834] ? __pfx_get_signal+0x10/0x10 [ 850.087650][ T5834] ? __do_sys_wait4+0xd1/0x170 [ 850.092398][ T5834] arch_do_signal_or_restart+0x8f/0x7c0 [ 850.097931][ T5834] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 850.104073][ T5834] ? __pfx_fput_close_sync+0x10/0x10 [ 850.109337][ T5834] ? dnotify_flush+0xa9/0x4c0 [ 850.114001][ T5834] exit_to_user_mode_loop+0x7a/0x100 [ 850.119272][ T5834] do_syscall_64+0x419/0x4e0 [ 850.123854][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.129728][ T5834] RIP: 0033:0x7f5377f85017 [ 850.134128][ T5834] Code: Unable to access opcode bytes at 0x7f5377f84fed. [ 850.141123][ T5834] RSP: 002b:00007ffeeda832a0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 850.149514][ T5834] RAX: fffffffffffffe00 RBX: 00000000000006b9 RCX: 00007f5377f85017 [ 850.157463][ T5834] RDX: 0000000040000000 RSI: 00007ffeeda8330c RDI: 00000000ffffffff [ 850.165411][ T5834] RBP: 00007ffeeda8330c R08: 0000000000000000 R09: 0000000000000000 [ 850.173362][ T5834] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001c5 [ 850.181313][ T5834] R13: 0000555588738590 R14: 00000000000c355c R15: 00007ffeeda83360 [ 850.189276][ T5834] [ 850.192459][ T5834] Kernel Offset: disabled [ 850.196760][ T5834] Rebooting in 86400 seconds..