last executing test programs: 4m30.951217526s ago: executing program 4 (id=694): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x800000000000009, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0xc, 0x7], 0x54000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m30.657959513s ago: executing program 4 (id=696): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4m30.510516794s ago: executing program 4 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendfile(r4, r3, 0x0, 0xffba83) 4m29.365381218s ago: executing program 4 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 4m28.241004871s ago: executing program 4 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000a40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m27.272825237s ago: executing program 4 (id=706): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000000c"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 4m11.971766404s ago: executing program 32 (id=706): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000000c"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 1m6.371563751s ago: executing program 3 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m5.35951269s ago: executing program 3 (id=1357): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 1m2.041988891s ago: executing program 3 (id=1366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 59.457963156s ago: executing program 3 (id=1374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f0000000100)={0xa, 0x4e22, 0xcf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="1c", 0x1}], 0x1}, 0x20000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) 57.972081546s ago: executing program 3 (id=1379): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000007100)={0x78, 0x0, r3, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 54.872012194s ago: executing program 3 (id=1388): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 39.765026595s ago: executing program 33 (id=1388): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 16.464350497s ago: executing program 0 (id=1490): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xb8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r4, 0x3}}, 0x18) 14.304629846s ago: executing program 6 (id=1498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 12.900384911s ago: executing program 0 (id=1501): ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, 0x0, 0x2008c000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.012110333s ago: executing program 6 (id=1503): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.954235924s ago: executing program 1 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.680143964s ago: executing program 0 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 9.652346262s ago: executing program 6 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x200000000000de) 7.818846422s ago: executing program 2 (id=1511): r0 = socket$unix(0x1, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.814474152s ago: executing program 1 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004) 7.771710732s ago: executing program 5 (id=1513): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, &(0x7f0000001940)=""/4120, 0x1018) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.759885402s ago: executing program 5 (id=1514): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000e, 0x200000005c831, 0xffffffffffffffff, 0x3000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) 6.556646264s ago: executing program 0 (id=1515): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fchdir(0xffffffffffffffff) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 6.274949961s ago: executing program 1 (id=1516): gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = syz_io_uring_setup(0x356, &(0x7f0000000200)={0x0, 0xd87, 0x80, 0x2, 0x149}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000010001, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r5, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.835113627s ago: executing program 6 (id=1517): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 5.82631543s ago: executing program 1 (id=1518): fchdir(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='test_dummy_encryption', &(0x7f0000000180)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 4.754908205s ago: executing program 2 (id=1519): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) 4.331733769s ago: executing program 1 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 3.914236515s ago: executing program 6 (id=1521): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000007c0)=""/126) timerfd_create(0x0, 0x80000) 3.828796865s ago: executing program 2 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2}], 0x1, 0x4040840) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 3.621776466s ago: executing program 1 (id=1523): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect(0x5, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) 3.1203518s ago: executing program 0 (id=1524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_settime(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 3.055575895s ago: executing program 5 (id=1525): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000001f40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0xfffffffffffffffd, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000180)=0xdc39) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x7, 0x4) 2.865380998s ago: executing program 2 (id=1526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165cc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.91715993s ago: executing program 5 (id=1527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r3, &(0x7f0000000e00)=[{{&(0x7f0000000340), 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000013c0)=@abs, 0x6e, 0x0}}], 0x2, 0x26022, 0x0) 1.755238905s ago: executing program 2 (id=1528): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x40, @loopback, 0x6}}, 0x3, 0x6}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd7f, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, 0x0) ptrace(0x4211, r0) socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 969.156183ms ago: executing program 5 (id=1529): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 924.741135ms ago: executing program 6 (id=1530): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0}) 591.303031ms ago: executing program 2 (id=1531): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 226.314475ms ago: executing program 5 (id=1532): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x157) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000013a000/0x3000)=nil, &(0x7f000002c000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000025000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002e7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(0x0, 0xc4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1533): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000080)=0x4a) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): s up, enabling it in 0 ms [ 256.016703][ T30] audit: type=1400 audit(1771015281.857:453): avc: denied { map } for pid=8835 comm="syz.3.836" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 256.042415][ T30] audit: type=1400 audit(1771015281.857:454): avc: denied { execute } for pid=8835 comm="syz.3.836" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 256.070680][ T7635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.076175][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.091489][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.200856][ T1144] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.210901][ T1144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.731236][ T5881] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 257.882854][ T5881] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 257.900055][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.917227][ T5881] usb 6-1: config 0 descriptor?? [ 258.822206][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 259.012696][ T29] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.797832][ T29] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.812760][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.826099][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.837304][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.850676][ T29] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.860160][ T29] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.868511][ T29] usb 4-1: Product: syz [ 259.872889][ T29] usb 4-1: Manufacturer: syz [ 259.920372][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 259.925903][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 259.937264][ T29] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 259.943460][ T29] cdc_wdm 4-1:1.0: Unknown control protocol [ 259.975011][ T30] audit: type=1400 audit(1771015286.047:455): avc: denied { write } for pid=8888 comm="syz.2.847" name="route" dev="proc" ino=4026532921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 260.133946][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 260.163822][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 260.173728][ T30] audit: type=1400 audit(1771015286.237:456): avc: denied { read write } for pid=8865 comm="syz.3.843" name="cdc-wdm0" dev="devtmpfs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 260.226745][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 260.233505][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 260.240300][ T30] audit: type=1400 audit(1771015286.247:457): avc: denied { open } for pid=8865 comm="syz.3.843" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 260.241450][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 260.270492][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 260.272161][ T5892] usb 4-1: USB disconnect, device number 12 [ 260.276537][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 260.279149][ T8866] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 260.531391][ T7641] net_ratelimit: 41 callbacks suppressed [ 260.531409][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.544883][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.661285][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.669097][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.781037][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.788802][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.827166][ T5881] pegasus 6-1:0.0: setup Pegasus II specific registers [ 260.901073][ T7635] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.908837][ T7635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.072072][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.079836][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 261.144919][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 261.155911][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 261.569707][ T5881] pegasus 6-1:0.0: can't locate MII phy, using default [ 261.593605][ T5881] pegasus 6-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 69:fc:ad:d8:9d:8f [ 261.616873][ T5881] usb 6-1: USB disconnect, device number 2 [ 262.037004][ T30] audit: type=1400 audit(1771015288.097:458): avc: denied { bind } for pid=8930 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.895936][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'. [ 263.418632][ T30] audit: type=1400 audit(1771015289.487:459): avc: denied { read } for pid=8915 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 264.000970][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.004484][ T30] audit: type=1326 audit(1771015290.057:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.5.867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac9399bf79 code=0x0 [ 264.087852][ T8981] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 264.114599][ T8981] smc: adding net device bond0 with user defined pnetid SYZ2 [ 264.123406][ T8981] bond0: entered promiscuous mode [ 264.128761][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.157612][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 264.175323][ T8981] bond0: entered allmulticast mode [ 264.198127][ T5873] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.199175][ T8981] bond0: (slave bridge1): making interface the new active one [ 264.210676][ T5873] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.225854][ T8981] bridge1: entered promiscuous mode [ 264.231091][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.240246][ T8981] bridge1: entered allmulticast mode [ 264.246574][ T8981] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 264.255300][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.281206][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.294590][ T5873] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.317192][ T8985] 8021q: VLANs not supported on ip6tnl0 [ 264.320678][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.332174][ T5873] usb 3-1: Product: syz [ 264.336333][ T5873] usb 3-1: Manufacturer: syz [ 264.346902][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 264.353622][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 264.363812][ T5873] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 264.369711][ T5873] cdc_wdm 3-1:1.0: Unknown control protocol [ 264.400883][ T30] audit: type=1400 audit(1771015290.467:461): avc: denied { listen } for pid=8989 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.420690][ T30] audit: type=1400 audit(1771015290.467:462): avc: denied { accept } for pid=8989 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.628992][ T5812] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 264.784324][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.790942][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.797207][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.803792][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.810040][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.816618][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.823054][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.829634][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.835858][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.842436][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.848694][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.855270][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.861529][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.868107][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.874339][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 264.880920][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 264.890288][ T5873] usb 3-1: USB disconnect, device number 10 [ 264.890331][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 265.870756][ T7635] net_ratelimit: 68 callbacks suppressed [ 265.870775][ T7635] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.920940][ T7635] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.929442][ T7635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.040664][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.048583][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.202784][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.210539][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.344149][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.372153][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 266.491559][ T7635] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.358290][ T30] audit: type=1400 audit(1771015294.417:463): avc: denied { setattr } for pid=9039 comm="syz.5.883" name="NETLINK" dev="sockfs" ino=24613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.784968][ T30] audit: type=1326 audit(1771015296.857:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 270.846757][ T30] audit: type=1326 audit(1771015296.857:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 270.943961][ T30] audit: type=1326 audit(1771015296.857:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 270.991332][ T7641] net_ratelimit: 43 callbacks suppressed [ 270.991347][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.028922][ T30] audit: type=1326 audit(1771015296.857:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 271.062878][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.116587][ T30] audit: type=1326 audit(1771015296.857:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 271.180889][ T3542] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.183314][ T9078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.197760][ T3542] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.223748][ T30] audit: type=1326 audit(1771015296.857:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 271.248449][ T30] audit: type=1326 audit(1771015296.857:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 271.273278][ T30] audit: type=1326 audit(1771015296.857:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 271.300093][ T30] audit: type=1326 audit(1771015296.857:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 271.352529][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.376839][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.510784][ T7635] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.518541][ T7635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.064568][ T1144] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 272.074020][ T1144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.371326][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 274.371358][ T30] audit: type=1400 audit(1771015300.407:536): avc: denied { getopt } for pid=9137 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.101116][ T7641] net_ratelimit: 54 callbacks suppressed [ 276.101130][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.144779][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.281405][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.306082][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.482744][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.491536][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.636975][ T3542] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.682200][ T3542] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.853170][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.948202][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 277.058971][ T9182] befs: (nbd5): No write support. Marking filesystem read-only [ 277.070539][ T30] audit: type=1400 audit(1771015303.127:537): avc: denied { create } for pid=9181 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 277.152621][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.911'. [ 277.163787][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.911'. [ 277.180107][ T30] audit: type=1400 audit(1771015303.127:538): avc: denied { mounton } for pid=9181 comm="syz.5.911" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 277.214984][ T30] audit: type=1400 audit(1771015303.187:539): avc: denied { ioctl } for pid=9181 comm="syz.5.911" path="socket:[24123]" dev="sockfs" ino=24123 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 278.166337][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.914'. [ 278.505060][ T9198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9198 comm=syz.5.914 [ 281.151255][ T1144] net_ratelimit: 37 callbacks suppressed [ 281.151274][ T1144] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.174731][ T1144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 281.310943][ T1144] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.318726][ T1144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 281.440773][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.448877][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 281.562531][ T7635] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.580458][ T7635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 281.711225][ T1144] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.751245][ T1144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 281.846089][ T9154] syz.3.905 (9154): drop_caches: 3 [ 281.951655][ T9238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.928'. [ 281.961697][ T9238] netlink: 59 bytes leftover after parsing attributes in process `syz.3.928'. [ 281.978573][ T9238] netlink: 59 bytes leftover after parsing attributes in process `syz.3.928'. [ 282.460423][ T9238] Cannot find set identified by id 0 to match [ 282.874169][ T9247] netlink: 'syz.1.930': attribute type 6 has an invalid length. [ 286.451017][ T8239] net_ratelimit: 60 callbacks suppressed [ 286.451038][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.511442][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 286.653153][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.679885][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 286.801073][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.808925][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 286.891050][ T9291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.920887][ T3542] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.932313][ T9290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.945658][ T3542] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.116303][ T3542] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 287.143459][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 287.279758][ T30] audit: type=1326 audit(1771015313.347:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.324006][ T30] audit: type=1326 audit(1771015313.347:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.370916][ T30] audit: type=1326 audit(1771015313.347:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.421200][ T30] audit: type=1326 audit(1771015313.347:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.461247][ T30] audit: type=1326 audit(1771015313.347:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.509354][ T30] audit: type=1326 audit(1771015313.387:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.538178][ T30] audit: type=1326 audit(1771015313.387:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.571281][ T30] audit: type=1326 audit(1771015313.387:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.608356][ T30] audit: type=1326 audit(1771015313.387:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.677173][ T30] audit: type=1326 audit(1771015313.387:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb139bf79 code=0x7ffc0000 [ 287.781972][ T9312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9312 comm=syz.2.949 [ 287.826315][ T9312] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 287.892497][ T9312] bond0: (slave gretap1): making interface the new active one [ 287.903836][ T9312] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 287.936215][ T9312] vlan2: entered allmulticast mode [ 287.943915][ T9312] bond0: entered allmulticast mode [ 287.952421][ T9312] gretap1: entered allmulticast mode [ 287.968700][ T9312] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 289.740460][ T9330] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 289.845234][ T9330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.896946][ T9338] bond1: (slave gretap1): making interface the new active one [ 289.906398][ T9338] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 291.190226][ T9354] 8021q: VLANs not supported on ip6tnl0 [ 291.532995][ T7641] net_ratelimit: 72 callbacks suppressed [ 291.533008][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.875683][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.061911][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 292.089401][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.262003][ T1144] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 292.269743][ T1144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.452703][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 292.476032][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 292.661355][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 292.685910][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 295.651167][ T5892] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 295.974078][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.999541][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 296.157466][ T5892] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.208478][ T5892] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 296.330247][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.642830][ T3542] net_ratelimit: 64 callbacks suppressed [ 296.642844][ T3542] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.658812][ T3542] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.712446][ T5892] hub 3-1:1.0: bad descriptor, ignoring hub [ 296.735161][ T5892] hub 3-1:1.0: probe with driver hub failed with error -5 [ 296.783634][ T3542] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.802713][ T3542] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.803123][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 296.931189][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 296.941073][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.958954][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.981176][ T5892] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 297.109710][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 297.128002][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.306791][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 297.318443][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.372250][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 298.372267][ T30] audit: type=1400 audit(1771015324.447:577): avc: denied { map } for pid=9465 comm="syz.5.985" path="socket:[25110]" dev="sockfs" ino=25110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.374358][ T9470] syzkaller0: entered promiscuous mode [ 298.378442][ T30] audit: type=1400 audit(1771015324.447:578): avc: denied { accept } for pid=9465 comm="syz.5.985" path="socket:[25110]" dev="sockfs" ino=25110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.473150][ T9470] syzkaller0: entered allmulticast mode [ 298.751316][ T974] usb 3-1: USB disconnect, device number 11 [ 300.015245][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 300.496684][ T29] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 300.975641][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.985978][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 301.000749][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.009920][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.055009][ T29] usb 3-1: config 0 descriptor?? [ 301.069886][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 301.808321][ T36] net_ratelimit: 64 callbacks suppressed [ 301.808340][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.863800][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 301.922154][ T29] usb 3-1: USB disconnect, device number 12 [ 301.991435][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.058363][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.200667][ T974] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.208317][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.220094][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.539247][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.553683][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.558245][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.571073][ T974] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 302.612250][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.648457][ T974] usb 4-1: config 0 descriptor?? [ 302.675753][ T974] pwc: Askey VC010 type 2 USB webcam detected. [ 302.701399][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.722745][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 302.841032][ T9549] syzkaller0: entered promiscuous mode [ 302.846594][ T9549] syzkaller0: entered allmulticast mode [ 302.907873][ T9551] syzkaller0: entered promiscuous mode [ 302.936755][ T9551] syzkaller0: entered allmulticast mode [ 303.084928][ T974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 303.106330][ T974] pwc: recv_control_msg error -32 req 02 val 2700 [ 303.125032][ T974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 303.152721][ T974] pwc: recv_control_msg error -32 req 04 val 1000 [ 303.168784][ T974] pwc: recv_control_msg error -32 req 04 val 1300 [ 303.188273][ T974] pwc: recv_control_msg error -32 req 04 val 1400 [ 303.208701][ T974] pwc: recv_control_msg error -32 req 02 val 2000 [ 303.223858][ T974] pwc: recv_control_msg error -32 req 02 val 2100 [ 303.244218][ T974] pwc: recv_control_msg error -32 req 04 val 1500 [ 303.261516][ T974] pwc: recv_control_msg error -32 req 02 val 2500 [ 303.585038][ T974] pwc: recv_control_msg error -71 req 02 val 2600 [ 303.594076][ T974] pwc: recv_control_msg error -71 req 02 val 2900 [ 303.603193][ T974] pwc: recv_control_msg error -71 req 02 val 2800 [ 303.610426][ T974] pwc: recv_control_msg error -71 req 04 val 1100 [ 303.617269][ T974] pwc: recv_control_msg error -71 req 04 val 1200 [ 303.761813][ T974] pwc: Registered as video103. [ 303.775939][ T974] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 305.020313][ T30] audit: type=1400 audit(1771015330.857:579): avc: denied { read } for pid=5158 comm="acpid" name="event4" dev="devtmpfs" ino=3188 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.050953][ T974] usb 4-1: USB disconnect, device number 13 [ 305.116426][ T30] audit: type=1400 audit(1771015330.857:580): avc: denied { open } for pid=5158 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3188 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.340547][ T30] audit: type=1400 audit(1771015330.857:581): avc: denied { ioctl } for pid=5158 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3188 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.823074][ T8241] net_ratelimit: 53 callbacks suppressed [ 306.823091][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.892889][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.908737][ T9598] fuse: Bad value for 'fd' [ 306.969303][ T9598] netlink: 'syz.1.1025': attribute type 5 has an invalid length. [ 307.021704][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.145174][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.266480][ T8250] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.361455][ T8250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.699199][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 308.035333][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.265142][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 308.281154][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.331545][ T9632] syzkaller0: entered promiscuous mode [ 308.337023][ T9632] syzkaller0: entered allmulticast mode [ 309.792880][ T9657] syzkaller0: entered promiscuous mode [ 309.798429][ T9657] syzkaller0: entered allmulticast mode [ 310.348537][ T30] audit: type=1326 audit(1771015336.417:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.3.1037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb139bf79 code=0x0 [ 310.412284][ T30] audit: type=1326 audit(1771015336.477:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.3.1037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb139bf79 code=0x0 [ 311.679353][ T30] audit: type=1400 audit(1771015337.727:584): avc: denied { name_connect } for pid=9674 comm="syz.3.1041" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 312.072205][ T8239] net_ratelimit: 56 callbacks suppressed [ 312.072224][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.086049][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.225055][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.246853][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.466304][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.889224][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.042562][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 313.641073][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.766603][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 313.776273][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.126210][ T5812] Bluetooth: hci5: link tx timeout [ 315.132849][ T5812] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 315.982124][ T9711] tipc: Started in network mode [ 315.987002][ T9711] tipc: Node identity d620edb670a5, cluster identity 4711 [ 316.091934][ T9711] tipc: Enabled bearer , priority 0 [ 316.145880][ T9716] syzkaller0: entered promiscuous mode [ 316.152136][ T9716] syzkaller0: entered allmulticast mode [ 316.168927][ T9711] tipc: Resetting bearer [ 316.208666][ T9710] tipc: Resetting bearer [ 316.249693][ T9710] tipc: Disabling bearer [ 316.711506][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.717831][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.501065][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 317.508497][ T7622] net_ratelimit: 29 callbacks suppressed [ 317.508508][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.533207][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.812524][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.842840][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.310242][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 318.461158][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.611729][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 318.630629][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 318.757404][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 318.770976][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 320.716753][ T30] audit: type=1400 audit(1771015346.777:585): avc: denied { bind } for pid=9750 comm="syz.5.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 320.740026][ T30] audit: type=1400 audit(1771015346.777:586): avc: denied { read } for pid=9750 comm="syz.5.1065" path="socket:[25539]" dev="sockfs" ino=25539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 320.810621][ T30] audit: type=1400 audit(1771015346.857:587): avc: denied { setopt } for pid=9750 comm="syz.5.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 320.947033][ T5812] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 321.312445][ T9763] netlink: 'syz.5.1066': attribute type 10 has an invalid length. [ 321.338248][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.347427][ T9763] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 321.363862][ T9763] netlink: 'syz.5.1066': attribute type 10 has an invalid length. [ 321.372177][ T9763] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1066'. [ 321.381940][ T9763] batadv0: entered promiscuous mode [ 321.387192][ T9763] batadv0: entered allmulticast mode [ 321.407798][ T9763] bond0: (slave batadv0): Releasing backup interface [ 321.542959][ T9763] bridge0: port 3(batadv0) entered blocking state [ 321.549547][ T9763] bridge0: port 3(batadv0) entered disabled state [ 321.711554][ T7622] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 321.721015][ T7622] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 321.876818][ T9773] mmap: syz.2.1068 (9773) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 322.587380][ T6107] net_ratelimit: 46 callbacks suppressed [ 322.587398][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 322.641229][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 322.913068][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 322.927349][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 323.052288][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 323.071792][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 323.536000][ T9785] SET target dimension over the limit! [ 323.708463][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 323.889070][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.124280][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.132925][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.804281][ T30] audit: type=1400 audit(1771015351.877:588): avc: denied { firmware_load } for pid=9805 comm="syz.5.1077" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 325.834413][ T9808] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 325.845827][ T974] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 325.861497][ T9808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 325.874487][ T9808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 325.891058][ T30] audit: type=1400 audit(1771015351.947:589): avc: denied { firmware_load } for pid=9805 comm="syz.5.1077" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 325.986857][ T9808] syz.5.1077 (9808) used greatest stack depth: 19880 bytes left [ 326.032221][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 326.044287][ T974] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 326.053594][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.061655][ T974] usb 3-1: Product: syz [ 326.065886][ T974] usb 3-1: Manufacturer: syz [ 326.070467][ T974] usb 3-1: SerialNumber: syz [ 326.145077][ T974] usb 3-1: config 0 descriptor?? [ 326.218752][ T9827] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 326.347500][ T9827] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 326.358161][ T9827] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 326.627905][ T9829] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 326.636077][ T974] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 326.649043][ T9827] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 326.658708][ T9827] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 326.670964][ T9827] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 327.667982][ T6107] net_ratelimit: 37 callbacks suppressed [ 327.668000][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.682314][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.791266][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.799205][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.911197][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.919246][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.031154][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 328.121243][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.303259][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 328.312005][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.400163][ T974] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 328.431250][ T974] usb 3-1: USB disconnect, device number 13 [ 330.744684][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 330.941077][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 330.947899][ T5892] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 330.978660][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.998922][ T5892] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.019369][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 331.059846][ T5892] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 331.111711][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.132519][ T5892] usb 6-1: config 0 descriptor?? [ 331.138046][ T9867] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 331.560951][ T974] usb 6-1: USB disconnect, device number 3 [ 332.902356][ T8239] net_ratelimit: 54 callbacks suppressed [ 332.902391][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 333.040322][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.172945][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 333.181492][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.385122][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 333.393768][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.741295][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 333.749197][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.938435][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.075414][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.050647][ T30] audit: type=1400 audit(1771015361.097:590): avc: denied { read } for pid=9920 comm="syz.5.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 336.091649][ T9960] syzkaller0: entered promiscuous mode [ 336.097546][ T9960] syzkaller0: entered allmulticast mode [ 338.004266][ T7641] net_ratelimit: 51 callbacks suppressed [ 338.004285][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 338.037635][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.193469][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 338.211576][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.331308][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 338.359529][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.632576][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 338.971555][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 339.152019][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 339.159826][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.374191][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 342.161189][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 342.729016][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 342.765612][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 342.783774][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 342.799721][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 342.816371][ T9] usb 4-1: Product: syz [ 342.825679][ T9] usb 4-1: Manufacturer: syz [ 342.830337][ T9] usb 4-1: SerialNumber: syz [ 343.070850][ T7641] net_ratelimit: 46 callbacks suppressed [ 343.070870][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 343.092125][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.128018][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 343.136396][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 343.210809][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 343.218960][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.551142][ T9] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 343.556311][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 343.567582][ T9] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 343.576609][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 343.586597][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 343.601453][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.605501][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 343.627279][ T9] usb 4-1: USB disconnect, device number 14 [ 343.652877][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 343.683118][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 343.705382][ T9] visor 4-1:1.0: device disconnected [ 343.723476][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 343.733128][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.854240][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 343.880793][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 344.021642][ T30] audit: type=1400 audit(1771015370.097:591): avc: denied { mount } for pid=10037 comm="syz.5.1137" name="/" dev="ramfs" ino=26514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 344.083667][ T30] audit: type=1804 audit(1771015370.117:592): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1137" name="bus" dev="ramfs" ino=27068 res=1 errno=0 [ 345.989289][T10066] input: syz1 as /devices/virtual/input/input10 [ 346.063213][ T30] audit: type=1804 audit(1771015372.057:593): pid=10065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1144" name="/newroot/82/bus/bus" dev="overlay" ino=444 res=1 errno=0 [ 346.322396][ T30] audit: type=1804 audit(1771015372.237:594): pid=10065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1144" name="/newroot/82/bus/bus" dev="overlay" ino=444 res=1 errno=0 [ 348.291601][ T7641] net_ratelimit: 52 callbacks suppressed [ 348.291621][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.924869][ T30] audit: type=1400 audit(1771015374.657:595): avc: denied { create } for pid=10081 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 349.110002][ T30] audit: type=1400 audit(1771015374.717:596): avc: denied { bind } for pid=10081 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 349.136572][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.270670][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 349.841596][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.849359][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.031508][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 350.076069][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.613201][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 350.671272][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.027416][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.480637][ T5873] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 351.552508][ T30] audit: type=1804 audit(1771015377.627:597): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1155" name="file0" dev="tmpfs" ino=1565 res=1 errno=0 [ 351.554154][T10107] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 351.590899][T10107] ref_ctr increment failed for inode: 0x61d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037df6200 [ 351.651793][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 351.662349][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.677023][ T5873] usb 4-1: config 4 interface 0 has no altsetting 0 [ 351.684628][T10104] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 351.692884][ T5873] usb 4-1: string descriptor 0 read error: -22 [ 351.696929][T10104] ref_ctr decrement failed for inode: 0x61d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037df6200 [ 351.699967][ T5873] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 351.711978][T10104] uprobe: syz.1.1155:10104 failed to unregister, leaking uprobe [ 351.738727][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.879823][ T5873] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 351.890304][ T5873] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 351.903217][ T5873] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 352.867357][ T5873] usb 4-1: media controller created [ 352.881680][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.902459][ T5873] zl10353_read_register: readreg error (reg=127, ret==0) [ 353.135161][ T5873] usb 4-1: USB disconnect, device number 15 [ 353.323376][ T13] net_ratelimit: 22 callbacks suppressed [ 353.323393][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.339528][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.455901][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.463941][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.581063][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.588875][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.700714][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.708908][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.831320][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.839264][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.897892][ T5873] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 354.061902][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.081417][ T5873] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.095329][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.111639][ T5873] usb 3-1: config 0 descriptor?? [ 354.197514][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 354.755576][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.761498][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 355.780337][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 356.350423][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 356.359333][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 356.368729][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 356.481357][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 356.488460][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 356.834564][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 356.938278][ T5873] pwc: recv_control_msg error -32 req 02 val 2500 [ 356.945743][ T5873] pwc: recv_control_msg error -32 req 02 val 2400 [ 358.047829][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 358.100731][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 358.111078][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 358.131496][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 358.160827][ T5873] pwc: Registered as video103. [ 358.169816][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 358.204050][ T5873] usb 3-1: USB disconnect, device number 14 [ 358.905818][ T12] net_ratelimit: 53 callbacks suppressed [ 358.905836][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.927192][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 359.051033][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.066049][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 359.244505][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.346279][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 359.435528][ T30] audit: type=1400 audit(1771015385.507:598): avc: denied { ioctl } for pid=10184 comm="syz.1.1171" path="socket:[27825]" dev="sockfs" ino=27825 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 359.532890][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.581542][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.611492][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.623180][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 359.695474][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86e [ 359.740448][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x821 [ 359.810674][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80c [ 359.819740][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8b6 [ 359.912690][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 359.970356][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1d [ 359.984827][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8db [ 360.036218][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x97 [ 360.147644][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x896 [ 360.168501][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8b7 [ 360.178179][T10189] kvm: kvm [10188]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x83 [ 361.634011][T10202] bridge0: port 3(vlan2) entered blocking state [ 361.658124][T10202] bridge0: port 3(vlan2) entered disabled state [ 361.697067][T10202] vlan2: entered allmulticast mode [ 361.704800][T10202] bridge0: entered allmulticast mode [ 361.865369][T10202] vlan2: left allmulticast mode [ 361.876612][T10202] bridge0: left allmulticast mode [ 363.908680][T10229] netlink: 'syz.3.1190': attribute type 4 has an invalid length. [ 363.980861][ T7641] net_ratelimit: 40 callbacks suppressed [ 363.980877][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.033661][T10228] tipc: Enabled bearer , priority 0 [ 364.215610][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.513736][T10228] syzkaller0: entered promiscuous mode [ 364.519533][T10228] syzkaller0: entered allmulticast mode [ 364.528337][T10228] tipc: Resetting bearer [ 364.549797][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.644139][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.903360][T10226] tipc: Resetting bearer [ 365.012002][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.030825][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.060677][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.612540][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.712262][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.751071][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.216513][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'. [ 369.009129][ T12] net_ratelimit: 98 callbacks suppressed [ 369.009149][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.082215][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.104674][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.141237][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.160921][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.191253][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.221146][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.241235][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.261360][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.338508][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.916508][ T30] audit: type=1400 audit(1771015395.987:599): avc: denied { create } for pid=10276 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 369.948645][ T30] audit: type=1400 audit(1771015395.987:600): avc: denied { wake_alarm } for pid=10276 comm="syz.3.1204" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.972277][ T30] audit: type=1400 audit(1771015396.047:601): avc: denied { read } for pid=10276 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.198159][T10226] tipc: Disabling bearer [ 370.206337][ T5873] tipc: Node number set to 2793794998 [ 370.546004][T10287] affs: No valid root block on device nullb0 [ 371.354158][ T30] audit: type=1400 audit(1771015396.617:602): avc: denied { mounton } for pid=10282 comm="syz.2.1207" path="/230/file0" dev="tmpfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 371.431864][T10293] syzkaller0: entered promiscuous mode [ 371.440695][T10293] syzkaller0: entered allmulticast mode [ 373.714137][ T30] audit: type=1400 audit(1771015399.787:603): avc: denied { create } for pid=10336 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 373.744420][T10337] loop7: detected capacity change from 0 to 16384 [ 373.834251][ T30] audit: type=1400 audit(1771015399.807:604): avc: denied { getopt } for pid=10336 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.142278][ T8241] net_ratelimit: 80 callbacks suppressed [ 374.142296][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.206013][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.297159][T10347] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1224'. [ 374.311067][ T30] audit: type=1400 audit(1771015400.347:605): avc: denied { create } for pid=10345 comm="syz.5.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.521977][T10340] loop7: detected capacity change from 16384 to 0 [ 374.529054][ C1] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 374.529068][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.529094][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.871322][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.891098][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.032651][T10360] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1227'. [ 375.054784][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.253021][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.362246][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.524555][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.174144][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.180408][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.061502][ T974] libceph: connect (1)[c::]:6789 error -101 [ 379.075363][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 379.181756][ T8241] net_ratelimit: 40 callbacks suppressed [ 379.181776][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.200857][ T974] libceph: connect (1)[c::]:6789 error -101 [ 379.227107][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 379.250707][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.507453][T10399] ceph: No mds server is up or the cluster is laggy [ 379.535493][ T974] libceph: connect (1)[c::]:6789 error -101 [ 379.623826][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.634610][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 379.673706][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.821265][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.829010][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.993208][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.074840][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.191226][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.220432][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.915310][T10425] syz.5.1242 (10425): drop_caches: 2 [ 382.371135][ T5892] IPVS: starting estimator thread 0... [ 382.483150][T10429] IPVS: using max 39 ests per chain, 93600 per kthread [ 383.285706][T10443] syz_tun: left allmulticast mode [ 383.417311][T10443] syz_tun: left promiscuous mode [ 383.438451][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 383.450852][T10443] bridge0: port 3(syz_tun) entered disabled state [ 383.872073][T10443] bridge_slave_0: left allmulticast mode [ 383.878707][T10443] bridge_slave_0: left promiscuous mode [ 383.885702][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.982336][T10443] bridge_slave_1: left allmulticast mode [ 384.009543][T10443] bridge_slave_1: left promiscuous mode [ 384.037106][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.077648][T10443] team0: Port device team_slave_0 removed [ 384.120281][T10443] team0: Port device team_slave_1 removed [ 384.131273][T10443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.199731][ T8239] net_ratelimit: 43 callbacks suppressed [ 384.207891][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.241569][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.266218][T10443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.280732][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.447848][T10443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.471018][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.511476][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.519805][ T8239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 384.554153][T10459] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 384.705918][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.771319][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.791561][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.866565][T10447] team0: Mode changed to "loadbalance" [ 385.216115][ T30] audit: type=1400 audit(1771015411.287:606): avc: denied { create } for pid=10460 comm="syz.5.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 385.237246][ T30] audit: type=1400 audit(1771015411.287:607): avc: denied { connect } for pid=10460 comm="syz.5.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 385.324571][ T30] audit: type=1400 audit(1771015411.397:608): avc: denied { getopt } for pid=10460 comm="syz.5.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.370081][ T30] audit: type=1400 audit(1771015411.427:609): avc: denied { ioctl } for pid=10460 comm="syz.5.1252" path="socket:[28231]" dev="sockfs" ino=28231 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 385.402987][T10471] binder: BINDER_SET_CONTEXT_MGR already set [ 385.408996][T10471] binder: 10470:10471 ioctl 4018620d 200000004a80 returned -16 [ 386.044333][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 386.053609][ T30] audit: type=1400 audit(1771015412.047:610): avc: denied { setopt } for pid=10478 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.541858][ T5892] usb 6-1: config 0 has no interfaces? [ 386.547461][ T5892] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 386.611161][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.692094][ T5892] usb 6-1: config 0 descriptor?? [ 386.830392][T10511] netlink: 'syz.3.1257': attribute type 2 has an invalid length. [ 386.838805][T10511] netlink: 'syz.3.1257': attribute type 8 has an invalid length. [ 386.847203][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1257'. [ 387.227608][ T24] usb 6-1: USB disconnect, device number 4 [ 387.280068][T10505] syzkaller0: entered promiscuous mode [ 387.302935][T10505] syzkaller0: entered allmulticast mode [ 389.422358][ T7639] net_ratelimit: 91 callbacks suppressed [ 389.422372][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.448255][ T30] audit: type=1400 audit(1771015415.517:611): avc: denied { append } for pid=10539 comm="syz.3.1267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 389.472720][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.500653][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.530786][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.560670][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.608995][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.736654][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.790643][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.830706][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.860952][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.499496][T10550] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 391.840200][T10545] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 391.854761][T10550] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 393.180340][T10584] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 393.214652][T10584] team0: Port device dummy0 added [ 393.260307][T10584] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 393.526819][ T30] audit: type=1400 audit(1771015419.597:612): avc: denied { shutdown } for pid=10583 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 393.562007][T10584] team0: Port device dummy0 removed [ 393.570194][T10584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 394.432783][ T8241] net_ratelimit: 105 callbacks suppressed [ 394.432801][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.884744][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.128478][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.829654][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.952536][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.967974][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.110722][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.244546][T10609] batadv_slave_0: entered promiscuous mode [ 396.252084][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.276928][T10609] batman_adv: batadv0: Adding interface: macvtap1 [ 396.284292][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.292446][T10609] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.351249][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.720914][T10609] batman_adv: batadv0: Interface activated: macvtap1 [ 398.975001][T10647] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 399.238600][T10647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.252704][T10653] macvlan2: entered promiscuous mode [ 399.261166][T10653] macvlan2: entered allmulticast mode [ 399.394566][T10647] bond2: (slave ip6gretap2): making interface the new active one [ 399.422157][T10647] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 399.450742][ T58] net_ratelimit: 43 callbacks suppressed [ 399.450765][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.480653][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.618604][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.629532][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.707747][ T30] audit: type=1400 audit(2000000001.130:613): avc: denied { ioctl } for pid=10648 comm="syz.3.1302" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 399.767463][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.790916][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.941129][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.948937][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.573507][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.581353][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.904747][T10676] syzkaller0: entered promiscuous mode [ 400.911550][T10676] syzkaller0: entered allmulticast mode [ 401.337750][ T30] audit: type=1400 audit(2000000002.760:614): avc: denied { setopt } for pid=10678 comm="syz.5.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 404.904364][ T58] net_ratelimit: 50 callbacks suppressed [ 404.904383][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.917807][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.569222][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.814118][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.934428][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.961221][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.100640][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 407.108384][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.320090][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 407.481104][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.114167][ T58] net_ratelimit: 26 callbacks suppressed [ 410.114179][ T58] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.131826][ T30] audit: type=1804 audit(2000000011.530:615): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1328" name="bus" dev="ramfs" ino=29705 res=1 errno=0 [ 410.391130][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.593103][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.621116][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.799191][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.907564][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.040702][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 411.053360][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.192076][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 411.220647][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.221191][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 411.842273][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 411.849075][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 411.861785][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 411.878196][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.893654][T10776] netlink: 'syz.1.1335': attribute type 2 has an invalid length. [ 411.981119][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 412.001124][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 412.015845][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 412.015849][T10776] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 412.015872][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 412.078548][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 412.105372][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 412.115393][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.130874][ T9] usb 6-1: Product: syz [ 412.135070][ T9] usb 6-1: Manufacturer: syz [ 412.139648][ T9] usb 6-1: SerialNumber: syz [ 412.357297][ T9] usb 6-1: config 0 descriptor?? [ 412.375139][T10764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 412.451060][T10764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 412.619356][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.160501][T10807] syzkaller0: entered promiscuous mode [ 414.185853][T10807] syzkaller0: entered allmulticast mode [ 415.030950][ T5892] usb 6-1: USB disconnect, device number 5 [ 415.325081][ T12] net_ratelimit: 47 callbacks suppressed [ 415.325099][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.341014][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.557367][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.567163][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.736411][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.754962][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.862200][T10827] bridge0: port 3(vlan2) entered blocking state [ 415.871930][T10827] bridge0: port 3(vlan2) entered disabled state [ 415.883836][T10827] vlan2: entered allmulticast mode [ 415.889000][T10827] bridge0: entered allmulticast mode [ 415.901005][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.942404][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.942737][T10827] vlan2: left allmulticast mode [ 415.955767][T10827] bridge0: left allmulticast mode [ 415.980809][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.022125][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.478444][T10834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10834 comm=syz.1.1350 [ 417.699521][T10845] syzkaller0: entered promiscuous mode [ 417.716444][T10845] syzkaller0: entered allmulticast mode [ 419.914138][ T30] audit: type=1400 audit(2000000021.340:616): avc: denied { create } for pid=10864 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 420.269426][T10872] batman_adv: batadv0: Adding interface: ipvlan2 [ 420.275864][T10872] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.301270][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.311725][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.321662][T10872] batman_adv: batadv0: Interface activated: ipvlan2 [ 420.599107][ T6107] net_ratelimit: 45 callbacks suppressed [ 420.599138][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.613773][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.110727][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.118481][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.287437][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.296151][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.677122][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.698685][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.738996][T10887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.892354][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.901098][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 424.248166][T10936] tipc: Enabled bearer , priority 0 [ 424.265373][T10936] syzkaller0: entered promiscuous mode [ 424.275276][T10936] syzkaller0: entered allmulticast mode [ 424.407812][T10936] tipc: Resetting bearer [ 424.508444][T10921] tipc: Resetting bearer [ 424.528953][T10921] tipc: Disabling bearer [ 425.605189][T10953] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 425.605189][T10953] [ 425.614733][ T30] audit: type=1400 audit(2000000027.030:617): avc: denied { mount } for pid=10952 comm="syz.2.1375" name="/" dev="hugetlbfs" ino=30071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 425.662782][ T7641] net_ratelimit: 59 callbacks suppressed [ 425.662802][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.668445][ T30] audit: type=1400 audit(2000000027.030:618): avc: denied { remount } for pid=10952 comm="syz.2.1375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 425.711332][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.713450][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.764348][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.787603][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1377'. [ 425.821344][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.829129][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.961338][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.969071][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.102243][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 426.111219][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.231284][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 426.243751][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.491531][ T30] audit: type=1400 audit(2000000027.910:619): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 429.079390][ T30] audit: type=1400 audit(2000000030.200:620): avc: denied { lock } for pid=10983 comm="syz.2.1385" path="socket:[30138]" dev="sockfs" ino=30138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 429.138628][T10988] tipc: Started in network mode [ 429.146171][T10988] tipc: Node identity f28132c70aff, cluster identity 4711 [ 429.159099][T10988] tipc: Enabled bearer , priority 0 [ 429.427664][ T30] audit: type=1326 audit(2000000030.840:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 429.460291][ T30] audit: type=1326 audit(2000000030.840:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 429.492947][ T30] audit: type=1326 audit(2000000030.850:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 429.769482][ T30] audit: type=1326 audit(2000000030.850:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 430.738278][ T5892] tipc: Node number set to 4169020103 [ 430.767894][ T12] net_ratelimit: 39 callbacks suppressed [ 430.767907][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.795070][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 430.950669][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.979247][ T30] audit: type=1326 audit(2000000030.850:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.021501][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.084702][ T30] audit: type=1326 audit(2000000030.850:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.141388][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.149141][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.186918][ T30] audit: type=1326 audit(2000000030.850:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.247522][ T30] audit: type=1326 audit(2000000030.850:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.292618][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.300338][ T7641] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.347862][ T30] audit: type=1326 audit(2000000030.850:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.412312][ T30] audit: type=1326 audit(2000000030.850:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.436824][T11016] tipc: Enabled bearer , priority 0 [ 431.460575][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.473737][T11016] syzkaller0: entered promiscuous mode [ 431.483022][T11016] syzkaller0: entered allmulticast mode [ 431.489811][ T30] audit: type=1326 audit(2000000030.850:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.523345][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.545889][T11016] tipc: Resetting bearer [ 431.553680][T11015] tipc: Resetting bearer [ 431.577478][T11015] tipc: Disabling bearer [ 431.585451][ T30] audit: type=1326 audit(2000000030.850:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.619797][ T30] audit: type=1326 audit(2000000030.850:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.644274][ T5892] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 431.662513][ T30] audit: type=1326 audit(2000000030.850:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff163b9bf79 code=0x7ffc0000 [ 431.811523][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 431.818306][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.829604][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.846147][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.862821][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.874774][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.899473][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.909604][ T5892] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.919177][ T5892] usb 3-1: Manufacturer: syz [ 431.971750][T11022] CUSE: unknown device info "" [ 431.976643][T11022] CUSE: unknown device info "" [ 431.982332][T11022] CUSE: unknown device info "" [ 431.987215][T11022] CUSE: unknown device info "" [ 431.992746][T11022] CUSE: unknown device info "ÿ" [ 431.997700][T11022] CUSE: unknown device info "" [ 432.003537][T11022] CUSE: unknown device info "" [ 432.008410][T11022] CUSE: unknown device info "ÿ" [ 432.013966][T11022] CUSE: DEVNAME unspecified [ 432.123022][ T5892] usb 3-1: config 0 descriptor?? [ 432.391180][ T5892] rc_core: IR keymap rc-hauppauge not found [ 432.399767][ T5892] Registered IR keymap rc-empty [ 432.408371][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.441018][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.464015][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 432.478533][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 432.495322][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.521453][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.541394][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.577629][ C0] rc rc0: IR event FIFO is full! [ 432.582576][ C0] rc rc0: IR event FIFO is full! [ 432.587479][ C0] rc rc0: IR event FIFO is full! [ 432.592383][ C0] rc rc0: IR event FIFO is full! [ 432.597285][ C0] rc rc0: IR event FIFO is full! [ 432.602190][ C0] rc rc0: IR event FIFO is full! [ 432.607683][ C0] rc rc0: IR event FIFO is full! [ 432.612600][ C0] rc rc0: IR event FIFO is full! [ 432.617501][ C0] rc rc0: IR event FIFO is full! [ 432.622402][ C0] rc rc0: IR event FIFO is full! [ 432.627303][ C0] rc rc0: IR event FIFO is full! [ 432.632788][ C0] rc rc0: IR event FIFO is full! [ 432.637700][ C0] rc rc0: IR event FIFO is full! [ 432.642629][ C0] rc rc0: IR event FIFO is full! [ 432.647551][ C0] rc rc0: IR event FIFO is full! [ 432.652464][ C0] rc rc0: IR event FIFO is full! [ 432.657373][ C0] rc rc0: IR event FIFO is full! [ 432.662283][ C0] rc rc0: IR event FIFO is full! [ 432.667199][ C0] rc rc0: IR event FIFO is full! [ 432.672109][ C0] rc rc0: IR event FIFO is full! [ 432.681233][ C0] rc rc0: IR event FIFO is full! [ 432.686171][ C0] rc rc0: IR event FIFO is full! [ 432.691847][ C0] rc rc0: IR event FIFO is full! [ 432.696777][ C0] rc rc0: IR event FIFO is full! [ 432.701697][ C0] rc rc0: IR event FIFO is full! [ 432.707756][ C0] rc rc0: IR event FIFO is full! [ 432.712671][ C0] rc rc0: IR event FIFO is full! [ 432.717575][ C0] rc rc0: IR event FIFO is full! [ 432.722489][ C0] rc rc0: IR event FIFO is full! [ 432.727393][ C0] rc rc0: IR event FIFO is full! [ 432.732300][ C0] rc rc0: IR event FIFO is full! [ 432.737204][ C0] rc rc0: IR event FIFO is full! [ 432.742108][ C0] rc rc0: IR event FIFO is full! [ 432.747011][ C0] rc rc0: IR event FIFO is full! [ 432.761255][ C0] rc rc0: IR event FIFO is full! [ 432.766191][ C0] rc rc0: IR event FIFO is full! [ 432.771096][ C0] rc rc0: IR event FIFO is full! [ 432.776002][ C0] rc rc0: IR event FIFO is full! [ 432.780905][ C0] rc rc0: IR event FIFO is full! [ 432.785807][ C0] rc rc0: IR event FIFO is full! [ 432.790712][ C0] rc rc0: IR event FIFO is full! [ 432.795615][ C0] rc rc0: IR event FIFO is full! [ 432.800520][ C0] rc rc0: IR event FIFO is full! [ 432.811109][ C0] rc rc0: IR event FIFO is full! [ 432.816045][ C0] rc rc0: IR event FIFO is full! [ 432.820956][ C0] rc rc0: IR event FIFO is full! [ 432.825865][ C0] rc rc0: IR event FIFO is full! [ 432.830775][ C0] rc rc0: IR event FIFO is full! [ 432.835685][ C0] rc rc0: IR event FIFO is full! [ 432.840601][ C0] rc rc0: IR event FIFO is full! [ 432.847059][ C0] rc rc0: IR event FIFO is full! [ 432.851975][ C0] rc rc0: IR event FIFO is full! [ 432.856881][ C0] rc rc0: IR event FIFO is full! [ 432.861783][ C0] rc rc0: IR event FIFO is full! [ 432.871082][ C0] rc rc0: IR event FIFO is full! [ 432.876020][ C0] rc rc0: IR event FIFO is full! [ 432.880927][ C0] rc rc0: IR event FIFO is full! [ 432.885831][ C0] rc rc0: IR event FIFO is full! [ 432.890733][ C0] rc rc0: IR event FIFO is full! [ 432.895637][ C0] rc rc0: IR event FIFO is full! [ 432.900544][ C0] rc rc0: IR event FIFO is full! [ 432.911564][ C0] rc rc0: IR event FIFO is full! [ 432.916507][ C0] rc rc0: IR event FIFO is full! [ 432.921428][ C0] rc rc0: IR event FIFO is full! [ 432.926331][ C0] rc rc0: IR event FIFO is full! [ 432.931234][ C0] rc rc0: IR event FIFO is full! [ 432.936138][ C0] rc rc0: IR event FIFO is full! [ 432.944280][ C0] rc rc0: IR event FIFO is full! [ 432.949226][ C0] rc rc0: IR event FIFO is full! [ 432.954155][ C0] rc rc0: IR event FIFO is full! [ 432.959080][ C0] rc rc0: IR event FIFO is full! [ 432.963991][ C0] rc rc0: IR event FIFO is full! [ 432.968901][ C0] rc rc0: IR event FIFO is full! [ 432.973814][ C0] rc rc0: IR event FIFO is full! [ 432.978725][ C0] rc rc0: IR event FIFO is full! [ 432.983638][ C0] rc rc0: IR event FIFO is full! [ 432.988550][ C0] rc rc0: IR event FIFO is full! [ 432.995066][ C0] rc rc0: IR event FIFO is full! [ 433.000007][ C0] rc rc0: IR event FIFO is full! [ 433.004936][ C0] rc rc0: IR event FIFO is full! [ 433.009849][ C0] rc rc0: IR event FIFO is full! [ 433.016287][ C0] rc rc0: IR event FIFO is full! [ 433.021227][ C0] rc rc0: IR event FIFO is full! [ 433.026141][ C0] rc rc0: IR event FIFO is full! [ 433.031055][ C0] rc rc0: IR event FIFO is full! [ 433.035965][ C0] rc rc0: IR event FIFO is full! [ 433.040874][ C0] rc rc0: IR event FIFO is full! [ 433.045800][ C0] rc rc0: IR event FIFO is full! [ 433.050726][ C0] rc rc0: IR event FIFO is full! [ 433.057013][ C0] rc rc0: IR event FIFO is full! [ 433.061969][ C0] rc rc0: IR event FIFO is full! [ 433.066893][ C0] rc rc0: IR event FIFO is full! [ 433.071802][ C0] rc rc0: IR event FIFO is full! [ 433.076709][ C0] rc rc0: IR event FIFO is full! [ 433.081617][ C0] rc rc0: IR event FIFO is full! [ 433.086523][ C0] rc rc0: IR event FIFO is full! [ 433.091429][ C0] rc rc0: IR event FIFO is full! [ 433.097396][ C0] rc rc0: IR event FIFO is full! [ 433.102322][ C0] rc rc0: IR event FIFO is full! [ 433.107229][ C0] rc rc0: IR event FIFO is full! [ 433.112136][ C0] rc rc0: IR event FIFO is full! [ 433.117041][ C0] rc rc0: IR event FIFO is full! [ 433.121946][ C0] rc rc0: IR event FIFO is full! [ 433.126852][ C0] rc rc0: IR event FIFO is full! [ 433.133163][ C0] rc rc0: IR event FIFO is full! [ 433.138084][ C0] rc rc0: IR event FIFO is full! [ 433.142996][ C0] rc rc0: IR event FIFO is full! [ 433.147914][ C0] rc rc0: IR event FIFO is full! [ 433.152832][ C0] rc rc0: IR event FIFO is full! [ 433.157738][ C0] rc rc0: IR event FIFO is full! [ 433.163639][ C0] rc rc0: IR event FIFO is full! [ 433.168571][ C0] rc rc0: IR event FIFO is full! [ 433.173484][ C0] rc rc0: IR event FIFO is full! [ 433.179169][ C0] rc rc0: IR event FIFO is full! [ 433.184100][ C0] rc rc0: IR event FIFO is full! [ 433.189013][ C0] rc rc0: IR event FIFO is full! [ 433.194918][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.264880][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.531458][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.561158][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.581245][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.601165][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.621177][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.830444][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.862862][ T5892] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version a3 [ 433.879181][ T5892] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 433.904637][ T5892] usb 3-1: USB disconnect, device number 15 [ 434.200919][ T5873] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 434.405087][ T5873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.416204][ T5873] usb 6-1: no configurations [ 434.421413][ T5873] usb 6-1: can't read configurations, error -22 [ 434.630501][T11045] ptrace attach of "./syz-executor exec"[5798] was attempted by " [ 435.250874][T11047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.551168][ T8241] net_ratelimit: 65 callbacks suppressed [ 436.551185][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.601152][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 436.902484][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.910212][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.052637][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 437.052653][ T30] audit: type=1400 audit(2000000038.470:653): avc: denied { map } for pid=11061 comm="syz.5.1407" path="/proc/516/net/wireless" dev="proc" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 437.121189][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.136289][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.163212][ T30] audit: type=1400 audit(2000000038.470:654): avc: denied { execute } for pid=11061 comm="syz.5.1407" path="/proc/516/net/wireless" dev="proc" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 437.310697][ T5873] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 437.337279][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.359730][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.472720][ T5873] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 437.481504][ T5873] usb 6-1: config 0 has no interface number 0 [ 437.489192][ T5873] usb 6-1: New USB device found, idVendor=10c4, idProduct=813d, bcdDevice=ae.9d [ 437.498461][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.511125][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.519141][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.526839][ T5873] usb 6-1: Product: syz [ 437.534517][ T5873] usb 6-1: Manufacturer: syz [ 437.539097][ T5873] usb 6-1: SerialNumber: syz [ 437.553148][ T5873] usb 6-1: config 0 descriptor?? [ 437.563753][ T5873] cp210x 6-1:0.119: cp210x converter detected [ 437.685907][ T5812] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 438.288786][ T5873] cp210x 6-1:0.119: failed to get vendor val 0x000e size 678: -71 [ 438.296706][ T5873] cp210x 6-1:0.119: GPIO initialisation failed: -71 [ 438.304961][ T5873] usb 6-1: cp210x converter now attached to ttyUSB0 [ 438.316102][ T5873] usb 6-1: USB disconnect, device number 8 [ 438.335004][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 438.344020][ T5873] cp210x 6-1:0.119: device disconnected [ 439.531636][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.538419][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.654758][ T7622] net_ratelimit: 42 callbacks suppressed [ 441.654771][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.788051][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.996048][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.036498][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.171801][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.179954][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.621800][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.629675][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.767515][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 442.775963][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.744499][T11111] syzkaller0: entered promiscuous mode [ 443.750120][T11111] syzkaller0: entered allmulticast mode [ 443.842916][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1423'. [ 443.887245][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1423'. [ 443.896785][ T7641] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.897506][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 443.905211][ T7641] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.905244][ T7641] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.905272][ T7641] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.955418][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 444.084498][T11124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.492220][T11131] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 444.971702][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.011708][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.021518][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.029326][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.037446][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.613995][T11155] kAFS: unable to lookup cell 'ÿ' [ 446.629394][T11138] chnl_net:caif_netlink_parms(): no params data found [ 446.720751][ T7622] net_ratelimit: 48 callbacks suppressed [ 446.720766][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.790594][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.801665][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.817151][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.842427][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.920684][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.947919][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'. [ 446.956989][ T30] audit: type=1400 audit(2000000048.370:655): avc: denied { nlmsg_read } for pid=11159 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.971653][T11138] bridge_slave_0: entered allmulticast mode [ 447.020610][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.056006][T11138] bridge_slave_0: entered promiscuous mode [ 447.063610][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.091627][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.101435][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.121282][ T5811] Bluetooth: hci1: command tx timeout [ 447.198950][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.208943][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.217724][T11138] bridge_slave_1: entered allmulticast mode [ 447.689767][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.718677][T11138] bridge_slave_1: entered promiscuous mode [ 447.730612][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.774771][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.785779][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.810079][T11138] team0: Port device team_slave_0 added [ 447.817701][T11138] team0: Port device team_slave_1 added [ 447.835030][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.842582][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.893527][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.966889][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.991115][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.050617][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.124920][T11138] hsr_slave_0: entered promiscuous mode [ 448.154617][T11138] hsr_slave_1: entered promiscuous mode [ 448.164555][T11138] debugfs: 'hsr0' already exists in 'hsr' [ 448.170259][T11138] Cannot create hsr debugfs directory [ 448.262419][ T30] audit: type=1400 audit(2000000049.690:656): avc: denied { read } for pid=11174 comm="syz.2.1443" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 448.401662][ T30] audit: type=1400 audit(2000000049.710:657): avc: denied { ioctl } for pid=11174 comm="syz.2.1443" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 448.593444][T11179] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 449.382525][ T5811] Bluetooth: hci1: command tx timeout [ 449.422516][ T30] audit: type=1400 audit(2000000050.820:658): avc: denied { ioctl } for pid=11176 comm="syz.5.1442" path="/149/file0" dev="tmpfs" ino=794 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 449.806446][T11179] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 450.374731][T11138] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 450.390067][T11138] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 450.945057][T11138] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 450.964712][T11138] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.200125][T11138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.315713][T11138] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.372174][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.379238][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.437651][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.444731][ T7624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.454311][ T5811] Bluetooth: hci1: command tx timeout [ 451.754102][ T7641] net_ratelimit: 76 callbacks suppressed [ 451.754118][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.795552][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.820636][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.829168][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.952259][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.963630][T11138] veth0_vlan: entered promiscuous mode [ 451.972598][T11138] veth1_vlan: entered promiscuous mode [ 451.980765][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.988591][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.005547][T11138] veth0_macvtap: entered promiscuous mode [ 452.014130][T11138] veth1_macvtap: entered promiscuous mode [ 452.027148][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.037531][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.053367][ T8241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.063235][ T8241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.074590][ T8241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.085261][ T8241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.101875][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.131333][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.147892][ T7639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.160753][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.161106][ T7639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.181471][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.197322][ T7624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.206257][ T7624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.403008][T11223] overlayfs: failed to clone upperpath [ 453.521438][ T5811] Bluetooth: hci1: command tx timeout [ 454.894815][ T30] audit: type=1804 audit(2000000056.320:659): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1449" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 454.895327][T11233] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 454.926656][T11233] ref_ctr increment failed for inode: 0x17 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe7ee40 [ 454.969863][T11233] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 454.981386][T11233] ref_ctr decrement failed for inode: 0x17 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe7ee40 [ 454.998454][T11233] uprobe: syz.6.1449:11233 failed to unregister, leaking uprobe [ 455.365304][ T30] audit: type=1400 audit(2000000056.770:660): avc: denied { watch } for pid=11245 comm="syz.6.1455" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 456.194646][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1460'. [ 456.560785][ T974] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 456.816218][T11272] netlink: 'syz.5.1465': attribute type 13 has an invalid length. [ 456.830598][ T7639] net_ratelimit: 50 callbacks suppressed [ 456.830614][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.870686][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.879737][ T974] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 456.889148][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.896566][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.916461][ T974] usb 7-1: config 0 descriptor?? [ 456.939864][ T974] usb_ehset_test 7-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 457.010958][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.178374][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.183359][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.196976][T11259] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 458.203572][T11259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 458.213023][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.223437][T11259] vhci_hcd vhci_hcd.0: Device attached [ 458.241489][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.261369][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.281183][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.371988][T11281] vhci_hcd: connection closed [ 458.374020][ T8241] vhci_hcd vhci_hcd.6: stop threads [ 458.395806][T11214] usb 7-1: USB disconnect, device number 2 [ 458.412111][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 458.421752][ T8241] vhci_hcd vhci_hcd.6: release socket [ 458.431653][ T8241] vhci_hcd vhci_hcd.6: disconnect device [ 458.500418][ T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 458.508419][ T9] usb 45-1: enqueue for inactive port 0 [ 458.581141][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 458.638735][ T7622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 458.690407][ T7622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 458.749138][ T7622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 458.798556][ T7622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 460.151077][T11296] loop9: detected capacity change from 0 to 7 [ 460.171932][ T30] audit: type=1400 audit(2000000060.690:661): avc: denied { remount } for pid=11289 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 460.600650][ T30] audit: type=1400 audit(2000000061.580:662): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 460.675207][ T7622] bond1 (unregistering): (slave gretap1): Releasing active interface [ 460.864661][ T7622] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 460.891193][ T7622] bridge1 (unregistering): left promiscuous mode [ 460.897862][ T7622] bridge1 (unregistering): left allmulticast mode [ 460.944199][T11311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1470'. [ 460.954677][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1470'. [ 460.971747][T11311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1470'. [ 460.981856][T11311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1470'. [ 461.043582][ T7622] smc: removing net device bond0 with user defined pnetid SYZ2 [ 461.061238][ T7622] bond0 (unregistering): Released all slaves [ 461.079837][ T7622] bond1 (unregistering): Released all slaves [ 461.876996][T11319] tipc: Enabled bearer , priority 0 [ 461.891313][ T7641] net_ratelimit: 78 callbacks suppressed [ 461.891330][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.891973][T11319] syzkaller0: entered promiscuous mode [ 461.931179][T11319] syzkaller0: entered allmulticast mode [ 461.970803][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.990612][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.028343][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.065590][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.566673][ T7622] hsr_slave_0: left promiscuous mode [ 462.576570][ T7641] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.598169][ T7622] hsr_slave_1: left promiscuous mode [ 462.611160][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.651641][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.691872][ T8239] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.821436][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.914972][ T30] audit: type=1400 audit(2000000064.330:663): avc: denied { listen } for pid=11336 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.317590][ T30] audit: type=1400 audit(2000000065.740:664): avc: denied { mount } for pid=11348 comm="syz.1.1482" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 464.431170][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 464.516315][T11357] capability: warning: `syz.5.1483' uses 32-bit capabilities (legacy support in use) [ 464.594102][ T5892] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 464.607112][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.620021][ T5892] usb 7-1: config 0 has no interface number 0 [ 464.627697][T11319] tipc: Resetting bearer [ 464.635673][T11318] tipc: Resetting bearer [ 464.672747][ T5892] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 464.682395][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.691359][ T5892] usb 7-1: Product: syz [ 464.696691][ T5892] usb 7-1: Manufacturer: syz [ 464.704922][ T5892] usb 7-1: SerialNumber: syz [ 464.732916][ T5892] usb 7-1: config 0 descriptor?? [ 464.755533][T11318] tipc: Disabling bearer [ 465.093479][T11363] tipc: Enabled bearer , priority 0 [ 465.174412][T11366] syzkaller0: entered promiscuous mode [ 465.220863][T11366] syzkaller0: entered allmulticast mode [ 465.319018][T11363] tipc: Resetting bearer [ 465.397602][T11361] tipc: Resetting bearer [ 465.500033][T11361] tipc: Disabling bearer [ 465.676687][ T29] usb 7-1: USB disconnect, device number 3 [ 467.155565][ T7624] net_ratelimit: 137 callbacks suppressed [ 467.155598][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.313002][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.692168][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.802090][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.941472][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.949289][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.117260][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.521423][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.606277][ T30] audit: type=1400 audit(2000000070.030:665): avc: denied { append } for pid=11407 comm="syz.5.1493" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 468.653383][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.713413][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.991153][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 469.172285][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 469.214866][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.273319][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.338021][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.403565][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.460706][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.494088][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.507534][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.541085][ T9] usb 3-1: Manufacturer: syz [ 469.562619][ T9] usb 3-1: config 0 descriptor?? [ 469.587245][T11428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11428 comm=syz.6.1496 [ 469.961088][ T9] rc_core: IR keymap rc-hauppauge not found [ 469.967013][ T9] Registered IR keymap rc-empty [ 469.972861][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 469.991369][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 470.032441][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 470.108686][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 471.150073][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 471.174546][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.074183][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.112606][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.161955][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.202077][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.231130][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.244682][ T7622] net_ratelimit: 38 callbacks suppressed [ 472.244696][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.259244][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.289072][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.297571][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.321202][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.342759][T11467] tipc: Enabled bearer , priority 0 [ 472.352673][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.409912][T11467] tipc: Resetting bearer [ 472.432689][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.451158][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.811093][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.946368][T11463] tipc: Disabling bearer [ 472.951707][ T9] usb 3-1: USB disconnect, device number 16 [ 472.960733][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.022241][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.060625][ T7622] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.138135][ T7622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.067480][ T8250] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.075931][ T8250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.932073][T11496] netlink: 'syz.1.1505': attribute type 4 has an invalid length. [ 476.063126][T11494] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 476.072842][T11494] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 476.083624][T11494] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 476.170795][T11494] syz.2.1509 (11494) used greatest stack depth: 19672 bytes left [ 476.178658][ T30] audit: type=1800 audit(2000000077.490:666): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.1509" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 476.212494][ T30] audit: type=1400 audit(2000000077.510:667): avc: denied { firmware_load } for pid=11487 comm="syz.2.1509" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 477.315344][ T6107] net_ratelimit: 11 callbacks suppressed [ 477.315363][ T6107] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.450473][ T6107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.562190][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.621356][ T30] audit: type=1400 audit(2000000079.000:668): avc: denied { setopt } for pid=11505 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 477.825075][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.951186][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.979345][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.105306][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.135589][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.281113][ T8250] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.301261][ T8250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.048051][ T30] audit: type=1400 audit(2000000081.470:669): avc: denied { execute } for pid=11532 comm="syz.5.1514" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 482.393066][ T8241] net_ratelimit: 64 callbacks suppressed [ 482.393101][ T8241] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.767497][ T8241] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.904294][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.929669][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.107226][ T7639] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.145196][ T7639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.280592][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.288345][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.503592][ T7624] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.511057][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 483.519110][ T7624] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.701149][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 483.721121][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.729130][ T9] usb 7-1: Product: syz [ 483.758153][ T9] usb 7-1: Manufacturer: syz [ 483.781770][ T9] usb 7-1: SerialNumber: syz [ 483.794017][ T9] usb 7-1: config 0 descriptor?? [ 484.027847][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.242425][ T7632] ------------[ cut here ]------------ [ 484.248398][ T7632] time_after(jiffies, timeout) [ 484.248429][ T7632] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#0: kworker/u8:13/7632 [ 484.264783][ T7632] Modules linked in: [ 484.269052][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.281153][ T7632] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.285481][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 484.296143][ T7632] Workqueue: iou_exit io_ring_exit_work [ 484.302521][ T7632] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 484.308241][ T7632] Code: 8e e8 67 7c 3d 01 48 8b 05 a0 d4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 6e d0 d1 00 4d 85 ed 79 12 e8 84 d5 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 72 d5 d1 00 48 8b 74 24 38 [ 484.328647][ T7632] RSP: 0018:ffffc9000416fab0 EFLAGS: 00010293 [ 484.335440][ T7632] RAX: 0000000000000000 RBX: ffff88807ba02778 RCX: ffffffff81353df2 [ 484.344029][ T7632] RDX: ffff88802d4c2480 RSI: ffffffff81353dfc RDI: ffff88802d4c2480 [ 484.352279][ T7632] RBP: ffffc9000416fc40 R08: 0000000000000007 R09: 0000000000000000 [ 484.360242][ T7632] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88807ba02000 [ 484.368855][ T7632] R13: fffffffffffffffb R14: dffffc0000000000 R15: 0000000000000000 [ 484.377480][ T7632] FS: 0000000000000000(0000) GS:ffff88812438b000(0000) knlGS:0000000000000000 [ 484.386957][ T7632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.393968][ T7632] CR2: 00007f8b3fd94ff8 CR3: 000000004ec36000 CR4: 00000000003526f0 [ 484.402364][ T7632] Call Trace: [ 484.405629][ T7632] [ 484.408548][ T7632] ? __pfx_io_ring_exit_work+0x10/0x10 [ 484.414429][ T7632] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 484.420227][ T7632] ? debug_object_deactivate+0x2e4/0x3b0 [ 484.426267][ T7632] ? process_one_work+0x80b/0x1840 [ 484.431801][ T7632] ? rcu_is_watching+0x12/0xc0 [ 484.436551][ T7632] process_one_work+0x9c2/0x1840 [ 484.441921][ T7632] ? __pfx_process_one_work+0x10/0x10 [ 484.447286][ T7632] ? __pfx_io_ring_exit_work+0x10/0x10 [ 484.452982][ T7632] worker_thread+0x5da/0xe40 [ 484.457569][ T7632] ? kthread+0x13a/0x450 [ 484.461813][ T7632] ? __pfx_worker_thread+0x10/0x10 [ 484.466925][ T7632] kthread+0x370/0x450 [ 484.470994][ T7632] ? __pfx_kthread+0x10/0x10 [ 484.475571][ T7632] ret_from_fork+0x754/0xd80 [ 484.480287][ T7632] ? __pfx_ret_from_fork+0x10/0x10 [ 484.485928][ T7632] ? rcu_is_watching+0x12/0xc0 [ 484.491095][ T7632] ? __switch_to+0x7b4/0x10c0 [ 484.495761][ T7632] ? __pfx_kthread+0x10/0x10 [ 484.500350][ T7632] ret_from_fork_asm+0x1a/0x30 [ 484.505530][ T7632] [ 484.508535][ T7632] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 484.515791][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.526880][ T7632] Tainted: [L]=SOFTLOCKUP [ 484.531181][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 484.541215][ T7632] Workqueue: iou_exit io_ring_exit_work [ 484.546752][ T7632] Call Trace: [ 484.550011][ T7632] [ 484.552922][ T7632] dump_stack_lvl+0x100/0x190 [ 484.557586][ T7632] vpanic+0x552/0x970 [ 484.561548][ T7632] ? __pfx_vpanic+0x10/0x10 [ 484.566035][ T7632] panic+0xd1/0xe0 [ 484.569737][ T7632] ? __pfx_panic+0x10/0x10 [ 484.574141][ T7632] ? check_panic_on_warn+0x1f/0x90 [ 484.579239][ T7632] check_panic_on_warn.cold+0x19/0x34 [ 484.584592][ T7632] ? io_ring_exit_work+0x42d/0xcdb [ 484.589691][ T7632] __warn.cold+0x191/0x2f8 [ 484.594088][ T7632] __report_bug+0x296/0x3d0 [ 484.598580][ T7632] ? io_ring_exit_work+0x42d/0xcdb [ 484.603677][ T7632] ? __pfx___report_bug+0x10/0x10 [ 484.608687][ T7632] ? rcu_is_watching+0x12/0xc0 [ 484.613430][ T7632] ? trace_contention_end+0xd6/0x110 [ 484.618702][ T7632] ? __mutex_lock+0x26a/0x1b90 [ 484.623453][ T7632] ? find_held_lock+0x2b/0x80 [ 484.628114][ T7632] ? io_req_caches_free+0x49/0x60 [ 484.633123][ T7632] ? io_req_caches_free+0x49/0x60 [ 484.638136][ T7632] ? io_ring_exit_work+0x42d/0xcdb [ 484.643234][ T7632] report_bug+0xb2/0x220 [ 484.647458][ T7632] ? io_ring_exit_work+0x42d/0xcdb [ 484.652555][ T7632] handle_bug+0x166/0x2a0 [ 484.656871][ T7632] exc_invalid_op+0x17/0x50 [ 484.661362][ T7632] asm_exc_invalid_op+0x1a/0x20 [ 484.666191][ T7632] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 484.671898][ T7632] Code: 8e e8 67 7c 3d 01 48 8b 05 a0 d4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 6e d0 d1 00 4d 85 ed 79 12 e8 84 d5 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 72 d5 d1 00 48 8b 74 24 38 [ 484.691486][ T7632] RSP: 0018:ffffc9000416fab0 EFLAGS: 00010293 [ 484.697533][ T7632] RAX: 0000000000000000 RBX: ffff88807ba02778 RCX: ffffffff81353df2 [ 484.705481][ T7632] RDX: ffff88802d4c2480 RSI: ffffffff81353dfc RDI: ffff88802d4c2480 [ 484.713433][ T7632] RBP: ffffc9000416fc40 R08: 0000000000000007 R09: 0000000000000000 [ 484.721384][ T7632] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88807ba02000 [ 484.729331][ T7632] R13: fffffffffffffffb R14: dffffc0000000000 R15: 0000000000000000 [ 484.737283][ T7632] ? io_ring_exit_work+0x422/0xcdb [ 484.742380][ T7632] ? io_ring_exit_work+0x42c/0xcdb [ 484.747481][ T7632] ? __pfx_io_ring_exit_work+0x10/0x10 [ 484.752924][ T7632] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 484.758713][ T7632] ? debug_object_deactivate+0x2e4/0x3b0 [ 484.764331][ T7632] ? process_one_work+0x80b/0x1840 [ 484.769428][ T7632] ? rcu_is_watching+0x12/0xc0 [ 484.774172][ T7632] process_one_work+0x9c2/0x1840 [ 484.779101][ T7632] ? __pfx_process_one_work+0x10/0x10 [ 484.784466][ T7632] ? __pfx_io_ring_exit_work+0x10/0x10 [ 484.789911][ T7632] worker_thread+0x5da/0xe40 [ 484.794493][ T7632] ? kthread+0x13a/0x450 [ 484.798716][ T7632] ? __pfx_worker_thread+0x10/0x10 [ 484.803811][ T7632] kthread+0x370/0x450 [ 484.807862][ T7632] ? __pfx_kthread+0x10/0x10 [ 484.812436][ T7632] ret_from_fork+0x754/0xd80 [ 484.817011][ T7632] ? __pfx_ret_from_fork+0x10/0x10 [ 484.822105][ T7632] ? rcu_is_watching+0x12/0xc0 [ 484.826851][ T7632] ? __switch_to+0x7b4/0x10c0 [ 484.831508][ T7632] ? __pfx_kthread+0x10/0x10 [ 484.836083][ T7632] ret_from_fork_asm+0x1a/0x30 [ 484.840841][ T7632] [ 484.844110][ T7632] Kernel Offset: disabled [ 484.848407][ T7632] Rebooting in 86400 seconds..