last executing test programs: 9m8.844563664s ago: executing program 32 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1, 0x7395}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000043c0)='[', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r1, 0x1) 8m18.968112405s ago: executing program 33 (id=1002): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10, 0x1100}}], 0x1, 0x4000810) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, r0}) io_uring_enter(r0, 0x22cc, 0x20, 0x8, 0x0, 0x0) 8m8.172351524s ago: executing program 34 (id=1084): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7m48.506785883s ago: executing program 5 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 7m48.282684183s ago: executing program 5 (id=1266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 7m47.252861126s ago: executing program 5 (id=1278): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000580)={0x0, 0xa, 0x6, "00008c1917cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000200)={0x20, 0x16, 0x4, "a3a2e792"}, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x81, 0x1, "1d"}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6d559603d26e2bc73cf4b1139e281130e8eba68abe"], &(0x7f0000000980)={0x20, 0x83, 0x1, "d0"}, 0x0, 0x0}) 7m42.914957844s ago: executing program 5 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x28000600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 7m42.827152338s ago: executing program 5 (id=1301): socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setitimer(0x1, 0x0, 0x0) 7m42.434661933s ago: executing program 5 (id=1304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4000cd}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x7, 0xd1}, 0x8) 7m41.981709765s ago: executing program 35 (id=1304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4000cd}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x7, 0xd1}, 0x8) 6m53.591434144s ago: executing program 6 (id=1664): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240), &(0x7f0000000040)}) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) 6m52.68556953s ago: executing program 6 (id=1673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6m52.424053431s ago: executing program 6 (id=1674): getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000080)=0x200020) 6m52.11101553s ago: executing program 6 (id=1675): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = getpid() getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000440)=""/2, &(0x7f0000000480)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 6m51.932345054s ago: executing program 6 (id=1677): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 6m51.839460956s ago: executing program 6 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feff", 0xa918, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 6m36.608480516s ago: executing program 36 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feff", 0xa918, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 6m24.521642646s ago: executing program 4 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 6m24.419434724s ago: executing program 4 (id=1843): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0x4, "8fe4ef97"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x12, 0x4, "251f761a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x0, 0x14, 0x4, "8f120214"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000040)={0x40, 0x14, 0x18, "dc455067f21599d4c928fc1caf1ca6fea88ef6ee1600865e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000440)={0x40, 0x16, 0x4, "92884be8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m20.254946684s ago: executing program 4 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fanotify_init(0x40, 0x80000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m18.142544182s ago: executing program 4 (id=1879): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, 0x0) 6m18.068764169s ago: executing program 4 (id=1881): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m16.710922191s ago: executing program 4 (id=1888): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$caif_stream(0x25, 0x1, 0x5) sendmsg$sock(r0, 0x0, 0x0) mq_open(&(0x7f0000000200)='#@\x00', 0x50f7bb45f81a15a, 0x120, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0) 6m16.076282121s ago: executing program 37 (id=1888): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$caif_stream(0x25, 0x1, 0x5) sendmsg$sock(r0, 0x0, 0x0) mq_open(&(0x7f0000000200)='#@\x00', 0x50f7bb45f81a15a, 0x120, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0) 5m9.617251802s ago: executing program 7 (id=2210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5m8.689745682s ago: executing program 7 (id=2212): r0 = gettid() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r2, 0x0, 0x891, 0x2) fcntl$setpipe(r1, 0x4, 0xfffffffffffff000) 5m7.792457894s ago: executing program 7 (id=2217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x10003506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) 5m6.743194523s ago: executing program 7 (id=2221): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 5m6.37221673s ago: executing program 7 (id=2223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 5m2.946740843s ago: executing program 7 (id=2236): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x2c}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x6, 0x2, 0x4cb, 0x7, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0xd1, 0x7b, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m2.428063256s ago: executing program 38 (id=2236): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x2c}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x6, 0x2, 0x4cb, 0x7, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0xd1, 0x7b, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m14.237073783s ago: executing program 9 (id=2884): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88c, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m9.939291899s ago: executing program 9 (id=2903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000002c0)={0x0, &(0x7f00000006c0)=[@code={0xa, 0x57, {"b805000000b98000c0fe0f01d9400f0766b89c008ec842d9a0020000000f01cb0f10502866baf80cb89c781c83ef66bafc0c66edf2466f66ba4100b80c000000efc401d1f600"}}], 0x57}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000300)={0xce, 0x0, r3}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x10000dcc}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000280)={0x0, &(0x7f0000000740)=[@in_dx={0x69, 0x20, {0xcc50}}], 0x20}) 2m5.291993818s ago: executing program 9 (id=2916): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m0.524292698s ago: executing program 9 (id=2934): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f50000000000ffef862dfdff000d0065"], 0x78) 1m55.726440173s ago: executing program 9 (id=2946): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m51.318812749s ago: executing program 9 (id=2958): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000b40)="b9e403c6631eb9d8394d5aa00000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r2, r3, 0x0, 0x8000fb00) 1m36.208097506s ago: executing program 39 (id=2958): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000b40)="b9e403c6631eb9d8394d5aa00000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r2, r3, 0x0, 0x8000fb00) 18.110161574s ago: executing program 1 (id=3210): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8094) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffc7b8) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 17.678831257s ago: executing program 1 (id=3212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) socket(0x29, 0xa, 0x6) mq_unlink(0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 13.866597065s ago: executing program 1 (id=3221): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.53494491s ago: executing program 2 (id=3227): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x18c0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.150486365s ago: executing program 2 (id=3230): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000440)={0x0, 0x237b, 0x400, 0x0, 0x28f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 10.547104114s ago: executing program 0 (id=3231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) 9.773952831s ago: executing program 1 (id=3233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 9.72639263s ago: executing program 2 (id=3234): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 9.481926222s ago: executing program 0 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 7.430763417s ago: executing program 0 (id=3238): socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$uid(0x0, 0x0, 0x4007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 6.285404453s ago: executing program 2 (id=3240): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 5.710605164s ago: executing program 0 (id=3241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000840)}, 0x2}], 0x1, 0x123, &(0x7f00000006c0)={0x77359400}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, r4, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="281e0000000801010000000000000000030000020900010073737a31000000000600024f88090000"], 0x28}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 5.666993777s ago: executing program 3 (id=3242): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dmmidi(0x0, 0x2, 0x181083) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 5.65891038s ago: executing program 8 (id=3243): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 5.570925681s ago: executing program 3 (id=3244): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$kcm(r2, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) syz_io_uring_setup(0x1f10, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) 4.452819581s ago: executing program 0 (id=3245): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x64, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x3}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) setpriority(0x2, 0x0, 0x8) 3.66606864s ago: executing program 8 (id=3246): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x31, 0x4007, @fd=r2, 0x0, 0x0, 0x0, 0x9, 0x1, {0x3}}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.661778152s ago: executing program 2 (id=3247): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) creat(&(0x7f0000000000)='./file0\x00', 0x168) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20600, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 3.570919368s ago: executing program 3 (id=3248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c01000010000100fdffffbf00010000e0000001000000000000000000002000fc000000000000000000000000000000000103144e210009000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000030000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002a132b79aa3500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.522092193s ago: executing program 1 (id=3258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000000)) 2.892919334s ago: executing program 8 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 2.892216248s ago: executing program 0 (id=3260): syz_open_dev$loop(0x0, 0x80, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.170674008s ago: executing program 3 (id=3250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x238, &(0x7f0000000380)={0x0, 0x80fd, 0x400, 0x3, 0x265}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}}) io_uring_enter(r4, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 1.447371978s ago: executing program 8 (id=3251): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.268166022s ago: executing program 3 (id=3252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 542.015025ms ago: executing program 8 (id=3253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x2, 0x10}, 0xc) 491.142214ms ago: executing program 1 (id=3254): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) creat(0x0, 0xc9028ba210c11f88) creat(&(0x7f00000000c0)='./file0\x00', 0x15) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x22000, 0x800, 0x3, 0x2}, 0x20) 314.709808ms ago: executing program 3 (id=3255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000000c}, 0x24004000) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @multicast1}}, 0x4ab, 0x4}, &(0x7f00000001c0)=0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 80.891701ms ago: executing program 2 (id=3256): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004f700000400000001"], 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket(0x2, 0x80805, 0x0) socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x2c020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x100, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 0s ago: executing program 8 (id=3257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) kernel console output (not intermixed with test programs): 3][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1826'. [ 266.879267][T11245] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 266.927592][T11245] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 266.929966][ T5888] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 267.027454][T11245] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 267.109482][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.117370][T11245] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 267.128038][ T5888] usb 5-1: config 0 has no interfaces? [ 267.153531][ T5888] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.183953][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.221742][ T5888] usb 5-1: Product: syz [ 267.225942][ T5888] usb 5-1: Manufacturer: syz [ 267.263087][ T5888] usb 5-1: config 0 descriptor?? [ 267.346701][ T8338] bond0: (slave bond_slave_0): interface is now down [ 267.371306][ T8338] bond0: (slave bond_slave_1): interface is now down [ 267.440331][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.455170][ T30] audit: type=1400 audit(1771640999.305:790): avc: denied { rename } for pid=11438 comm="syz.3.1832" name="file0" dev="tmpfs" ino=2558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 267.487035][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.550381][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.557495][ T8338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.595882][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.603039][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.619613][ T792] usb 5-1: USB disconnect, device number 19 [ 267.633740][T11245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.667853][T11245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.685338][T11467] gtp0: entered promiscuous mode [ 268.844632][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.179634][T11475] IPVS: rr: FWM 3 0x00000003 - no destination available [ 269.956662][ T792] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 269.974474][T11245] veth0_vlan: entered promiscuous mode [ 270.044823][T11245] veth1_vlan: entered promiscuous mode [ 270.097617][T11245] veth0_macvtap: entered promiscuous mode [ 270.215462][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 270.247820][ T792] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.255997][ T792] usb 5-1: config 0 has no interface number 0 [ 270.278705][T11245] veth1_macvtap: entered promiscuous mode [ 270.295027][ T792] usb 5-1: config 0 interface 184 has no altsetting 0 [ 270.319795][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.337857][ T792] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.366479][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.376356][ T30] audit: type=1400 audit(1771641002.217:791): avc: denied { write } for pid=11502 comm="syz.8.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.438900][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.446155][ T792] usb 5-1: Product: syz [ 270.599546][ T792] usb 5-1: Manufacturer: syz [ 270.608554][ T792] usb 5-1: SerialNumber: syz [ 270.636760][ T792] usb 5-1: config 0 descriptor?? [ 270.663277][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.690925][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.742045][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.782899][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.865551][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1847'. [ 271.070131][T11518] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.131063][T11518] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 271.300816][T11516] macvlan2: entered promiscuous mode [ 271.343204][T11516] macvlan2: entered allmulticast mode [ 271.377206][T11516] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 271.455841][ T8350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.470293][ T8350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.586534][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.604782][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.651696][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1849'. [ 271.823395][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 271.854540][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 271.875950][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1849'. [ 272.034721][T11541] overlayfs: failed to clone upperpath [ 272.741981][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 272.758817][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 272.804835][ T792] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 272.840103][ T792] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 272.872324][ T792] usb 5-1: USB disconnect, device number 20 [ 273.387773][ T30] audit: type=1400 audit(1771641005.248:792): avc: denied { listen } for pid=11565 comm="syz.8.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.428617][ T30] audit: type=1400 audit(1771641005.268:793): avc: denied { accept } for pid=11565 comm="syz.8.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.584272][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1862'. [ 273.617695][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1862'. [ 273.668775][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1865'. [ 273.680689][ T792] kernel read not supported for file inotify (pid: 792 comm: kworker/1:2) [ 273.801490][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1867'. [ 273.814288][ T30] audit: type=1400 audit(1771641005.668:794): avc: denied { setopt } for pid=11590 comm="syz.8.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.861626][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1867'. [ 275.032003][T11620] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1875'. [ 276.626209][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 276.635196][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 277.758255][T11660] capability: warning: `syz.7.1891' uses 32-bit capabilities (legacy support in use) [ 278.616536][T11672] netlink: 'syz.8.1896': attribute type 9 has an invalid length. [ 278.624496][T11672] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1896'. [ 278.634336][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.645205][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.662340][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.669906][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.679503][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.330138][T11674] chnl_net:caif_netlink_parms(): no params data found [ 279.430188][T11689] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 279.441092][T11689] syzkaller0: entered promiscuous mode [ 279.446637][T11689] syzkaller0: entered allmulticast mode [ 279.627002][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.634285][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.642159][T11674] bridge_slave_0: entered allmulticast mode [ 279.649379][T11674] bridge_slave_0: entered promiscuous mode [ 279.657511][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.664865][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.672098][T11674] bridge_slave_1: entered allmulticast mode [ 279.679477][T11674] bridge_slave_1: entered promiscuous mode [ 279.703112][T11702] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 279.708744][T11674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.722999][T11674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.743377][T11702] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 279.755064][T11674] team0: Port device team_slave_0 added [ 279.763053][T11674] team0: Port device team_slave_1 added [ 279.770545][T11702] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 279.782076][T11702] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 279.791759][T11702] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 279.805121][T11674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.812710][T11702] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 279.822410][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.849388][T11674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.860213][T11702] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 279.869159][T11702] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 279.876996][T11702] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 279.885898][T11702] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 279.895089][T11674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.902473][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.928643][T11674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.984062][T11674] hsr_slave_0: entered promiscuous mode [ 279.990113][T11674] hsr_slave_1: entered promiscuous mode [ 279.996703][T11674] debugfs: 'hsr0' already exists in 'hsr' [ 280.002940][T11674] Cannot create hsr debugfs directory [ 280.424666][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1906'. [ 280.750340][ T51] Bluetooth: hci0: command tx timeout [ 281.028387][T11674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.047135][T11674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.062638][T11674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.099252][T11674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.497952][T11674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.576574][T11674] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.612077][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.619138][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.679568][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.686729][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.706976][ T30] audit: type=1804 audit(1771641013.572:795): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.1909" name="file0" dev="ramfs" ino=38931 res=1 errno=0 [ 282.900640][ T51] Bluetooth: hci0: command tx timeout [ 283.264232][ T30] audit: type=1400 audit(1771641015.113:796): avc: denied { link } for pid=11780 comm="syz.9.1918" name="#46" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 283.317049][T11674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.597776][T11674] veth0_vlan: entered promiscuous mode [ 283.666296][T11674] veth1_vlan: entered promiscuous mode [ 283.953422][T11674] veth0_macvtap: entered promiscuous mode [ 283.974833][T11674] veth1_macvtap: entered promiscuous mode [ 283.989631][ T8341] bridge_slave_1: left allmulticast mode [ 284.004620][ T8341] bridge_slave_1: left promiscuous mode [ 284.019413][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.779946][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1931'. [ 284.993408][ T51] Bluetooth: hci0: command tx timeout [ 285.134776][ T8341] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 285.641199][ T8341] bond0 (unregistering): Released all slaves [ 285.836771][ T8341] bond1 (unregistering): Released all slaves [ 285.847538][T11864] xt_connbytes: Forcing CT accounting to be enabled [ 285.876777][ T8341] bond2 (unregistering): (slave bond3): Releasing backup interface [ 285.917626][ T8341] bond2 (unregistering): Released all slaves [ 286.056584][ T8341] bond3 (unregistering): Released all slaves [ 286.482568][T11879] overlayfs: failed to clone upperpath [ 286.633833][T11674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.746784][ T30] audit: type=1400 audit(1771641018.595:797): avc: denied { setattr } for pid=11887 comm="syz.3.1940" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 286.791978][T11674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.148573][ T5809] Bluetooth: hci0: command tx timeout [ 287.355108][ T30] audit: type=1400 audit(1771641019.215:798): avc: denied { create } for pid=11908 comm="syz.9.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.390663][ T1334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.407130][ T1334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.419878][T11909] netlink: 'syz.9.1944': attribute type 1 has an invalid length. [ 287.500564][ T1334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.524312][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.567279][ T8341] hsr_slave_0: left promiscuous mode [ 287.581006][ T8341] hsr_slave_1: left promiscuous mode [ 287.595451][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.617513][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.802676][ T30] audit: type=1400 audit(1771641019.665:799): avc: denied { read } for pid=11919 comm="syz.9.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 288.679678][ T8341] team0 (unregistering): Port device team_slave_1 removed [ 288.746212][ T8341] team0 (unregistering): Port device team_slave_0 removed [ 289.246945][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 290.025585][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.054813][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.162494][ T8338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.181579][ T8338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.288859][ T30] audit: type=1326 audit(1771641022.146:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.3.1954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f900899c629 code=0x0 [ 290.422479][ T8341] IPVS: stop unused estimator thread 0... [ 290.434261][ T30] audit: type=1400 audit(1771641022.287:801): avc: denied { watch watch_reads } for pid=11984 comm="syz.7.1956" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 290.596458][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 290.766370][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 290.777761][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 290.787684][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.805622][ T10] usb 9-1: Product: syz [ 290.818547][ T10] usb 9-1: Manufacturer: syz [ 290.827570][ T10] usb 9-1: SerialNumber: syz [ 290.842565][ T10] usb 9-1: config 0 descriptor?? [ 290.979419][T12008] io-wq is not configured for unbound workers [ 291.079529][ T10] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.122518][ T30] audit: type=1400 audit(1771641022.987:802): avc: denied { accept } for pid=12009 comm="syz.7.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.672080][T12040] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 291.924788][ T10] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 291.957797][ T10] usb 9-1: USB disconnect, device number 9 [ 292.395320][ T30] audit: type=1400 audit(1771641024.258:803): avc: denied { read } for pid=12062 comm="syz.3.1978" lport=38759 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 293.181172][ T792] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 293.400724][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.447003][ T792] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 293.574984][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.685821][ T792] usb 3-1: config 0 descriptor?? [ 293.778264][ T792] pwc: Askey VC010 type 2 USB webcam detected. [ 294.155948][ T792] pwc: recv_control_msg error -32 req 02 val 2b00 [ 294.163244][ T792] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.183340][ T792] pwc: recv_control_msg error -32 req 02 val 2c00 [ 294.191044][ T792] pwc: recv_control_msg error -32 req 04 val 1000 [ 294.250490][ T792] pwc: recv_control_msg error -32 req 04 val 1300 [ 294.262874][ T792] pwc: recv_control_msg error -32 req 04 val 1400 [ 294.390022][ T792] pwc: recv_control_msg error -32 req 02 val 2000 [ 294.405318][ T792] pwc: recv_control_msg error -32 req 02 val 2100 [ 294.629188][ T792] pwc: recv_control_msg error -71 req 02 val 2500 [ 294.653268][ T792] pwc: recv_control_msg error -71 req 02 val 2400 [ 294.877808][ T792] pwc: recv_control_msg error -71 req 02 val 2600 [ 294.886856][ T792] pwc: recv_control_msg error -71 req 02 val 2900 [ 294.896802][ T792] pwc: recv_control_msg error -71 req 02 val 2800 [ 294.935066][ T792] pwc: recv_control_msg error -71 req 04 val 1100 [ 294.945359][ T792] pwc: recv_control_msg error -71 req 04 val 1200 [ 294.970654][ T792] pwc: Registered as video103. [ 295.011216][ T792] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 295.122364][ T792] usb 3-1: USB disconnect, device number 4 [ 295.173821][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1991'. [ 295.541164][T12163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12163 comm=syz.7.1991 [ 296.391018][T12174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.744846][T12189] overlayfs: failed to clone upperpath [ 297.164661][T12200] loop6: detected capacity change from 0 to 2640 [ 297.171013][ T30] audit: type=1400 audit(1771641029.040:804): avc: denied { append } for pid=12198 comm="syz.2.2002" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.208914][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.238350][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.299038][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.372977][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.522890][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.671764][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.712929][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.724551][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.732384][T12200] ldm_validate_partition_table(): Disk read failed. [ 297.823547][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.851286][T12200] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.890311][T12200] Dev loop6: unable to read RDB block 0 [ 297.935104][T12200] loop6: unable to read partition table [ 297.989386][T12200] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 298.080450][T12224] Invalid option length (1048308) for dns_resolver key [ 298.271477][ T30] audit: type=1400 audit(1771641030.130:805): avc: denied { ioctl } for pid=12222 comm="syz.9.2009" path="socket:[38859]" dev="sockfs" ino=38859 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 298.307067][ T5809] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 298.307140][ T5809] Bluetooth: hci1: adv larger than maximum supported [ 298.315012][ T5809] Bluetooth: hci1: Malformed LE Event: 0x0d [ 298.315970][ T5179] ldm_validate_partition_table(): Disk read failed. [ 298.368974][ T5179] Dev loop6: unable to read RDB block 0 [ 298.375297][ T5179] loop6: unable to read partition table [ 299.420313][T12267] befs: (nullb0): invalid magic header [ 301.433203][ T30] audit: type=1400 audit(1771641033.282:806): avc: denied { read } for pid=12304 comm="syz.2.2021" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.503774][ T30] audit: type=1400 audit(1771641033.282:807): avc: denied { open } for pid=12304 comm="syz.2.2021" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.633801][ T30] audit: type=1400 audit(1771641033.282:808): avc: denied { ioctl } for pid=12304 comm="syz.2.2021" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.712798][ T30] audit: type=1400 audit(1771641033.282:809): avc: denied { ioctl } for pid=12304 comm="syz.2.2021" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 301.820763][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 301.982000][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.022730][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.061674][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 302.081321][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 302.102943][ T5888] usb 3-1: Manufacturer: syz [ 302.122993][ T5888] usb 3-1: config 0 descriptor?? [ 302.256362][T12331] kvm: pic: non byte write [ 302.974305][ T5888] hid_parser_main: 5 callbacks suppressed [ 302.974322][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.020324][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.044159][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.084536][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.101683][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.125226][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.140029][ T5888] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 303.474611][ T5888] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 304.049606][ T5888] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 304.080560][ T5888] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 304.153358][ T5888] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 304.176270][ T5888] usb 3-1: USB disconnect, device number 5 [ 304.461398][T12370] fido_id[12370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 306.023893][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2040'. [ 306.096522][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2040'. [ 309.062103][T12457] netlink: 'syz.7.2050': attribute type 3 has an invalid length. [ 309.100917][T12457] netlink: 'syz.7.2050': attribute type 3 has an invalid length. [ 309.430016][T12469] netlink: 1268 bytes leftover after parsing attributes in process `syz.9.2053'. [ 309.665752][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2048'. [ 309.724194][T12487] ip6gre1: entered promiscuous mode [ 309.804359][T12487] ip6gre1: entered allmulticast mode [ 309.978649][T12498] netlink: 'syz.8.2048': attribute type 6 has an invalid length. [ 309.994327][T12498] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2048'. [ 310.154157][ T30] audit: type=1400 audit(1771641042.026:810): avc: denied { watch watch_reads } for pid=12502 comm="syz.2.2060" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 311.706990][T12549] overlayfs: failed to clone lowerpath [ 312.653548][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.659955][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.404662][ T8844] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 314.954152][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 315.424156][ T8844] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 315.434450][ T8844] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 315.474754][ T8844] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 315.491146][ T8844] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 315.506551][ T8844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.580152][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2093'. [ 315.590111][ T8844] usb 9-1: Product: syz [ 315.599422][ T8844] usb 9-1: Manufacturer: syz [ 315.609787][ T8844] usb 9-1: SerialNumber: syz [ 315.638741][ T8844] usb 9-1: config 0 descriptor?? [ 315.652414][T12644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12644 comm=syz.2.2093 [ 315.801414][T12624] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 315.855662][T12624] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 315.889635][ T8844] usb 9-1: ucan: probing device on interface #0 [ 316.820238][ T8844] ucan 9-1:0.0 can0: registered device [ 316.843715][ T8844] ucan 9-1:0.0 can0: firmware string: unknown [ 316.869969][ T8844] usb 9-1: USB disconnect, device number 10 [ 317.512927][ T792] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 318.652433][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 318.667220][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.679213][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.804306][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.817291][ T792] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 318.826458][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.844881][ T792] usb 3-1: config 0 descriptor?? [ 319.328746][ T792] pantherlord 0003:0810:0002.000E: unknown main item tag 0x3 [ 319.471962][ T792] pantherlord 0003:0810:0002.000E: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 319.501848][ T792] pantherlord 0003:0810:0002.000E: no output reports found [ 319.670129][ T792] usb 3-1: USB disconnect, device number 6 [ 319.795665][T12690] fido_id[12690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 322.200422][ T30] audit: type=1400 audit(1771641054.072:811): avc: denied { firmware_load } for pid=12719 comm="syz.7.2116" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 322.284043][T12720] syz.7.2116 (12720) used greatest stack depth: 19608 bytes left [ 322.776900][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 322.971664][ T10] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 322.981888][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.999761][ T10] usb 9-1: config 0 descriptor?? [ 323.033973][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 323.239827][ T10] gp8psk: usb in 128 operation failed. [ 323.246715][ T10] gp8psk: usb in 137 operation failed. [ 323.252579][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 323.263860][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 323.375531][ T10] usb 9-1: media controller created [ 323.914395][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.605573][ T10] gp8psk_fe: Frontend attached [ 324.616984][ T10] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 324.638089][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 325.081263][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 325.093360][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 325.295007][ T10] usb 9-1: USB disconnect, device number 11 [ 325.527379][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 329.552633][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 329.949663][ T30] audit: type=1400 audit(1771641061.826:812): avc: denied { execmod } for pid=12873 comm="syz.7.2148" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 330.132073][ T30] audit: type=1400 audit(1771641061.826:813): avc: denied { execute } for pid=12873 comm="syz.7.2148" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 330.656197][ T30] audit: type=1400 audit(1771641062.537:814): avc: denied { audit_read } for pid=12889 comm="syz.3.2152" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.257290][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 335.804433][ T30] audit: type=1326 audit(1771641067.699:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12957 comm="syz.9.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7fc00000 [ 335.943764][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 336.104763][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.117644][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 336.143488][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.172944][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.190921][T12967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.203742][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.512065][ T8844] usb 3-1: USB disconnect, device number 7 [ 339.840869][ T30] audit: type=1400 audit(1771641071.731:816): avc: denied { append } for pid=13016 comm="syz.8.2193" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 340.045047][T13021] smc: net device bond0 applied user defined pnetid SYZ2 [ 340.059249][T13021] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2194'. [ 340.162773][T13021] smc: removing net device bond0 with user defined pnetid SYZ2 [ 340.246818][T13021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.899497][T13021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.919033][T13021] bond0 (unregistering): Released all slaves [ 344.483525][ T5918] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 344.939061][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 344.962770][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.986626][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2211'. [ 344.996119][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.025151][ T5918] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 345.034834][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.093970][ T5918] usb 9-1: config 0 descriptor?? [ 345.761310][T13094] cgroup: Unknown subsys name 'cpuset' [ 345.845802][ T5918] playstation 0003:054C:05C4.000F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.8-1/input0 [ 346.297372][ T5918] playstation 0003:054C:05C4.000F: Failed to retrieve feature with reportID 163: -32 [ 346.307468][ T5918] playstation 0003:054C:05C4.000F: Failed to retrieve DualShock4 firmware info: -32 [ 346.321136][ T5918] playstation 0003:054C:05C4.000F: Failed to get firmware info from DualShock4 [ 346.331144][ T5918] playstation 0003:054C:05C4.000F: HW/FW version data in sysfs will be invalid. [ 346.619096][T13117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.871735][T13117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.130062][ T5918] input: HID 054c:05c4 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.000F/input/input14 [ 347.228307][ T5918] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.000F/input/input15 [ 347.260008][T13122] overlayfs: failed to clone upperpath [ 347.306862][ T5918] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.000F/input/input16 [ 348.586251][ T5918] playstation 0003:054C:05C4.000F: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 348.602093][ T5918] usb 9-1: USB disconnect, device number 12 [ 350.669188][ T30] audit: type=1400 audit(1771641082.567:817): avc: denied { sys_module } for pid=13150 comm="syz.9.2232" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 350.711430][T13156] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 350.772766][T13156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.793297][T13156] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 350.824220][T13156] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.049013][ T148] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.086057][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 351.195982][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.219081][ T148] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.236019][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.266726][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.285859][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 351.342243][ T148] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.396174][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.416630][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.429142][T13172] netlink: 'syz.9.2239': attribute type 4 has an invalid length. [ 351.436910][T13172] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2239'. [ 351.463229][T13172] .`: renamed from bond0 (while UP) [ 351.495987][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.515298][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 351.601375][ T148] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.626061][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.970075][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.982387][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.994179][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.005000][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.014366][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.214771][ T148] bridge_slave_0: left allmulticast mode [ 352.232984][ T148] bridge_slave_0: left promiscuous mode [ 352.253796][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.506599][ T30] audit: type=1400 audit(1771641084.408:818): avc: denied { append } for pid=13199 comm="syz.8.2246" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 352.998975][ T148] bond1 (unregistering): Released all slaves [ 353.253852][ T148] tipc: Left network mode [ 353.684753][ T30] audit: type=1326 audit(1771641085.578:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.8.2254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831079c629 code=0x0 [ 354.065814][ T5809] Bluetooth: hci1: command tx timeout [ 354.341407][T13190] chnl_net:caif_netlink_parms(): no params data found [ 354.636309][ T148] hsr_slave_0: left promiscuous mode [ 354.798793][ T148] hsr_slave_1: left promiscuous mode [ 354.824120][ T30] audit: type=1326 audit(1771641086.709:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.8.2261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831079c629 code=0x0 [ 354.868435][ T148] veth1_macvtap: left promiscuous mode [ 354.897463][ T148] veth0_macvtap: left promiscuous mode [ 354.933646][ T148] veth1_vlan: left promiscuous mode [ 355.158292][ T148] veth0_vlan: left promiscuous mode [ 356.056582][ T148] team0 (unregistering): Port device team_slave_1 removed [ 356.094736][ T8344] net_ratelimit: 155 callbacks suppressed [ 356.094754][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.141689][ T148] team0 (unregistering): Port device team_slave_0 removed [ 356.146152][ T5809] Bluetooth: hci1: command tx timeout [ 356.163573][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.205146][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.263431][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.309238][ T8350] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.353443][ T8350] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.415035][ T8350] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.434253][ T8350] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.943586][ T8350] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 357.029923][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.068618][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.069055][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 357.140056][T13190] bridge_slave_0: entered allmulticast mode [ 357.245494][T13190] bridge_slave_0: entered promiscuous mode [ 357.369509][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.397031][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.502601][T13190] bridge_slave_1: entered allmulticast mode [ 357.518232][T13190] bridge_slave_1: entered promiscuous mode [ 357.787290][T13190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.827376][T13190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.046620][T13190] team0: Port device team_slave_0 added [ 358.071283][T13190] team0: Port device team_slave_1 added [ 358.551029][ T5809] Bluetooth: hci1: command tx timeout [ 358.588526][T13190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.595588][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.649841][T13190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.674582][T13190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.681538][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.805841][T13190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.211581][T13190] hsr_slave_0: entered promiscuous mode [ 359.218115][T13190] hsr_slave_1: entered promiscuous mode [ 359.225345][T13190] debugfs: 'hsr0' already exists in 'hsr' [ 359.231074][T13190] Cannot create hsr debugfs directory [ 360.027875][T13356] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2278'. [ 360.144736][T13356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13356 comm=syz.9.2278 [ 360.484898][ T30] audit: type=1400 audit(1771641092.382:821): avc: denied { watch_mount } for pid=13367 comm="syz.9.2280" path="/97" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 360.514398][T13368] overlayfs: failed to clone upperpath [ 360.657159][ T5809] Bluetooth: hci1: command tx timeout [ 360.742269][ T30] audit: type=1326 audit(1771641092.652:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.3.2273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x0 [ 361.101157][ T8344] net_ratelimit: 107 callbacks suppressed [ 361.101176][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.144710][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.180973][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.330995][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.370674][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.392685][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.439582][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.472596][T13388] virtio-fs: tag not found [ 361.513872][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.574348][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.733492][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.966250][T13394] netlink: 'syz.3.2287': attribute type 27 has an invalid length. [ 362.273277][T13395] hfsplus: unable to find HFS+ superblock [ 363.212556][ T30] audit: type=1400 audit(1771641095.103:823): avc: denied { getopt } for pid=13410 comm="syz.8.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.940354][T13190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.970570][T13190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.089935][T13190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.138451][T13190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.345220][T13190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.380094][T13440] 9pnet: p9_errstr2errno: server reported unknown error .group_wait_ [ 364.410999][T13190] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.448643][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.455790][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.544403][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.551555][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.767273][T13455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=13455 comm=syz.3.2301 [ 365.189947][T13190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.631101][T13190] veth0_vlan: entered promiscuous mode [ 365.697110][T13190] veth1_vlan: entered promiscuous mode [ 365.997472][T13190] veth0_macvtap: entered promiscuous mode [ 366.045772][T13190] veth1_macvtap: entered promiscuous mode [ 366.152608][ T1334] net_ratelimit: 81 callbacks suppressed [ 366.152625][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.170427][T13190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.181275][T13190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.206545][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.226661][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.238459][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.251976][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.263729][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.286075][ T1121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.294854][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.308620][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.309347][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.368524][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.429084][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.463221][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.481247][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 366.593033][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.644783][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.737587][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.765847][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.801435][T13500] overlayfs: failed to clone upperpath [ 368.180168][ T29] libceph: connect (1)[c::]:6789 error -101 [ 368.186419][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 368.244975][T13527] ceph: No mds server is up or the cluster is laggy [ 369.676727][ T30] audit: type=1400 audit(1771641101.576:824): avc: denied { shutdown } for pid=13549 comm="syz.2.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.510306][T13573] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 371.326477][ T8341] net_ratelimit: 58 callbacks suppressed [ 371.326496][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 371.382824][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 371.520966][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 371.827885][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.332193][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 372.455593][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.693136][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 372.754617][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 372.915696][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.009468][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 374.058067][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.064383][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.291026][T13634] overlayfs: failed to clone upperpath [ 376.367258][T13667] uprobe: syz.9.2346:13667 failed to unregister, leaking uprobe [ 376.417360][ T49] net_ratelimit: 34 callbacks suppressed [ 376.417378][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.483408][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 376.699920][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.733191][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.133984][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 377.150284][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.283558][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 377.309575][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.488160][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 377.544263][ T30] audit: type=1400 audit(1771641109.460:825): avc: denied { getopt } for pid=13661 comm="syz.3.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.573197][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 381.655380][ T1334] net_ratelimit: 68 callbacks suppressed [ 381.655401][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 381.679952][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 381.778324][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 381.915985][T13779] netlink: 'syz.9.2371': attribute type 2 has an invalid length. [ 381.980584][ T30] audit: type=1400 audit(1771641113.872:826): avc: denied { connect } for pid=13778 comm="syz.9.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 382.011701][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 382.025410][T13781] netlink: 'syz.9.2371': attribute type 2 has an invalid length. [ 382.032853][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.201986][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 382.253212][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.391965][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 382.415448][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.550317][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 382.568725][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.500546][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.507879][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.896831][T13812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.964171][T13812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.274818][T13806] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 384.582159][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2381'. [ 384.629070][ T8344] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.690429][ T8344] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.702237][ T8344] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.712441][ T8344] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.187041][ T5918] IPVS: starting estimator thread 0... [ 386.191006][T13849] kvm: pic: level sensitive irq not supported [ 386.192860][T13849] kvm: pic: single mode not supported [ 386.208612][T13849] kvm: pic: single mode not supported [ 386.221687][T13849] kvm: pic: single mode not supported [ 386.227083][T13849] kvm: pic: level sensitive irq not supported [ 386.300977][T13855] IPVS: using max 42 ests per chain, 100800 per kthread [ 386.669327][ T148] net_ratelimit: 90 callbacks suppressed [ 386.669363][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 386.728340][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 386.874983][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 386.884441][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.008780][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 387.016546][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.241258][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 387.261591][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.895251][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.075148][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.465247][T13917] netlink: 'syz.1.2398': attribute type 8 has an invalid length. [ 391.749432][ T49] net_ratelimit: 69 callbacks suppressed [ 391.749446][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 392.365623][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 392.410909][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 392.455715][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 392.475311][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 392.542980][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 392.644756][T13814] Set syz1 is full, maxelem 65536 reached [ 392.659633][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 392.811555][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.110179][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.222398][T14002] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 396.244755][ T30] audit: type=1400 audit(1771641128.169:827): avc: denied { override_creds } for pid=13985 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 396.296848][T14002] bond1: entered promiscuous mode [ 396.302452][T14002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.341352][T14002] bond1: (slave bridge1): making interface the new active one [ 396.456886][T14002] bridge1: entered promiscuous mode [ 396.503358][ T30] audit: type=1400 audit(1771641128.390:828): avc: denied { create } for pid=14001 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 396.545567][T14002] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 396.771024][ T49] net_ratelimit: 46 callbacks suppressed [ 396.771043][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.819466][T14007] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.837067][ T30] audit: type=1400 audit(1771641128.390:829): avc: denied { write } for pid=14001 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 396.863765][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.872007][T14007] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 396.906409][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.938937][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.973144][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 397.010922][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 397.018896][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 397.172021][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 397.199946][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 397.362862][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 401.250966][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 401.431032][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 401.438279][ T29] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.447841][ T29] usb 9-1: config 0 has no interface number 0 [ 401.461887][ T29] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.483856][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.522504][ T29] usb 9-1: Product: syz [ 401.540915][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 401.548474][ T29] usb 9-1: Manufacturer: syz [ 401.553109][ T29] usb 9-1: SerialNumber: syz [ 401.569569][ T29] usb 9-1: config 0 descriptor?? [ 401.579773][ T29] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 401.731190][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 401.766054][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 401.789460][ T24] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 401.797919][ T24] usb 2-1: config 0 has no interface number 0 [ 401.816159][ T24] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 401.827817][ T29] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 401.845758][ T148] net_ratelimit: 47 callbacks suppressed [ 401.845781][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 401.850193][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 401.868559][ T29] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 401.916018][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 401.923633][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.980732][ T24] usb 2-1: Product: syz [ 402.035660][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 402.050942][ T168] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.058869][ T168] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 402.083260][ T24] usb 2-1: Manufacturer: syz [ 402.094834][ T24] usb 2-1: SerialNumber: syz [ 402.127279][ T24] usb 2-1: config 0 descriptor?? [ 402.139536][T14062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 402.191104][ T168] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.200163][ T168] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 402.236945][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 402.237223][ T5919] usb 9-1: USB disconnect, device number 13 [ 402.340182][ T168] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.360239][ T168] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 402.371689][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 402.388683][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.403674][ T5919] quatech2 9-1:0.51: device disconnected [ 402.436172][T14062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 402.480474][ T168] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.491089][ T168] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 403.450312][ T30] audit: type=1400 audit(1771641135.373:830): avc: denied { mounton } for pid=14085 comm="syz.9.2443" path="/137/file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 403.759249][ T30] audit: type=1400 audit(1771641135.463:831): avc: denied { append } for pid=14085 comm="syz.9.2443" name="file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 403.838408][ T30] audit: type=1400 audit(1771641135.463:832): avc: denied { map } for pid=14085 comm="syz.9.2443" path="/137/file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 403.869296][ T30] audit: type=1400 audit(1771641135.463:833): avc: denied { execute } for pid=14085 comm="syz.9.2443" path="/137/file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 405.251042][ T24] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 405.279441][ T24] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 405.364716][ T24] asix 2-1:0.188: probe with driver asix failed with error -71 [ 405.471012][ T24] usb 2-1: USB disconnect, device number 9 [ 406.220487][T14117] fuse: Unknown parameter '0xffffffffffffffff' [ 406.906704][ T1334] net_ratelimit: 40 callbacks suppressed [ 406.906724][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.926997][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.041406][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 407.114799][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.248289][ T8350] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 407.277943][ T8350] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.437910][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 407.466406][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.646854][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 407.679792][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 411.127272][T14203] overlayfs: failed to clone upperpath [ 411.299931][T14208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 411.309199][T14208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 412.024134][ T8344] net_ratelimit: 48 callbacks suppressed [ 412.024150][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.156896][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 412.379992][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.389666][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 412.505266][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.513446][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 412.799875][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.808567][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 412.936769][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.978977][ T1334] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 413.386194][T14249] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 413.493113][T14249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.241925][ T30] audit: type=1804 audit(1771641146.168:834): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2484" name="file0" dev="tmpfs" ino=794 res=1 errno=0 [ 414.373700][ T30] audit: type=1804 audit(1771641146.299:835): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.2484" name="file0" dev="tmpfs" ino=794 res=1 errno=0 [ 415.045321][ T30] audit: type=1326 audit(1771641146.959:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14289 comm="syz.8.2492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831079c629 code=0x0 [ 415.108752][T14295] bridge_slave_1: default FDB implementation only supports local addresses [ 416.662231][T14316] tipc: Enabling of bearer rejected, failed to enable media [ 417.052395][ T8344] net_ratelimit: 62 callbacks suppressed [ 417.052416][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.093367][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 417.224069][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.266592][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.270251][T14327] syzkaller0: entered promiscuous mode [ 417.302904][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.305992][T14327] syzkaller0: entered allmulticast mode [ 417.363426][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.413223][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.429439][T14329] tipc: Started in network mode [ 417.435440][T14329] tipc: Node identity a6b803ef626a, cluster identity 4711 [ 417.450452][T14329] tipc: Enabled bearer , priority 0 [ 417.458830][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.494434][ T8344] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.516753][ T8344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 417.921669][ T30] audit: type=1326 audit(1771641149.850:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.9.2510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x0 [ 418.338662][T14359] netlink: 798 bytes leftover after parsing attributes in process `syz.3.2511'. [ 418.381972][T14361] delete_channel: no stack [ 418.460376][ T30] audit: type=1400 audit(1771641150.361:838): avc: denied { getopt } for pid=14360 comm="syz.3.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 418.480229][ T975] tipc: Node number set to 3302097903 [ 418.613739][ T30] audit: type=1400 audit(1771641150.541:839): avc: denied { ioctl } for pid=14364 comm="syz.3.2515" path="socket:[46776]" dev="sockfs" ino=46776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 419.388833][ T30] audit: type=1800 audit(1771641151.311:840): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2517" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 420.475370][ T30] audit: type=1400 audit(1771641152.412:841): avc: denied { write } for pid=14390 comm="syz.1.2524" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 421.359973][ T30] audit: type=1400 audit(1771641153.272:842): avc: denied { watch watch_reads } for pid=14406 comm="syz.1.2528" path="/38/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 422.162292][ T8338] net_ratelimit: 81 callbacks suppressed [ 422.162353][ T8338] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.400479][ T8338] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.443737][ T8338] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.480280][ T8338] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.499701][ T8338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 422.536166][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2533'. [ 422.864672][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.917471][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.961194][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.031255][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.043669][T14426] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 423.061461][T14426] bond0: (slave vcan1): Error -95 calling set_mac_address [ 423.081486][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.469532][ T30] audit: type=1400 audit(1771641155.393:843): avc: denied { listen } for pid=14437 comm="syz.8.2538" lport=49338 faddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 424.831863][ T30] audit: type=1400 audit(1771641156.764:844): avc: denied { ioctl } for pid=14455 comm="syz.9.2543" path="socket:[46906]" dev="sockfs" ino=46906 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 425.417220][ T30] audit: type=1400 audit(1771641157.344:845): avc: denied { getopt } for pid=14467 comm="syz.8.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.428752][T14468] IPVS: length: 218 != 24 [ 425.555614][T14470] overlayfs: failed to clone upperpath [ 425.589241][T14471] lo: entered allmulticast mode [ 425.697229][T14467] lo: left allmulticast mode [ 425.972114][ T8338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 426.019005][ T8338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 426.055324][ T8338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 426.085106][ T8338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 426.881514][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2552'. [ 427.578646][ T1334] net_ratelimit: 68 callbacks suppressed [ 427.578663][ T1334] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.615076][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2552'. [ 427.663549][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.798201][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.832348][T14492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.840101][ T8338] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.867592][ T8338] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.906319][T14496] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 427.924452][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.068099][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 428.622013][ T148] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.630988][ T148] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 428.761402][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.815713][T14513] netlink: 'syz.8.2557': attribute type 1 has an invalid length. [ 428.851070][T14513] gre1: entered promiscuous mode [ 428.866791][T14513] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 428.877672][T14513] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 428.889553][T14513] bond1: (slave gre1): making interface the new active one [ 428.898344][T14513] bond1: (slave gre1): Enslaving as an active interface with an up link [ 428.901604][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2557'. [ 428.991703][T14515] bond1 (unregistering): (slave gre1): Releasing backup interface [ 429.004460][T14515] bond1 (unregistering): Released all slaves [ 431.003747][ T8350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 431.016012][ T8350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 431.045280][ T8350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 431.083531][ T8350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 432.260497][T14566] netlink: 5204 bytes leftover after parsing attributes in process `syz.8.2573'. [ 432.815895][ T1121] net_ratelimit: 46 callbacks suppressed [ 432.815916][ T1121] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.869640][ T1121] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.038109][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.072165][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.205073][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.224981][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.335417][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.350126][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.453349][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'. [ 433.475697][ T8341] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.483723][ T8341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.534301][T14590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.684005][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.730504][T14597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.739272][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.748192][T14597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.563060][ T30] audit: type=1400 audit(1771641166.499:846): avc: denied { ioctl } for pid=14606 comm="syz.3.2586" path="socket:[47536]" dev="sockfs" ino=47536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.377278][T14617] lo: entered promiscuous mode [ 435.390852][T14617] tunl0: entered promiscuous mode [ 435.431600][T14617] gre0: entered promiscuous mode [ 435.444006][T14617] gretap0: entered promiscuous mode [ 435.449382][T14617] erspan0: entered promiscuous mode [ 435.455020][T14617] ip_vti0: entered promiscuous mode [ 435.470426][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.476949][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.493045][T14617] ip6_vti0: entered promiscuous mode [ 435.506606][T14617] sit0: entered promiscuous mode [ 435.515471][T14617] ip6tnl0: entered promiscuous mode [ 435.520903][T14617] ip6gre0: entered promiscuous mode [ 435.725355][T14617] syz_tun: entered promiscuous mode [ 435.748526][T14617] ip6gretap0: entered promiscuous mode [ 435.761327][T14617] bridge0: entered promiscuous mode [ 435.861555][T14617] team0: entered promiscuous mode [ 435.882144][T14617] team_slave_0: entered promiscuous mode [ 435.888508][T14617] team_slave_1: entered promiscuous mode [ 435.895001][T14617] dummy0: entered promiscuous mode [ 435.913427][T14617] nlmon0: entered promiscuous mode [ 435.952734][T14617] caif0: entered promiscuous mode [ 436.498036][T14617] vxcan0: entered promiscuous mode [ 436.534005][T14617] vxcan1: entered promiscuous mode [ 436.539501][T14617] veth0: entered promiscuous mode [ 436.546052][T14617] veth1: entered promiscuous mode [ 436.551757][T14617] wg1: entered promiscuous mode [ 436.564943][T14617] wg2: entered promiscuous mode [ 436.571531][T14617] veth1_to_bridge: entered promiscuous mode [ 436.599289][T14617] bridge_slave_1: entered promiscuous mode [ 436.643408][T14617] veth0_to_bond: entered promiscuous mode [ 436.649291][T14617] bond_slave_0: entered promiscuous mode [ 436.658045][T14617] veth1_to_bond: entered promiscuous mode [ 436.674093][T14617] bond_slave_1: entered promiscuous mode [ 436.690687][T14617] veth0_to_team: entered promiscuous mode [ 436.748603][T14617] veth1_to_team: entered promiscuous mode [ 436.759301][T14617] veth0_to_batadv: entered promiscuous mode [ 436.824922][T14617] batadv_slave_0: entered promiscuous mode [ 436.831012][T14617] veth1_to_batadv: entered promiscuous mode [ 436.837750][T14617] batadv_slave_1: entered promiscuous mode [ 436.845494][T14617] xfrm0: entered promiscuous mode [ 436.877572][T14617] veth0_to_hsr: entered promiscuous mode [ 436.893808][T14617] veth1_to_hsr: entered promiscuous mode [ 436.913433][T14617] hsr0: entered promiscuous mode [ 436.919814][T14617] veth1_virt_wifi: entered promiscuous mode [ 436.979140][T14617] veth0_virt_wifi: entered promiscuous mode [ 436.994073][T14617] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 437.013311][T14617] macvtap0: entered promiscuous mode [ 437.029614][T14617] macsec0: entered promiscuous mode [ 437.047928][T14617] geneve0: entered promiscuous mode [ 437.082598][T14617] geneve1: entered promiscuous mode [ 437.110595][T14617] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 437.128643][T14617] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 437.143495][T14617] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 437.152159][T14617] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 437.160034][T14617] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 437.170029][T14617] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 437.177191][T14617] vxlan0: entered promiscuous mode [ 437.182481][T14617] : entered promiscuous mode [ 437.187477][T14617] veth2: entered promiscuous mode [ 437.208592][T14617] veth3: entered promiscuous mode [ 437.221398][T14617] veth4: entered promiscuous mode [ 437.233841][T14617] veth5: entered promiscuous mode [ 437.244365][T14617] pimreg: entered promiscuous mode [ 437.376377][T14617] bond0: entered promiscuous mode [ 437.392778][T14617] bridge1: entered promiscuous mode [ 437.403649][T14617] bond1: entered promiscuous mode [ 437.419116][T14617] geneve2: entered promiscuous mode [ 437.432449][T14617] bond2: entered promiscuous mode [ 437.446314][T14617] veth6: entered promiscuous mode [ 437.458624][T14617] veth7: entered promiscuous mode [ 437.471074][T14617] veth8: entered promiscuous mode [ 437.488535][T14617] veth9: entered promiscuous mode [ 437.553595][T14617] gtp0: entered promiscuous mode [ 437.569312][T14617] bridge2: entered promiscuous mode [ 437.585827][T14617] bond3: entered promiscuous mode [ 437.603883][T14617] erspan1: entered promiscuous mode [ 437.616204][T14617] bridge3: entered promiscuous mode [ 437.629947][T14617] bond4: entered promiscuous mode [ 437.643776][T14617] ip6gretap1: entered promiscuous mode [ 437.658054][T14617] geneve3: entered promiscuous mode [ 437.675771][ T1334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.693976][ T1334] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.801532][ T1334] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.818488][ T1334] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 439.943689][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2602'. [ 440.399670][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2604'. [ 440.730848][T14671] bridge1: port 1(veth5) entered blocking state [ 441.666259][T14671] bridge1: port 1(veth5) entered disabled state [ 441.703827][T14671] veth5: entered allmulticast mode [ 441.714990][T14671] veth5: entered promiscuous mode [ 442.219575][T14673] bridge1: port 2(veth7) entered blocking state [ 442.226664][T14673] bridge1: port 2(veth7) entered disabled state [ 442.238386][T14673] veth7: entered allmulticast mode [ 442.272168][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2611'. [ 442.303017][T14673] veth7: entered promiscuous mode [ 444.488992][ T30] audit: type=1400 audit(1771641176.424:847): avc: denied { watch watch_reads } for pid=14743 comm="syz.8.2629" path="pipe:[47975]" dev="pipefs" ino=47975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 445.760174][T14761] netlink: 'syz.8.2634': attribute type 1 has an invalid length. [ 452.995042][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 453.005154][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 453.016839][T14827] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 453.024630][T14827] UDF-fs: Scanning with blocksize 512 failed [ 453.037106][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 453.048156][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 453.058441][T14827] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 453.068260][T14827] UDF-fs: Scanning with blocksize 1024 failed [ 453.075494][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 453.091703][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 453.101555][T14827] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 453.109605][T14827] UDF-fs: Scanning with blocksize 2048 failed [ 453.124438][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 453.217867][T14827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 453.355522][T14827] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 453.363215][T14827] UDF-fs: Scanning with blocksize 4096 failed [ 453.376083][T14827] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 453.738295][ T30] audit: type=1400 audit(1771641185.688:848): avc: denied { create } for pid=14830 comm="syz.8.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 454.891519][T14839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2656'. [ 454.920966][T14839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14839 comm=syz.1.2656 [ 459.122023][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2673'. [ 462.820187][ T30] audit: type=1800 audit(1771641194.693:849): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2679" name="bus" dev="ramfs" ino=48935 res=0 errno=0 [ 462.897017][T14945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2686'. [ 462.923765][T14945] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2686'. [ 462.941999][T14945] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2686'. [ 462.978570][T14945] Cannot find set identified by id 0 to match [ 468.428478][ T8844] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 468.600784][T14992] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 468.621202][ T8844] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.651261][ T8844] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 468.674155][ T8844] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 468.697970][ T8844] usb 9-1: Product: syz [ 468.702145][ T8844] usb 9-1: Manufacturer: syz [ 468.727663][ T8844] usb 9-1: SerialNumber: syz [ 468.740605][ T8844] usb 9-1: config 0 descriptor?? [ 468.770218][ T8844] keyspan 9-1:0.0: Keyspan 4 port adapter converter detected [ 468.787912][ T8844] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 468.805875][ T8844] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 88 [ 468.832354][ T8844] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 468.866781][ T8844] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 468.898515][ T8844] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 468.937676][ T8844] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 468.950521][ T8844] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 468.963133][ T8844] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 469.007659][ T8844] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6 [ 469.225834][ T8844] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 471.858859][ T8844] usb 9-1: USB disconnect, device number 14 [ 471.889187][ T8844] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 471.980597][ T30] audit: type=1400 audit(1771641203.937:850): avc: denied { map } for pid=15041 comm="syz.3.2711" path="socket:[49604]" dev="sockfs" ino=49604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 472.020893][ T8844] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 472.057446][ T8844] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 472.114458][ T8844] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 472.138582][ T8844] keyspan 9-1:0.0: device disconnected [ 473.276668][T15058] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 473.309126][T15062] netlink: 'syz.2.2712': attribute type 1 has an invalid length. [ 473.813435][ T30] audit: type=1400 audit(1771641205.528:851): avc: denied { write } for pid=15063 comm="syz.3.2717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 473.920782][T15062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.997903][T15070] bond3: (slave geneve2): making interface the new active one [ 474.027292][ T30] audit: type=1400 audit(1771641205.988:852): avc: denied { accept } for pid=15061 comm="syz.2.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 474.029003][T15070] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 474.060803][T15072] syzkaller0: entered promiscuous mode [ 474.066773][T15072] syzkaller0: entered allmulticast mode [ 474.128256][T15073] bond3: entered promiscuous mode [ 474.133412][T15073] geneve2: entered promiscuous mode [ 475.861395][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2727'. [ 476.024421][T15102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15102 comm=syz.3.2727 [ 477.446462][ T30] audit: type=1400 audit(1771641209.410:853): avc: denied { setopt } for pid=15121 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 477.644705][T15125] overlayfs: failed to clone lowerpath [ 478.496490][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 478.640465][T15131] 8021q: VLANs not supported on ip6tnl0 [ 479.695868][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 479.723313][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 483.366624][ T5809] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 484.278541][ T30] audit: type=1400 audit(1771641216.233:854): avc: denied { read } for pid=15219 comm="syz.1.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.711502][ T8844] IPVS: starting estimator thread 0... [ 486.828136][T15263] IPVS: using max 73 ests per chain, 175200 per kthread [ 487.599429][ T5809] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 487.610468][ T5809] Bluetooth: hci2: Injecting HCI hardware error event [ 487.621666][ T5809] Bluetooth: hci2: hardware error 0x00 [ 489.794399][ T5809] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 490.156466][ T5809] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 492.177506][ T975] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 492.505206][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.554468][ T975] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 492.577914][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.604231][ T975] usb 2-1: config 0 descriptor?? [ 492.956466][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 492.962475][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 492.974080][ T975] usb 2-1: USB disconnect, device number 10 [ 493.116437][T15336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2791'. [ 493.312651][T15336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15336 comm=syz.2.2791 [ 493.868521][ T975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 494.611253][ T30] audit: type=1326 audit(1771641226.579:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.647828][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 494.654947][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.665952][ T975] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 494.679364][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2797'. [ 494.679676][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.703113][ T975] usb 2-1: config 0 descriptor?? [ 494.710397][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2797'. [ 494.737135][ T30] audit: type=1326 audit(1771641226.579:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.763443][ T30] audit: type=1326 audit(1771641226.579:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.812257][ T975] usb 2-1: can't set config #0, error -71 [ 494.820933][ T975] usb 2-1: USB disconnect, device number 11 [ 494.834241][ T30] audit: type=1326 audit(1771641226.579:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.866570][ T30] audit: type=1326 audit(1771641226.579:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.900033][ T30] audit: type=1326 audit(1771641226.609:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.956241][ T30] audit: type=1326 audit(1771641226.609:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 494.989695][ T30] audit: type=1326 audit(1771641226.609:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 495.036897][ T30] audit: type=1326 audit(1771641226.609:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 495.133045][ T30] audit: type=1326 audit(1771641226.609:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.9.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645ff9c629 code=0x7ffc0000 [ 496.375831][T15396] tipc: Enabling of bearer rejected, failed to enable media [ 496.769650][T15406] overlayfs: failed to clone upperpath [ 497.055886][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.062247][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.123645][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 497.374006][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.389239][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.417299][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.438249][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.457715][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.535227][T15414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15414 comm=syz.2.2812 [ 497.553622][T15414] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 497.562311][ T29] usb 9-1: config 0 descriptor?? [ 497.662450][T15417] bond4: (slave gretap1): making interface the new active one [ 497.706830][T15417] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 497.826834][T15414] vlan2: entered allmulticast mode [ 497.923210][T15414] bond4: entered allmulticast mode [ 497.928366][T15414] gretap1: entered allmulticast mode [ 497.986942][ T29] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 498.716848][T15414] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 498.823223][T15407] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2808'. [ 498.862048][T15407] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 498.896764][T15407] CIFS mount error: No usable UNC path provided in device string! [ 498.896764][T15407] [ 498.907087][T15407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 499.106415][ T24] usb 9-1: USB disconnect, device number 15 [ 499.123716][T15433] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -19 [ 501.446804][T15463] overlayfs: failed to clone upperpath [ 511.136968][T15567] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 511.146619][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 511.146633][ T30] audit: type=1804 audit(1771641243.107:958): pid=15567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2852" name="file0" dev="tmpfs" ino=1046 res=1 errno=0 [ 511.146973][T15567] ref_ctr increment failed for inode: 0x416 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe8e200 [ 511.219613][T15561] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 511.233390][T15561] ref_ctr decrement failed for inode: 0x416 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe8e200 [ 511.252675][T15561] uprobe: syz.2.2852:15561 failed to unregister, leaking uprobe [ 512.433124][T15583] netlink: 'syz.9.2856': attribute type 1 has an invalid length. [ 512.562199][T15583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.584029][T15586] macvlan2: entered promiscuous mode [ 512.599505][T15586] macvlan2: entered allmulticast mode [ 512.682103][T15586] bond2: entered promiscuous mode [ 512.716385][T15586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 513.647122][T15586] bond2: left promiscuous mode [ 515.765261][T15623] tipc: Enabling of bearer rejected, already enabled [ 515.781101][T15583] bond2: (slave ip6gretap1): making interface the new active one [ 516.040069][T15583] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 516.229645][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 516.290849][ T30] audit: type=1400 audit(1771641248.269:959): avc: denied { watch } for pid=15631 comm="syz.8.2871" path="/272/bus" dev="overlay" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 516.347306][ T30] audit: type=1400 audit(1771641248.269:960): avc: denied { watch_sb } for pid=15631 comm="syz.8.2871" path="/272/bus" dev="overlay" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 516.407831][ T30] audit: type=1804 audit(1771641248.300:961): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2871" name="/newroot/272/bus/bus" dev="overlay" ino=1472 res=1 errno=0 [ 517.295606][T15643] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2876'. [ 517.328793][T15643] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2876'. [ 517.350162][T15643] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2876'. [ 517.709316][T15649] netlink: 'syz.1.2879': attribute type 12 has an invalid length. [ 519.592205][ T30] audit: type=1326 audit(1771641251.541:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 519.732223][ T30] audit: type=1326 audit(1771641251.561:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 519.794764][ T30] audit: type=1326 audit(1771641251.611:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 519.878076][ T30] audit: type=1326 audit(1771641251.611:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 519.950966][ T30] audit: type=1326 audit(1771641251.611:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 520.062054][ T30] audit: type=1326 audit(1771641251.611:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 520.115136][ T30] audit: type=1326 audit(1771641251.611:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900899c629 code=0x7ffc0000 [ 520.526038][T15682] syzkaller0: entered promiscuous mode [ 520.531660][T15682] syzkaller0: entered allmulticast mode [ 521.540258][T15696] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2894'. [ 522.664429][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2897'. [ 522.707587][T15709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15709 comm=syz.2.2897 [ 525.129213][ T5918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 525.328852][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 528.420090][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2914'. [ 528.448320][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2914'. [ 528.962180][T15779] bond1: (slave dummy0): Releasing backup interface [ 528.987657][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.019871][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 529.027572][ T5919] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 529.048005][ T5918] usb 2-1: can't read configurations, error -71 [ 529.217088][ T5919] usb 9-1: Using ep0 maxpacket: 32 [ 529.299048][ T5919] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 529.337731][ T5919] usb 9-1: config 0 has no interface number 0 [ 529.347047][ T5919] usb 9-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 529.467952][ T5919] usb 9-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 529.483015][ T5919] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 529.493849][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.508442][ T5919] usb 9-1: Product: syz [ 529.516690][ T5919] usb 9-1: Manufacturer: syz [ 530.030385][ T5919] usb 9-1: SerialNumber: syz [ 530.054167][ T5919] usb 9-1: config 0 descriptor?? [ 530.095590][ T5919] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 530.296724][ T5919] usb 9-1: qt2_setup_urbs - submit read urb failed -90 [ 530.357697][ T5919] quatech2 9-1:0.51: probe with driver quatech2 failed with error -90 [ 530.484088][T15779] bridge_slave_0: left allmulticast mode [ 530.491015][T15779] bridge_slave_0: left promiscuous mode [ 530.507201][ T5919] usb 9-1: USB disconnect, device number 16 [ 530.975981][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2916'. [ 531.399704][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.408643][T15812] netlink: 'syz.8.2925': attribute type 11 has an invalid length. [ 531.490182][T15779] bridge_slave_1: left allmulticast mode [ 531.507241][T15779] bridge_slave_1: left promiscuous mode [ 531.685958][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.283115][T15779] .`: (slave bond_slave_0): Releasing backup interface [ 532.302982][T15779] .`: (slave bond_slave_1): Releasing backup interface [ 532.316363][T15779] team0: Port device team_slave_0 removed [ 532.871867][T15779] team0: Port device team_slave_1 removed [ 532.927105][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.960037][T15779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.978929][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.026105][T15779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.037103][T15779] net_ratelimit: 100 callbacks suppressed [ 533.037116][T15779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.177240][ T975] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 533.375307][ T975] usb 9-1: Using ep0 maxpacket: 32 [ 533.391309][ T975] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 533.415350][ T975] usb 9-1: config 0 has no interface number 0 [ 533.826282][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 533.826299][ T30] audit: type=1400 audit(1771641265.818:1033): avc: denied { read } for pid=15835 comm="syz.9.2934" path="socket:[51781]" dev="sockfs" ino=51781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 533.857581][ T975] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 533.866691][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.875805][ T975] usb 9-1: Product: syz [ 533.879973][ T975] usb 9-1: Manufacturer: syz [ 533.884647][ T975] usb 9-1: SerialNumber: syz [ 533.891679][ T975] usb 9-1: config 0 descriptor?? [ 533.901741][ T30] audit: type=1804 audit(1771641265.878:1034): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2935" name="bus" dev="ramfs" ino=52493 res=1 errno=0 [ 533.923647][ T30] audit: type=1804 audit(1771641265.878:1035): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2935" name="bus" dev="ramfs" ino=52493 res=1 errno=0 [ 533.946740][ T975] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 533.959130][ T975] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 534.470434][ T10] usb 9-1: USB disconnect, device number 17 [ 541.384600][T15916] ALSA: mixer_oss: invalid OSS volume '' [ 545.802743][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2969'. [ 550.390266][T16001] netlink: 'syz.2.2977': attribute type 9 has an invalid length. [ 550.400195][T16001] netlink: 'syz.2.2977': attribute type 7 has an invalid length. [ 550.408570][T16001] netlink: 'syz.2.2977': attribute type 8 has an invalid length. [ 553.158805][ T30] audit: type=1400 audit(1771641284.468:1036): avc: denied { setopt } for pid=16007 comm="syz.1.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 553.263988][T16012] netlink: 'syz.3.2980': attribute type 1 has an invalid length. [ 553.501364][T16012] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 553.540793][T16016] macvlan0: entered promiscuous mode [ 553.565389][T16016] macvlan0: entered allmulticast mode [ 553.571470][T16016] bond5: entered promiscuous mode [ 553.590446][T16016] gretap1: entered promiscuous mode [ 553.597739][T16016] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 553.648511][T16016] bond5: left promiscuous mode [ 553.653289][T16016] gretap1: left promiscuous mode [ 553.749684][T16020] Cannot find add_set index 128 as target [ 555.923323][T16041] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2990'. [ 556.172147][T16050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16050 comm=syz.2.2992 [ 556.743226][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 556.903253][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 557.272498][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.310266][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 557.360838][ T5919] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 557.552689][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.561479][ T5919] usb 2-1: Product: syz [ 557.573325][ T5919] usb 2-1: Manufacturer: syz [ 557.582730][ T5919] usb 2-1: SerialNumber: syz [ 557.592415][ T5919] usb 2-1: config 0 descriptor?? [ 558.288742][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.295192][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.325232][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.364657][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.374491][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.396894][ T5919] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 558.417164][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.428881][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.928481][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 559.945358][ T5919] imon:send_packet: packet tx failed (-71) [ 559.991866][ T5919] imon 2-1:0.0: panel buttons/knobs setup failed [ 560.751228][ T51] Bluetooth: hci4: command tx timeout [ 561.083189][T16069] chnl_net:caif_netlink_parms(): no params data found [ 561.101791][ T5919] rc_core: IR keymap rc-imon-pad not found [ 561.112703][ T5919] Registered IR keymap rc-empty [ 561.120964][ T5919] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 561.150874][ T5919] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 561.185652][ T5919] imon:send_packet: packet tx failed (-71) [ 561.211454][ T5919] imon 2-1:0.0: remote input dev register failed [ 561.226130][ T5919] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 561.266056][T16069] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.274091][T16069] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.281453][T16069] bridge_slave_0: entered allmulticast mode [ 561.288956][T16069] bridge_slave_0: entered promiscuous mode [ 561.297933][T16069] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.307078][T16069] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.314876][T16069] bridge_slave_1: entered allmulticast mode [ 561.881936][T16069] bridge_slave_1: entered promiscuous mode [ 561.909235][ T30] audit: type=1400 audit(1771641293.912:1037): avc: denied { create } for pid=16108 comm="syz.1.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 562.014360][ T30] audit: type=1326 audit(1771641294.012:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.1.3007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be579c629 code=0x0 [ 562.048457][T16069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.086291][T16069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.533608][ T5919] imon 2-1:0.0: unable to initialize intf0, err 0 [ 562.566810][ T5919] imon:imon_probe: failed to initialize context! [ 562.585796][ T5919] imon 2-1:0.0: unable to register, err -19 [ 562.588628][T16069] team0: Port device team_slave_0 added [ 562.724563][T16069] team0: Port device team_slave_1 added [ 562.770674][ T5919] usb 2-1: USB disconnect, device number 14 [ 562.890893][ T51] Bluetooth: hci4: command tx timeout [ 563.348960][T16125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3011'. [ 563.465008][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 563.534753][T16069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.723303][ T30] audit: type=1400 audit(1771641296.704:1039): avc: denied { unmount } for pid=13190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 564.746841][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.789750][T16069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.814273][T16069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.842646][T16069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.879785][T16069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.930023][ T51] Bluetooth: hci4: command tx timeout [ 564.937699][T16069] hsr_slave_0: entered promiscuous mode [ 564.944372][T16069] hsr_slave_1: entered promiscuous mode [ 564.955636][T16069] debugfs: 'hsr0' already exists in 'hsr' [ 564.962249][T16069] Cannot create hsr debugfs directory [ 565.154022][T16069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.333196][T16069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.456578][T16069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.587504][T16069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.858641][ T30] audit: type=1326 audit(1771641297.784:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="syz.8.3020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f831079c629 code=0x0 [ 567.218469][ T51] Bluetooth: hci4: command tx timeout [ 567.736321][T16069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.754897][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 567.993421][T16069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 568.305777][T16069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 568.887936][T16069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 570.888884][T16069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.995664][T16069] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.047301][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.054388][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.179232][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.186360][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.395869][T16069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.444662][T16069] veth0_vlan: entered promiscuous mode [ 572.459363][T16069] veth1_vlan: entered promiscuous mode [ 572.503977][T16069] veth0_macvtap: entered promiscuous mode [ 572.519356][T16069] veth1_macvtap: entered promiscuous mode [ 572.558101][T16069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.627631][T16069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.682428][ T1334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.706720][ T1334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.729889][ T1334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.782244][ T1334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.771061][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.821842][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.040431][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.176060][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.154543][T16263] overlayfs: failed to resolve './file2': -2 [ 577.895518][T16285] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 577.904217][T16285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 577.913924][T16285] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 577.921679][T16285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 578.315828][T16287] overlayfs: failed to clone upperpath [ 579.232460][T16298] xt_hashlimit: max too large, truncated to 1048576 [ 579.356686][T16298] xt_hashlimit: overflow, rate too high: 0 [ 579.545321][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3051'. [ 580.965243][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 581.012593][T16314] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 581.133655][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 581.209414][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 581.219114][ T30] audit: type=1400 audit(1771641313.192:1041): avc: denied { connect } for pid=16313 comm="syz.0.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 581.302055][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 581.330252][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 581.355975][ T30] audit: type=1326 audit(1771641313.372:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.8.3058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f831079c629 code=0x0 [ 581.390081][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 581.426177][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 581.473832][T16318] netlink: 'syz.3.3057': attribute type 29 has an invalid length. [ 588.833195][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3078'. [ 588.895989][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3078'. [ 590.376355][ T975] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 590.612766][ T975] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 590.644193][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.682554][ T975] usb 1-1: Product: syz [ 590.701030][ T975] usb 1-1: Manufacturer: syz [ 590.722868][ T975] usb 1-1: SerialNumber: syz [ 590.740175][ T975] usb 1-1: config 0 descriptor?? [ 591.430151][ T975] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 593.462900][T16465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16465 comm=syz.3.3092 [ 593.497751][ T30] audit: type=1400 audit(1771641325.518:1043): avc: denied { connect } for pid=16462 comm="syz.8.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 593.763173][ T975] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 593.786736][ T975] usb 1-1: USB disconnect, device number 12 [ 597.048203][ T30] audit: type=1400 audit(1771641329.040:1044): avc: denied { ioctl } for pid=16510 comm="syz.0.3104" path="socket:[55150]" dev="sockfs" ino=55150 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 597.397842][ T30] audit: type=1400 audit(1771641329.050:1045): avc: denied { getopt } for pid=16510 comm="syz.0.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 597.804848][T16518] syzkaller0: entered promiscuous mode [ 597.828611][T16518] syzkaller0: entered allmulticast mode [ 604.778916][ T30] audit: type=1400 audit(1771641336.794:1046): avc: denied { execheap } for pid=16584 comm="syz.2.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 608.093914][T16621] syzkaller0: entered promiscuous mode [ 608.106537][T16621] syzkaller0: entered allmulticast mode [ 610.356332][T16656] Mount JFS Failure: -5 [ 610.360804][T16656] jfs_mount failed w/return code = -5 [ 612.171019][ T148] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.115689][T16702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3152'. [ 614.188886][ T148] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.712166][ T148] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.848414][ T148] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.035214][T16723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3160'. [ 616.705525][ T148] veth7: left allmulticast mode [ 616.728603][ T148] veth7: left promiscuous mode [ 616.836330][ T148] bridge1: port 2(veth7) entered disabled state [ 617.431792][ T148] veth5: left allmulticast mode [ 617.456529][ T148] veth5: left promiscuous mode [ 617.487761][ T148] bridge1: port 1(veth5) entered disabled state [ 617.527801][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 617.572185][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3165'. [ 617.674866][T16741] netlink: 'syz.0.3165': attribute type 11 has an invalid length. [ 617.724740][T16741] netlink: 'syz.0.3165': attribute type 13 has an invalid length. [ 617.890043][ T148] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 618.606938][T16752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3156'. [ 618.918993][ T148] .` (unregistering): Released all slaves [ 618.959035][ T148] bond0 (unregistering): Released all slaves [ 618.987879][ T148] bond1 (unregistering): Released all slaves [ 619.072226][ T148] bond2 (unregistering): Released all slaves [ 619.721165][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.738413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.977925][T16763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.844954][T16763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.132009][T16763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.690565][T16763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.376906][ T148] hsr_slave_0: left promiscuous mode [ 623.392706][ T148] hsr_slave_1: left promiscuous mode [ 623.520486][ T148] veth1_macvtap: left promiscuous mode [ 623.544141][ T148] veth0_macvtap: left promiscuous mode [ 623.719753][ T148] veth1_vlan: left promiscuous mode [ 623.725038][ T148] veth0_vlan: left promiscuous mode [ 624.989155][T16838] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 625.674697][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.826344][ T8338] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.481255][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.526821][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.955701][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 630.996124][T16905] macvtap1: entered promiscuous mode [ 631.003207][T16905] macvtap1: entered allmulticast mode [ 631.008802][T16905] dummy0: entered allmulticast mode [ 632.039036][ T30] audit: type=1400 audit(1771641364.077:1047): avc: denied { create } for pid=16920 comm="syz.3.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 632.111671][ T30] audit: type=1400 audit(1771641364.097:1048): avc: denied { write } for pid=16920 comm="syz.3.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 632.331460][ T30] audit: type=1400 audit(1771641364.368:1049): avc: denied { getopt } for pid=16891 comm="syz.1.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 633.504747][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 634.171449][ T5817] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 634.198388][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.239632][ T5817] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 634.281448][ T5817] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 634.313364][ T5817] usb 2-1: Manufacturer: syz [ 634.340825][ T5817] usb 2-1: config 0 descriptor?? [ 634.646776][ T5817] rc_core: IR keymap rc-hauppauge not found [ 634.664773][ T5817] Registered IR keymap rc-empty [ 634.695127][ T5817] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 634.764863][ T5817] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 634.822204][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 634.829546][T16947] nfs: Bad value for 'source' [ 634.919918][ T5817] usb 2-1: USB disconnect, device number 15 [ 639.339351][ T30] audit: type=1800 audit(1771641371.191:1050): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3212" name="bus" dev="ramfs" ino=55813 res=0 errno=0 [ 639.733592][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 642.359466][ T30] audit: type=1400 audit(1771641374.403:1051): avc: denied { accept } for pid=17073 comm="syz.0.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 642.443948][T17077] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3227'. [ 643.247107][T17080] netlink: 'syz.8.3228': attribute type 2 has an invalid length. [ 643.923371][ T30] audit: type=1400 audit(1771641375.543:1052): avc: denied { ioctl } for pid=17089 comm="syz.0.3231" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 643.929995][T17080] netlink: 'syz.8.3228': attribute type 1 has an invalid length. [ 644.128197][T17099] netlink: 'syz.1.3233': attribute type 1 has an invalid length. [ 644.442497][ T30] audit: type=1400 audit(1771641376.444:1053): avc: denied { mount } for pid=17095 comm="syz.3.3232" name="/" dev="hugetlbfs" ino=55935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 648.148524][ T30] audit: type=1400 audit(1771641380.195:1054): avc: denied { accept } for pid=17133 comm="syz.3.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 650.023254][T17099] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 650.514203][T17169] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3248'. [ 653.138414][T17192] : entered promiscuous mode [ 653.436895][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 653.800754][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 653.805991][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 653.965982][ T24] usb 1-1: config 0 has no interfaces? [ 653.983607][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.984176][T17201] ================================================================== [ 654.000727][T17201] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 654.005947][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 654.009434][T17201] Read of size 8 at addr ffff88805c9827c0 by task syz.2.3256/17201 [ 654.025265][T17201] [ 654.027118][ T24] usb 1-1: Manufacturer: syz [ 654.027598][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.2.3256 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.027623][T17201] Tainted: [L]=SOFTLOCKUP [ 654.027628][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.027647][T17201] Call Trace: [ 654.027663][T17201] [ 654.027676][T17201] dump_stack_lvl+0x100/0x190 [ 654.027725][T17201] print_report+0x156/0x4c9 [ 654.027752][T17201] ? __virt_addr_valid+0x81/0x620 [ 654.027783][T17201] ? __phys_addr+0xe8/0x180 [ 654.027804][T17201] ? __list_add_valid_or_report+0x105/0x130 [ 654.027823][T17201] kasan_report+0xdf/0x1e0 [ 654.027855][T17201] ? __list_add_valid_or_report+0x105/0x130 [ 654.027874][T17201] __list_add_valid_or_report+0x105/0x130 [ 654.027892][T17201] clone_mnt+0x633/0x930 [ 654.027919][T17201] copy_tree+0xfc/0xbf0 [ 654.027938][T17201] ? __pfx_down_write+0x10/0x10 [ 654.027970][T17201] copy_mnt_ns+0x2bd/0xc30 [ 654.027988][T17201] ? create_new_namespaces+0x30/0xac0 [ 654.028016][T17201] ? rcu_is_watching+0x12/0xc0 [ 654.028044][T17201] create_new_namespaces+0xd3/0xac0 [ 654.028063][T17201] ? bpf_lsm_capable+0x9/0x10 [ 654.028082][T17201] ? security_capable+0x80/0x260 [ 654.028111][T17201] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 654.028132][T17201] ksys_unshare+0x455/0xab0 [ 654.028158][T17201] ? __pfx_ksys_unshare+0x10/0x10 [ 654.028182][T17201] __x64_sys_unshare+0x31/0x40 [ 654.028203][T17201] do_syscall_64+0x106/0xf80 [ 654.028219][T17201] ? clear_bhb_loop+0x40/0x90 [ 654.028236][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.028256][T17201] RIP: 0033:0x7fcc18d9c629 [ 654.028271][T17201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.028286][T17201] RSP: 002b:00007fcc16ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 654.028314][T17201] RAX: ffffffffffffffda RBX: 00007fcc19015fa0 RCX: 00007fcc18d9c629 [ 654.028325][T17201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 654.028334][T17201] RBP: 00007fcc18e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 654.028344][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.028354][T17201] R13: 00007fcc19016038 R14: 00007fcc19015fa0 R15: 00007ffe6fdf6858 [ 654.028370][T17201] [ 654.028375][T17201] [ 654.258110][T17201] Allocated by task 16756: [ 654.262501][T17201] kasan_save_stack+0x30/0x50 [ 654.267164][T17201] kasan_save_track+0x14/0x30 [ 654.271823][T17201] __kasan_slab_alloc+0x89/0x90 [ 654.276654][T17201] kmem_cache_alloc_noprof+0x241/0x6e0 [ 654.282106][T17201] alloc_vfsmnt+0x23/0x6a0 [ 654.286503][T17201] clone_mnt+0x4b/0x930 [ 654.290637][T17201] vfs_open_tree+0xb02/0x1500 [ 654.295290][T17201] __x64_sys_open_tree+0xa3/0x150 [ 654.300298][T17201] do_syscall_64+0x106/0xf80 [ 654.304866][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.310733][T17201] [ 654.313029][T17201] Freed by task 148: [ 654.316895][T17201] kasan_save_stack+0x30/0x50 [ 654.321562][T17201] kasan_save_track+0x14/0x30 [ 654.326218][T17201] kasan_save_free_info+0x3b/0x70 [ 654.331219][T17201] __kasan_slab_free+0x5f/0x80 [ 654.335960][T17201] kmem_cache_free+0x124/0x6a0 [ 654.340702][T17201] rcu_core+0x5a2/0x10d0 [ 654.344932][T17201] handle_softirqs+0x1eb/0x9e0 [ 654.349678][T17201] __irq_exit_rcu+0xef/0x150 [ 654.354246][T17201] irq_exit_rcu+0x9/0x30 [ 654.358473][T17201] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 654.364087][T17201] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.370040][T17201] [ 654.372352][T17201] Last potentially related work creation: [ 654.378037][T17201] kasan_save_stack+0x30/0x50 [ 654.382697][T17201] kasan_record_aux_stack+0xa7/0xc0 [ 654.387870][T17201] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 654.393745][T17201] task_work_run+0x150/0x240 [ 654.398317][T17201] exit_to_user_mode_loop+0x100/0x4a0 [ 654.403676][T17201] do_syscall_64+0x67c/0xf80 [ 654.408243][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.414112][T17201] [ 654.416410][T17201] Second to last potentially related work creation: [ 654.422967][T17201] kasan_save_stack+0x30/0x50 [ 654.427624][T17201] kasan_record_aux_stack+0xa7/0xc0 [ 654.432805][T17201] task_work_add+0x28b/0x3b0 [ 654.437371][T17201] mntput_no_expire_slowpath+0x3da/0xb00 [ 654.442988][T17201] mntput_no_expire+0x1fd/0x220 [ 654.447817][T17201] mntput+0x6b/0xa0 [ 654.451605][T17201] vfs_open_tree+0x1235/0x1500 [ 654.456344][T17201] __x64_sys_open_tree+0xa3/0x150 [ 654.461347][T17201] do_syscall_64+0x106/0xf80 [ 654.465913][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.471780][T17201] [ 654.474077][T17201] The buggy address belongs to the object at ffff88805c982700 [ 654.474077][T17201] which belongs to the cache mnt_cache of size 352 [ 654.487929][T17201] The buggy address is located 192 bytes inside of [ 654.487929][T17201] freed 352-byte region [ffff88805c982700, ffff88805c982860) [ 654.501697][T17201] [ 654.503995][T17201] The buggy address belongs to the physical page: [ 654.510389][T17201] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c982fc0 pfn:0x5c982 [ 654.520434][T17201] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 654.528903][T17201] memcg:ffff888028ea8701 [ 654.533123][T17201] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 654.541604][T17201] page_type: f5(slab) [ 654.545560][T17201] raw: 00fff00000000240 ffff88801dac4140 ffffea000073b290 ffffea0000e08e90 [ 654.554130][T17201] raw: ffff88805c982fc0 000000080012000b 00000000f5000000 ffff888028ea8701 [ 654.562691][T17201] head: 00fff00000000240 ffff88801dac4140 ffffea000073b290 ffffea0000e08e90 [ 654.571335][T17201] head: ffff88805c982fc0 000000080012000b 00000000f5000000 ffff888028ea8701 [ 654.579980][T17201] head: 00fff00000000001 ffffea0001726081 00000000ffffffff 00000000ffffffff [ 654.588628][T17201] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 654.597270][T17201] page dumped because: kasan: bad access detected [ 654.603675][T17201] page_owner tracks the page as allocated [ 654.609374][T17201] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5816, tgid 5816 (syz-executor), ts 59538026370, free_ts 17454313630 [ 654.630742][T17201] post_alloc_hook+0x153/0x170 [ 654.635513][T17201] get_page_from_freelist+0x111d/0x3140 [ 654.641038][T17201] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 654.646912][T17201] new_slab+0xa6/0x6d0 [ 654.650960][T17201] refill_objects+0x26b/0x400 [ 654.655617][T17201] __pcs_replace_empty_main+0x19f/0x600 [ 654.661143][T17201] kmem_cache_alloc_noprof+0x480/0x6e0 [ 654.666579][T17201] alloc_vfsmnt+0x23/0x6a0 [ 654.670976][T17201] fc_mount_longterm+0x154/0x270 [ 654.675894][T17201] mq_init_ns+0x482/0x820 [ 654.680216][T17201] copy_ipcs+0x3dd/0x7e0 [ 654.684443][T17201] create_new_namespaces+0x20a/0xac0 [ 654.689718][T17201] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 654.695331][T17201] ksys_unshare+0x455/0xab0 [ 654.699822][T17201] __x64_sys_unshare+0x31/0x40 [ 654.704567][T17201] do_syscall_64+0x106/0xf80 [ 654.709133][T17201] page last free pid 1 tgid 1 stack trace: [ 654.715001][T17201] __free_frozen_pages+0x7e1/0x10d0 [ 654.720180][T17201] free_contig_range+0xde/0x1d0 [ 654.725024][T17201] destroy_args+0xa8/0x7a0 [ 654.729423][T17201] debug_vm_pgtable+0x1b66/0x34c0 [ 654.734427][T17201] do_one_initcall+0x11d/0x760 [ 654.739175][T17201] kernel_init_freeable+0x6e5/0x7a0 [ 654.744355][T17201] kernel_init+0x1f/0x1e0 [ 654.748664][T17201] ret_from_fork+0x754/0xd80 [ 654.753228][T17201] ret_from_fork_asm+0x1a/0x30 [ 654.757974][T17201] [ 654.760270][T17201] Memory state around the buggy address: [ 654.765871][T17201] ffff88805c982680: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 654.773904][T17201] ffff88805c982700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 654.782049][T17201] >ffff88805c982780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 654.790097][T17201] ^ [ 654.796234][T17201] ffff88805c982800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 654.804272][T17201] ffff88805c982880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 654.812314][T17201] ================================================================== [ 655.243440][T17201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 655.250674][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.2.3256 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.261605][T17201] Tainted: [L]=SOFTLOCKUP [ 655.265901][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.275926][T17201] Call Trace: [ 655.279175][T17201] [ 655.282076][T17201] dump_stack_lvl+0x100/0x190 [ 655.286733][T17201] vpanic+0x552/0x970 [ 655.290684][T17201] ? __pfx_vpanic+0x10/0x10 [ 655.295153][T17201] ? __list_add_valid_or_report+0x105/0x130 [ 655.301022][T17201] panic+0xd1/0xe0 [ 655.304712][T17201] ? __pfx_panic+0x10/0x10 [ 655.309095][T17201] ? __list_add_valid_or_report+0x105/0x130 [ 655.314955][T17201] ? preempt_schedule_common+0x42/0xc0 [ 655.320390][T17201] check_panic_on_warn.cold+0x19/0x34 [ 655.325732][T17201] end_report.part.0+0x3a/0x90 [ 655.330468][T17201] kasan_report.cold+0xe/0x18 [ 655.335117][T17201] ? __list_add_valid_or_report+0x105/0x130 [ 655.340996][T17201] __list_add_valid_or_report+0x105/0x130 [ 655.346684][T17201] clone_mnt+0x633/0x930 [ 655.350901][T17201] copy_tree+0xfc/0xbf0 [ 655.355029][T17201] ? __pfx_down_write+0x10/0x10 [ 655.359850][T17201] copy_mnt_ns+0x2bd/0xc30 [ 655.364238][T17201] ? create_new_namespaces+0x30/0xac0 [ 655.369582][T17201] ? rcu_is_watching+0x12/0xc0 [ 655.374315][T17201] create_new_namespaces+0xd3/0xac0 [ 655.379489][T17201] ? bpf_lsm_capable+0x9/0x10 [ 655.384139][T17201] ? security_capable+0x80/0x260 [ 655.389067][T17201] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 655.394671][T17201] ksys_unshare+0x455/0xab0 [ 655.399150][T17201] ? __pfx_ksys_unshare+0x10/0x10 [ 655.404165][T17201] __x64_sys_unshare+0x31/0x40 [ 655.408905][T17201] do_syscall_64+0x106/0xf80 [ 655.413463][T17201] ? clear_bhb_loop+0x40/0x90 [ 655.418109][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.423976][T17201] RIP: 0033:0x7fcc18d9c629 [ 655.428372][T17201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.447965][T17201] RSP: 002b:00007fcc16ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 655.456358][T17201] RAX: ffffffffffffffda RBX: 00007fcc19015fa0 RCX: 00007fcc18d9c629 [ 655.464309][T17201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 655.472250][T17201] RBP: 00007fcc18e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 655.480188][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.488129][T17201] R13: 00007fcc19016038 R14: 00007fcc19015fa0 R15: 00007ffe6fdf6858 [ 655.496076][T17201] [ 655.499381][T17201] Kernel Offset: disabled [ 655.503688][T17201] Rebooting in 86400 seconds..