last executing test programs: 13m35.740754281s ago: executing program 3 (id=129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'vcan0\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x2f) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000000000000a) utimensat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x100) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x20040040) 13m34.352363818s ago: executing program 3 (id=131): inotify_init1(0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r1 = io_uring_setup(0x70fb, &(0x7f0000000140)={0x0, 0x1000, 0x10, 0x4800004, 0x3b7}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) socket(0xa, 0x80000, 0xa) write$dsp(r2, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000000580)=""/102400, 0x19000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x1) ioctl$BLKSECDISCARD(r6, 0x127d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0) read$FUSE(r5, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000019800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES16=r5, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRES64=r0]) llistxattr(0x0, &(0x7f0000000180)=""/227, 0xe3) close_range(r1, 0xffffffffffffffff, 0x0) 13m32.379763867s ago: executing program 3 (id=135): r0 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x40001) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000680)=[0x42d, 0x5]) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x258, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xc}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x1fc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xfffc}}, @TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x6430, 0x0, 0x7, {0x7, 0x2, 0x5, 0x71, 0x10, 0x4}, {0xad, 0x0, 0x1, 0x7, 0x2, 0x4717}, 0x3, 0x6, 0x80000000}}]}, @TCA_ROUTE4_ACT={0x19c, 0x6, [@m_mirred={0xe8, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xe, 0x20000000, 0x1, 0x7}, 0x2}}]}, {0x9c, 0x6, "bde36399d12fe54f1f2f9a7034d156845fe3043c7ff11299a10ecddadd65d3cfaf3738605fbd39dee2aa21af25be869bcc79f919b3bec684ee37ecccc7b5d364202f50ac09066714f0830e3bea53c4c12fe1fa08be933a6e2faef9ec8120d81665c754a8b3a96749afd167a2202b5a8735860f6c0b5355af65794a79967ac48d4e117973f7816028219fcca164c61614179bc61ee1f73137"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xb0, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8000, 0x7, 0x5, 0xcb}}, @TCA_DEF_DATA={0x15, 0x3, '\x99\\+&!$\\\xb4:\']\\#{%.\x00'}]}, {0x54, 0x6, "3936237631b90349053cf8ef989a5c832cff08a73eb144ac46c0e6e723cf196ff16e07c4e525507ed910b55a32f097dfbc595d2705b89acf1931fb7c1fdb6dece96a37dc167f96f80b5af8e8fdeb0d87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x75}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 13m30.846102982s ago: executing program 3 (id=139): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xb) sched_setaffinity(0x0, 0x0, 0x0) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0xc8}) 13m28.516263511s ago: executing program 3 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) get_robust_list(0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc010) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/128, 0x80) 13m26.192672102s ago: executing program 3 (id=148): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) close(r5) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xd59f80, 0x4, 0x9, 0x9, 0x8, 0x8, 0x71e, 0x13, 0x7, 0x7f, 0x3f, 0x37, {0x0, 0x1}, 0x3, 0xed}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a", 0xa}], 0x1}, 0x0) 13m25.464058114s ago: executing program 32 (id=148): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) close(r5) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xd59f80, 0x4, 0x9, 0x9, 0x8, 0x8, 0x71e, 0x13, 0x7, 0x7f, 0x3f, 0x37, {0x0, 0x1}, 0x3, 0xed}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a", 0xa}], 0x1}, 0x0) 2m22.865453087s ago: executing program 4 (id=1466): open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b1232882b4bd1d68", 0xf000}, {0x0, 0xffffffc0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2m20.819763468s ago: executing program 4 (id=1473): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x398, 0x280, 0xa8, 0xffffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3d}, @gre_key=0xa, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, 'ip6erspan0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x2}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x7ff, 0x6]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @loopback, @icmp_id=0x65, @gre_key}}}}, {{@ip={@rand_addr=0x64010102, @empty, 0xff000000, 0xffffffff, 'batadv0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x4}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x708, 0x9bd, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @remote, @local, @port=0x4e20, @port=0x4e21}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x15}, @broadcast, 0xff, 0x0, 'team_slave_1\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x14, @broadcast, @loopback, @port=0x4e24, @gre_key=0x88eb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, r4, 0xbe5, 0x70bd2a, 0x0, {{0x11}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r7) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x4004551e, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m18.589001033s ago: executing program 4 (id=1477): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m17.663302876s ago: executing program 4 (id=1479): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x408c1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m12.709262823s ago: executing program 4 (id=1488): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x844) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r4}, 0x10) 2m11.561836213s ago: executing program 4 (id=1491): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880200108801c0007800800050000800000080006005d00000008000600c200000024000780080006006d000000080006005800000008000500ce2238480800050090fce01e1c0007800800060094000000080006006b00000008000500908e2b7d44000780080006005300000008010500a8f7595008000600deff0c2e98ea129ab1b20000003b000500d549906108000600fb000000080006008b00000008000600220000002c00078008000500eeeddf10080006007600000008000500a75db864080005005725e00708000600910000001400078008000500b13c2b4c08000600ab0000003c000000080006001c000000080005003e36a23b08000600f5000000080006005300000808000600610000"], 0x14c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) write$sndseq(r4, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x0, 0xfd}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"429d3634a885b010f9d00892"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) io_pgetevents(0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0), 0x8}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c000280050001"], 0x74}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000080)={0x1, 0x91cc, 0x2000000, 0x10000, 0x4, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) 1m56.394664147s ago: executing program 33 (id=1491): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880200108801c0007800800050000800000080006005d00000008000600c200000024000780080006006d000000080006005800000008000500ce2238480800050090fce01e1c0007800800060094000000080006006b00000008000500908e2b7d44000780080006005300000008010500a8f7595008000600deff0c2e98ea129ab1b20000003b000500d549906108000600fb000000080006008b00000008000600220000002c00078008000500eeeddf10080006007600000008000500a75db864080005005725e00708000600910000001400078008000500b13c2b4c08000600ab0000003c000000080006001c000000080005003e36a23b08000600f5000000080006005300000808000600610000"], 0x14c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) write$sndseq(r4, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x0, 0xfd}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"429d3634a885b010f9d00892"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) io_pgetevents(0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0), 0x8}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c000280050001"], 0x74}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000080)={0x1, 0x91cc, 0x2000000, 0x10000, 0x4, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) 1m26.527320019s ago: executing program 6 (id=1523): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xd, 0x0, 0xfe50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 1m5.543501832s ago: executing program 6 (id=1523): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xd, 0x0, 0xfe50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 48.097498257s ago: executing program 6 (id=1523): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xd, 0x0, 0xfe50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 23.462322991s ago: executing program 6 (id=1523): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xd, 0x0, 0xfe50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 9.806988296s ago: executing program 2 (id=1707): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_usbip_server_init(0x0) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c07"], 0x38}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040), 0x0) close(0xffffffffffffffff) write$uinput_user_dev(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.288551844s ago: executing program 1 (id=1708): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='svcrdma_page_overrun_err\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) dup(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000040)=0x4004, 0x4) 8.333620137s ago: executing program 0 (id=1710): syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a641, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000304000025c40000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="0001000008a600001400128009000100766c616e00000000040002800a000100ffffffffffff0000"], 0x40}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa, 0x800}, 0x4000080) close(r1) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 8.329974669s ago: executing program 2 (id=1711): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x2) r5 = syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x9, 0x8c, 0x3, 0x8, 0xf7}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x9}]}}) syz_usb_disconnect(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 8.185393651s ago: executing program 1 (id=1713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="090200000000000000000100000008"], 0x24}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)) socket$inet6(0xa, 0x3, 0x4) 6.895089976s ago: executing program 5 (id=1714): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x2, 'geneve0\x00', {0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44805}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x10) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r7, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000180)="024dfc7b58623401", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 6.886748532s ago: executing program 0 (id=1715): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ishtp_dump\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf32(r3, 0x0, 0x58) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) flock(0xffffffffffffffff, 0x3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0a2) 6.620598215s ago: executing program 1 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x3f20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.325125196s ago: executing program 5 (id=1717): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000280), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000776b00000000000000000000950000009c00000018fa7b0c6771c2c558ae375ebaa03cce5a97818c5ea079e7b55d65056a6e5bb5a74364732c090f7cf437df6cb2383fa33b5cbda984dd8331895a88dd2a43"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xde, 0x14, 0xd8, 0x40, 0x93a, 0x50f, 0xc2b7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xb9, 0x6e}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) 5.252726083s ago: executing program 0 (id=1718): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername$l2tp(r2, 0x0, &(0x7f0000000180)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="000070ba2cbdcd139f44ab00e0aa396e"]) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0x3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000002740)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x6, 0x6) 5.246723599s ago: executing program 2 (id=1719): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_usbip_server_init(0x0) r5 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c07"], 0x38}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) close(0xffffffffffffffff) write$uinput_user_dev(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) dup(0xffffffffffffffff) 4.943405312s ago: executing program 6 (id=1523): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xd, 0x0, 0xfe50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 4.941558842s ago: executing program 1 (id=1720): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x101301) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) 4.015405999s ago: executing program 0 (id=1721): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.62475992s ago: executing program 2 (id=1722): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, &(0x7f0000000600)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in=@private}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000900)='selinux_audited\x00', r4}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000580), 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) 3.184404577s ago: executing program 2 (id=1723): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x2040600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x40000000015, 0x5, 0x200) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = getpgrp(0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000000000004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 3.101639276s ago: executing program 5 (id=1724): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x416eb135, 0x12) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2.429250305s ago: executing program 5 (id=1725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) wait4(0x0, 0x0, 0x40000000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x3, 0xb6a, 0x1, 0x101, 0xfffffff8, 0x9, 0xffdf}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r5, 0x0, 0x3, 0x674) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x4010, r4, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 2.298057427s ago: executing program 2 (id=1726): socket$inet(0x2, 0x3, 0x7fff) prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000140)={0x3, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) gettid() setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x2, @multicast2}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x401eb94) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_OPENQRY(r7, 0x5600, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$rds(0xffffffffffffffff, 0x0, 0x0) 1.479690242s ago: executing program 1 (id=1727): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x103) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x3c, r6, 0xa72704fd2dfb5147, 0xf0bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) 1.478506187s ago: executing program 5 (id=1728): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x408c1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.475221329s ago: executing program 0 (id=1729): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f00000000c0), 0xa122, 0x20001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 310.573954ms ago: executing program 1 (id=1730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x18) 49.804277ms ago: executing program 5 (id=1731): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) 0s ago: executing program 0 (id=1732): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_usbip_server_init(0x0) r5 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c07"], 0x38}, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) close(0xffffffffffffffff) write$uinput_user_dev(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): g the driver author to help with further stabilization of the driver. [ 555.869740][ T5872] pvrusb2: ********** [ 556.439898][ T2342] pvrusb2: Invalid write control endpoint [ 557.034260][ T30] audit: type=1400 audit(1749102197.507:1300): avc: denied { read } for pid=10106 comm="syz.1.959" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 557.071020][ T5903] usb 6-1: USB disconnect, device number 8 [ 557.136954][ T30] audit: type=1400 audit(1749102197.507:1301): avc: denied { open } for pid=10106 comm="syz.1.959" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 557.237828][ T2342] pvrusb2: Invalid write control endpoint [ 557.760946][T10116] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 557.768873][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.959'. [ 557.862264][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 557.874406][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 557.882059][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 557.892098][ T2342] pvrusb2: Device being rendered inoperable [ 557.901551][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 557.910407][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 557.922196][ T2342] pvrusb2: Attached sub-driver cx25840 [ 557.927869][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 557.930374][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 557.938361][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 558.156973][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 558.544871][T10124] CUSE: unknown device info "" [ 558.550011][T10124] CUSE: zero length info key specified [ 558.577340][T10121] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 558.722454][ T24] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 558.799949][T10116] team0: Port device geneve0 added [ 558.887317][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.986507][ T24] usb 3-1: config 0 descriptor?? [ 559.804336][ T24] gspca_main: mars-2.14.0 probing 093a:050f [ 560.625406][ T24] usb 3-1: USB disconnect, device number 6 [ 562.420137][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.650665][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.353323][T10159] overlayfs: failed to resolve './file0': -2 [ 563.755025][ T30] audit: type=1400 audit(1749102204.227:1302): avc: denied { connect } for pid=10163 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 564.000497][T10167] lo speed is unknown, defaulting to 1000 [ 567.659899][T10167] lo speed is unknown, defaulting to 1000 [ 568.356830][T10212] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 568.366043][T10212] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 568.943509][T10228] ubi31: detaching mtd0 [ 568.973152][T10228] ubi31: mtd0 is detached [ 569.094662][T10230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10230 comm=syz.0.986 [ 569.116758][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 569.454579][T10234] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 569.750487][ T5830] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 570.841396][T10241] netlink: 168 bytes leftover after parsing attributes in process `syz.0.988'. [ 573.819394][T10267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.870715][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 573.880363][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 573.889364][ T5830] Bluetooth: hci4: hardware error 0x00 [ 574.630161][ T51] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 574.630917][ T30] audit: type=1400 audit(1749102214.857:1303): avc: denied { map } for pid=10269 comm="syz.2.997" path="socket:[24995]" dev="sockfs" ino=24995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 574.872499][ T5871] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 575.286581][ T30] audit: type=1400 audit(1749102214.857:1304): avc: denied { accept } for pid=10269 comm="syz.2.997" path="socket:[24995]" dev="sockfs" ino=24995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 575.361299][ T5871] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 575.654759][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.781596][T10281] netlink: 80 bytes leftover after parsing attributes in process `syz.2.998'. [ 575.934646][ T30] audit: type=1400 audit(1749102216.197:1305): avc: denied { read } for pid=10278 comm="syz.2.998" path="socket:[24143]" dev="sockfs" ino=24143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.969942][ T5871] usb 2-1: config 0 descriptor?? [ 575.989789][ T5871] gspca_main: mars-2.14.0 probing 093a:050f [ 576.214774][ T5830] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 576.301712][T10291] nfsd: Unknown parameter 'trans' [ 576.342561][ T30] audit: type=1400 audit(1749102216.777:1306): avc: denied { remount } for pid=10284 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 576.706638][ T5903] usb 2-1: USB disconnect, device number 8 [ 577.283783][T10303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.300738][T10303] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1002'. [ 581.199335][ T5830] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 582.244682][T10348] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1012'. [ 582.586048][ T42] libceph: connect (1)[c::]:6789 error -101 [ 582.589586][ T5947] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 582.594839][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 582.610818][T10345] ceph: No mds server is up or the cluster is laggy [ 582.819714][ T30] audit: type=1326 audit(1749102223.267:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 582.843172][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.172232][ T30] audit: type=1326 audit(1749102223.267:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 583.196970][ T30] audit: type=1326 audit(1749102223.277:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 583.247825][ T30] audit: type=1326 audit(1749102223.277:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 583.283587][ T30] audit: type=1326 audit(1749102223.277:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 583.315524][ T30] audit: type=1326 audit(1749102223.287:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab70d8d290 code=0x7ffc0000 [ 583.339398][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 583.339458][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 583.356316][ T30] audit: type=1326 audit(1749102223.287:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab70d8e52b code=0x7ffc0000 [ 583.539826][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 583.557890][ T42] usb 6-1: no configurations [ 583.594896][ T42] usb 6-1: can't read configurations, error -22 [ 583.743890][ T30] audit: type=1326 audit(1749102223.287:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab70d8e52b code=0x7ffc0000 [ 583.893307][ T30] audit: type=1326 audit(1749102223.287:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab70d8e52b code=0x7ffc0000 [ 583.946362][ T30] audit: type=1326 audit(1749102223.287:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab70d8e52b code=0x7ffc0000 [ 583.970105][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 584.129622][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 584.156124][ T42] usb 6-1: no configurations [ 584.194852][T10364] hugetlbfs: syz.1.1016 (10364): Using mlock ulimits for SHM_HUGETLB is obsolete [ 585.033475][ T42] usb 6-1: can't read configurations, error -22 [ 585.040309][ T42] usb usb6-port1: attempt power cycle [ 585.108009][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 585.140368][ T5947] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 585.179653][ T5947] usb 1-1: can't read configurations, error -71 [ 589.574249][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 589.640521][T10398] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 590.545830][ T5903] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 592.009739][T10411] input: syz1 as /devices/virtual/input/input13 [ 592.829934][T10406] ALSA: mixer_oss: invalid OSS volume '' [ 594.441343][T10445] vivid-000: disconnect [ 594.457514][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1032'. [ 594.467452][T10445] vcan0: entered allmulticast mode [ 594.857593][T10431] vivid-000: reconnect [ 597.685031][T10457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 598.155920][T10461] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 599.036611][T10470] siw: device registration error -23 [ 599.967552][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 600.396076][T10483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.079672][T10506] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 602.699223][T10510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.707184][T10510] batadv_slave_0: entered promiscuous mode [ 603.061888][T10514] bridge0: port 3(syz_tun) entered blocking state [ 603.069004][T10514] bridge0: port 3(syz_tun) entered disabled state [ 603.076613][T10514] syz_tun: entered allmulticast mode [ 603.095710][T10514] syz_tun: entered promiscuous mode [ 603.103944][T10514] bridge0: port 3(syz_tun) entered blocking state [ 603.110482][T10514] bridge0: port 3(syz_tun) entered forwarding state [ 606.620917][T10549] lo speed is unknown, defaulting to 1000 [ 607.019413][T10549] lo speed is unknown, defaulting to 1000 [ 607.156776][T10546] netlink: 'syz.1.1056': attribute type 21 has an invalid length. [ 607.165329][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1056'. [ 607.329738][T10559] loop2: detected capacity change from 0 to 7 [ 607.345242][T10559] Dev loop2: unable to read RDB block 7 [ 607.351054][T10559] loop2: AHDI p1 p2 [ 607.356186][T10559] loop2: partition table partially beyond EOD, truncated [ 607.364909][T10559] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 608.381919][ T6668] udevd[6668]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 608.466229][T10560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 608.482507][T10560] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 608.996226][T10563] vhci_hcd: connection closed [ 608.997176][T10560] vhci_hcd vhci_hcd.0: Device attached [ 609.045211][ T6349] vhci_hcd: stop threads [ 609.052713][ T6349] vhci_hcd: release socket [ 609.071265][ T6349] vhci_hcd: disconnect device [ 609.383183][T10573] netlink: 'syz.4.1064': attribute type 10 has an invalid length. [ 609.391133][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1064'. [ 610.774563][T10573] geneve0: entered promiscuous mode [ 610.840165][T10573] geneve0: entered allmulticast mode [ 611.383651][T10573] team0: Port device geneve0 added [ 611.636070][T10590] trusted_key: encrypted_key: key user:syz not found [ 611.651093][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 611.651122][ T30] audit: type=1400 audit(1749102252.117:1338): avc: denied { watch } for pid=10587 comm="syz.1.1069" path="/227" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 613.110180][T10595] Cannot find add_set index 1 as target [ 613.365899][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1072'. [ 613.434194][T10603] syz.5.1072 (10603): drop_caches: 2 [ 613.744521][ T30] audit: type=1400 audit(1749102254.207:1339): avc: denied { setopt } for pid=10597 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 613.920250][ T30] audit: type=1400 audit(1749102254.207:1340): avc: denied { write } for pid=10597 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 615.607507][T10621] rdma_rxe: rxe_newlink: failed to add lo [ 615.934158][T10621] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 615.942109][T10621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1077'. [ 616.763010][T10624] SET target dimension over the limit! [ 617.068696][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1078'. [ 617.183798][T10635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 617.278723][T10624] syz.0.1078 (10624): drop_caches: 2 [ 617.596568][ T30] audit: type=1326 audit(1749102258.067:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 617.661642][ T30] audit: type=1326 audit(1749102258.067:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 617.783029][ T30] audit: type=1326 audit(1749102258.097:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 617.807114][ T30] audit: type=1326 audit(1749102258.097:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 617.846770][ T30] audit: type=1326 audit(1749102258.097:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 618.044153][T10648] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1083'. [ 618.381448][ T30] audit: type=1326 audit(1749102258.097:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 618.405354][ T30] audit: type=1326 audit(1749102258.097:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 618.429680][ T30] audit: type=1326 audit(1749102258.097:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 618.453299][ T30] audit: type=1326 audit(1749102258.097:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 618.499568][ T30] audit: type=1326 audit(1749102258.097:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 618.811088][T10657] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 619.391939][T10651] tipc: Started in network mode [ 619.399120][T10651] tipc: Node identity 4, cluster identity 4711 [ 619.417151][T10651] tipc: Node number set to 4 [ 620.627033][T10651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1085'. [ 620.640083][T10651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10651 comm=syz.0.1085 [ 620.718786][T10646] delete_channel: no stack [ 621.221492][T10677] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 621.360184][T10677] lo speed is unknown, defaulting to 1000 [ 621.994214][T10673] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 622.003143][T10673] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 622.213003][T10682] netlink: 'syz.0.1091': attribute type 2 has an invalid length. [ 622.236333][T10677] lo speed is unknown, defaulting to 1000 [ 622.775129][T10679] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 622.783088][T10679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1094'. [ 624.367772][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.561647][T10687] Cannot find add_set index 1 as target [ 624.909225][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1095'. [ 625.022427][T10701] syz.5.1095 (10701): drop_caches: 2 [ 625.304464][T10706] input: syz1 as /devices/virtual/input/input14 [ 627.838017][T10713] hugetlbfs: Unknown parameter 'nrGs' [ 627.843591][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 627.843599][ T30] audit: type=1400 audit(1749102268.307:1385): avc: denied { remount } for pid=10712 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 627.950359][T10714] hub 8-0:1.0: USB hub found [ 627.955881][T10714] hub 8-0:1.0: 1 port detected [ 629.129704][ T5871] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 629.695462][ T30] audit: type=1400 audit(1749102270.167:1386): avc: denied { connect } for pid=10716 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 629.928218][ T30] audit: type=1400 audit(1749102270.317:1387): avc: denied { connect } for pid=10730 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 630.861068][ T30] audit: type=1400 audit(1749102270.337:1388): avc: denied { read } for pid=10730 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 630.951884][ T30] audit: type=1400 audit(1749102270.787:1389): avc: denied { ioctl } for pid=10731 comm="syz.2.1107" path="socket:[26928]" dev="sockfs" ino=26928 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 630.976686][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.038370][ T30] audit: type=1400 audit(1749102271.487:1390): avc: denied { mounton } for pid=10730 comm="syz.1.1106" path="/233/file0" dev="hugetlbfs" ino=25896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 631.038822][ T5871] usb 5-1: device descriptor read/all, error -71 [ 631.061405][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.625812][T10762] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.634213][T10760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.780812][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 632.966064][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 633.153949][T10764] ceph: No mds server is up or the cluster is laggy [ 633.276425][T10770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.716467][T10784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.724594][ T30] audit: type=1400 audit(1749102275.177:1391): avc: denied { listen } for pid=10773 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 636.843963][T10802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.080772][T10805] vivid-003: disconnect [ 639.343759][T10806] vivid-003: reconnect [ 639.348746][ T30] audit: type=1326 audit(1749102279.817:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.649441][ T30] audit: type=1326 audit(1749102279.847:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.672909][ T30] audit: type=1326 audit(1749102279.847:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.696382][ T30] audit: type=1326 audit(1749102279.847:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.719871][ T30] audit: type=1326 audit(1749102279.847:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.747909][ T30] audit: type=1326 audit(1749102279.847:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.774297][ T30] audit: type=1326 audit(1749102279.847:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.849994][ T30] audit: type=1326 audit(1749102279.847:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.874388][ T30] audit: type=1326 audit(1749102279.847:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.899608][ T30] audit: type=1326 audit(1749102279.847:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 639.923573][ T30] audit: type=1326 audit(1749102279.847:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 640.025330][T10814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 640.158608][ T30] audit: type=1326 audit(1749102279.847:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 640.188814][ T30] audit: type=1326 audit(1749102279.847:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 640.222626][ T30] audit: type=1326 audit(1749102279.847:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 640.254237][ T30] audit: type=1326 audit(1749102279.847:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x7fc00000 [ 641.115853][T10824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 641.730093][T10828] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 641.976142][T10829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1129'. [ 642.189868][T10831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 643.980347][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'. [ 644.749560][ T5874] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 645.523164][ T5874] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 645.533169][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.543387][ T5874] usb 3-1: config 0 descriptor?? [ 645.554366][ T5874] gspca_main: mars-2.14.0 probing 093a:050f [ 646.165759][ T2150] usb 3-1: USB disconnect, device number 8 [ 646.777883][T10870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 647.499656][T10878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.369300][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 648.369338][ T30] audit: type=1326 audit(1749102288.837:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.1.1149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c9798e929 code=0x0 [ 648.398434][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.906721][T10896] can0: slcan on ttyS3. [ 648.991828][ T30] audit: type=1400 audit(1749102289.457:1461): avc: denied { name_bind } for pid=10890 comm="syz.5.1150" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 649.012752][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.438954][T10899] can0 (unregistered): slcan off ttyS3. [ 649.639821][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 649.703947][T10910] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 649.710571][T10910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.728041][T10913] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 649.734662][T10913] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.839124][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 649.915864][ T5874] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 649.950207][T10910] vhci_hcd vhci_hcd.0: Device attached [ 649.975908][T10913] vhci_hcd vhci_hcd.0: Device attached [ 650.011058][ T5874] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.034014][T10916] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 650.040632][T10916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 650.185465][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.237401][T10916] vhci_hcd vhci_hcd.0: Device attached [ 650.304008][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.336642][ T5871] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 650.409273][ T5874] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.409323][T10924] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 650.428828][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 650.436462][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.440251][T10913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 650.443459][T10924] vhci_hcd vhci_hcd.0: Device attached [ 650.459587][ T5874] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.459596][T10910] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 650.459616][T10910] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 650.482721][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.504178][T10910] vhci_hcd vhci_hcd.0: Device attached [ 650.519900][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.683848][T10910] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 650.690484][T10910] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 650.833877][T10913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 650.859617][ T5874] usb 3-1: GET_CAPABILITIES returned 0 [ 650.865534][T10910] vhci_hcd vhci_hcd.0: Device attached [ 650.896517][T10913] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(28) [ 650.903133][T10913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 650.920666][ T5874] usbtmc 3-1:16.0: can't read capabilities [ 650.941132][ T30] audit: type=1326 audit(1749102291.407:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 651.044958][T10913] vhci_hcd vhci_hcd.0: Device attached [ 651.171219][T10910] vhci_hcd vhci_hcd.0: port 0 already used [ 651.195952][ T30] audit: type=1326 audit(1749102291.407:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 651.277263][T10947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 651.736166][T10914] vhci_hcd: connection closed [ 651.736361][T10921] vhci_hcd: connection closed [ 651.739222][T10939] vhci_hcd: connection closed [ 651.743961][T10911] vhci_hcd: connection reset by peer [ 651.746084][T10935] vhci_hcd: connection closed [ 651.755925][T10926] vhci_hcd: connection closed [ 651.757255][ T6066] vhci_hcd: stop threads [ 651.770745][T10927] vhci_hcd: connection closed [ 651.875752][ T6066] vhci_hcd: release socket [ 651.889226][ T30] audit: type=1326 audit(1749102291.417:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 651.917314][ T6066] vhci_hcd: disconnect device [ 651.922370][ T6066] vhci_hcd: stop threads [ 651.929743][ T6066] vhci_hcd: release socket [ 651.934231][ T6066] vhci_hcd: disconnect device [ 651.939066][ T6066] vhci_hcd: stop threads [ 651.947999][ T30] audit: type=1326 audit(1749102291.417:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 651.975393][ T6066] vhci_hcd: release socket [ 651.980050][ T6066] vhci_hcd: disconnect device [ 651.987998][ T6066] vhci_hcd: stop threads [ 651.994513][ T6066] vhci_hcd: release socket [ 651.999550][ T6066] vhci_hcd: disconnect device [ 652.006140][ T6066] vhci_hcd: stop threads [ 652.011298][ T6066] vhci_hcd: release socket [ 652.016020][ T6066] vhci_hcd: disconnect device [ 652.590201][ T30] audit: type=1326 audit(1749102291.417:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 652.682451][ T30] audit: type=1326 audit(1749102291.417:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 652.711249][ T30] audit: type=1326 audit(1749102291.417:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 652.734844][ T6066] vhci_hcd: stop threads [ 652.741625][ T6066] vhci_hcd: release socket [ 652.773255][ T6066] vhci_hcd: disconnect device [ 652.792517][ T6066] vhci_hcd: stop threads [ 652.798248][ T30] audit: type=1326 audit(1749102291.417:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.0.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 652.798623][ T6066] vhci_hcd: release socket [ 652.835454][ T6066] vhci_hcd: disconnect device [ 653.742110][T10962] veth0_to_team: entered promiscuous mode [ 653.747877][T10962] veth0_to_team: entered allmulticast mode [ 654.991375][ T5947] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 655.337205][ T42] usb 3-1: USB disconnect, device number 9 [ 655.343180][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 655.343194][ T30] audit: type=1326 audit(1749102295.807:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 655.489790][ T5871] vhci_hcd: vhci_device speed not set [ 655.506801][ T30] audit: type=1326 audit(1749102295.807:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.056440][ T30] audit: type=1326 audit(1749102295.807:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.481014][ T5947] usb 6-1: device descriptor read/64, error -71 [ 656.493135][ T30] audit: type=1326 audit(1749102295.807:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.522272][ T30] audit: type=1326 audit(1749102295.807:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.578775][ T30] audit: type=1326 audit(1749102295.937:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.608397][ T30] audit: type=1326 audit(1749102295.937:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.720812][ T30] audit: type=1326 audit(1749102295.937:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.745989][ T30] audit: type=1326 audit(1749102295.947:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 656.823680][T11005] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 657.249971][ T5947] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 657.264985][ T30] audit: type=1326 audit(1749102295.947:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 659.368393][ T2150] usb usb36-port1: attempt power cycle [ 660.530104][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 660.530357][ T30] audit: type=1400 audit(1749102300.177:1518): avc: denied { create } for pid=11026 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.563654][ T30] audit: type=1400 audit(1749102300.187:1519): avc: denied { write } for pid=11026 comm="syz.1.1178" path="socket:[26494]" dev="sockfs" ino=26494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.962245][ T2150] usb usb36-port1: unable to enumerate USB device [ 665.720092][T11064] hub 8-0:1.0: USB hub found [ 665.725142][T11064] hub 8-0:1.0: 1 port detected [ 665.754760][ T5947] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 666.371635][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 670.228874][ T5947] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 670.309657][ T5947] usb 5-1: can't read configurations, error -71 [ 670.712910][T11099] trusted_key: encrypted_key: insufficient parameters specified [ 672.643807][T11110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 675.496236][T11141] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 676.352803][T11139] syzkaller1: entered promiscuous mode [ 676.358315][T11139] syzkaller1: entered allmulticast mode [ 676.380474][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1203'. [ 676.393073][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 676.410504][T11139] netlink: 'syz.1.1203': attribute type 13 has an invalid length. [ 679.915952][T11139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.925485][T11139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.950532][T11139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.969605][T11139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.026482][T11139] veth0_macvtap: left allmulticast mode [ 680.059411][T11171] netlink: 'syz.2.1209': attribute type 20 has an invalid length. [ 680.093309][T11158] IPv6: syztnl0: Disabled Multicast RS [ 682.073260][T11188] : entered promiscuous mode [ 684.376332][ T30] audit: type=1400 audit(1749102324.347:1520): avc: denied { create } for pid=11195 comm="syz.0.1214" name="#2e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 684.401445][ T30] audit: type=1400 audit(1749102324.347:1521): avc: denied { link } for pid=11195 comm="syz.0.1214" name="#2e" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 684.426430][ T30] audit: type=1400 audit(1749102324.347:1522): avc: denied { rename } for pid=11195 comm="syz.0.1214" name="#2f" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 685.251436][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.429250][T11215] Can't find a SQUASHFS superblock on nullb0 [ 685.670474][ T5830] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 685.678455][ T5830] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 685.702251][ T30] audit: type=1800 audit(1749102325.887:1523): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1219" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 686.130274][T11222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1222'. [ 689.761327][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 689.771438][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 689.786505][ T51] Bluetooth: hci1: hardware error 0x00 [ 692.545520][ T30] audit: type=1400 audit(1749102333.017:1524): avc: denied { getopt } for pid=11257 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 693.382934][T11258] fuse: Bad value for 'fd' [ 693.392055][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 694.342583][ T6066] Bluetooth: Error in BCSP hdr checksum [ 694.604569][T11275] Mount JFS Failure: -22 [ 694.609041][T11275] jfs_mount failed w/return code = -22 [ 695.453092][T11274] Cannot find add_set index 1 as target [ 695.548036][ T30] audit: type=1400 audit(1749102336.017:1525): avc: denied { bind } for pid=11280 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 695.622515][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1233'. [ 695.700701][T11282] syz.5.1233 (11282): drop_caches: 2 [ 696.043988][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 696.074236][T11284] qrtr: Invalid version 0 [ 696.082713][T11284] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[11284] [ 697.714877][T11295] veth0_to_team: entered promiscuous mode [ 697.721555][T11295] veth0_to_team: entered allmulticast mode [ 699.274805][T11309] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 699.282590][T11309] UDF-fs: Scanning with blocksize 512 failed [ 699.292364][T11309] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 699.300331][T11309] UDF-fs: Scanning with blocksize 1024 failed [ 699.310820][T11309] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 699.391134][T11309] UDF-fs: Scanning with blocksize 2048 failed [ 699.398489][T11309] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 699.406072][T11309] UDF-fs: Scanning with blocksize 4096 failed [ 700.548656][T11323] lo speed is unknown, defaulting to 1000 [ 700.554819][T11323] lo speed is unknown, defaulting to 1000 [ 700.563578][T11323] lo speed is unknown, defaulting to 1000 [ 700.620157][T11323] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 700.843153][T11323] lo speed is unknown, defaulting to 1000 [ 700.858289][T11323] lo speed is unknown, defaulting to 1000 [ 700.873595][T11323] lo speed is unknown, defaulting to 1000 [ 700.888580][T11323] lo speed is unknown, defaulting to 1000 [ 700.903501][T11323] lo speed is unknown, defaulting to 1000 [ 701.091290][ T30] audit: type=1400 audit(1749102341.247:1526): avc: denied { setopt } for pid=11312 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 701.878287][T11336] GUP no longer grows the stack in syz.0.1246 (11336): 200000003000-20000000a000 (200000002000) [ 701.889170][T11336] CPU: 1 UID: 0 PID: 11336 Comm: syz.0.1246 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 701.889195][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.889206][T11336] Call Trace: [ 701.889214][T11336] [ 701.889221][T11336] dump_stack_lvl+0x16c/0x1f0 [ 701.889252][T11336] gup_vma_lookup+0x1d2/0x220 [ 701.889284][T11336] __get_user_pages+0x271/0x3b80 [ 701.889310][T11336] ? __lock_acquire+0xb8a/0x1c90 [ 701.889341][T11336] ? __pfx___get_user_pages+0x10/0x10 [ 701.889369][T11336] __gup_longterm_locked+0x20d/0x1850 [ 701.889388][T11336] ? __lock_acquire+0xb8a/0x1c90 [ 701.889419][T11336] ? __pfx___gup_longterm_locked+0x10/0x10 [ 701.889451][T11336] pin_user_pages_remote+0xed/0x140 [ 701.889474][T11336] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 701.889496][T11336] ? copy_page_from_iter+0x141/0x180 [ 701.889526][T11336] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 701.889566][T11336] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 701.889593][T11336] ? iovec_from_user+0xbb/0x140 [ 701.889632][T11336] ? iovec_from_user+0xbb/0x140 [ 701.889668][T11336] process_vm_rw+0x2ff/0x360 [ 701.889697][T11336] ? __pfx_process_vm_rw+0x10/0x10 [ 701.889730][T11336] ? fd_install+0x225/0x750 [ 701.889754][T11336] ? putname+0x154/0x1a0 [ 701.889804][T11336] ? xfd_validate_state+0x61/0x180 [ 701.889834][T11336] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 701.889862][T11336] ? do_syscall_64+0x91/0x4c0 [ 701.889886][T11336] ? lockdep_hardirqs_on+0x7c/0x110 [ 701.889909][T11336] do_syscall_64+0xcd/0x4c0 [ 701.889935][T11336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.889953][T11336] RIP: 0033:0x7fa5ba98e929 [ 701.889968][T11336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.889985][T11336] RSP: 002b:00007fa5b83b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 701.890003][T11336] RAX: ffffffffffffffda RBX: 00007fa5babb6240 RCX: 00007fa5ba98e929 [ 701.890015][T11336] RDX: 0000000000000008 RSI: 0000200000001a00 RDI: 0000000000000457 [ 701.890026][T11336] RBP: 00007fa5baa10b39 R08: 0000000000000006 R09: 0000000000000000 [ 701.890036][T11336] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000000 [ 701.890047][T11336] R13: 0000000000000000 R14: 00007fa5babb6240 R15: 00007ffe8cf59e28 [ 701.890072][T11336] [ 702.638945][T11338] veth1_macvtap: left promiscuous mode [ 702.648673][T11338] veth0_vlan: entered allmulticast mode [ 702.661471][T11338] veth0_vlan: left promiscuous mode [ 702.668035][T11338] veth0_vlan: entered promiscuous mode [ 702.688093][T11338] lo speed is unknown, defaulting to 1000 [ 702.764186][T11338] lo speed is unknown, defaulting to 1000 [ 702.771882][T11338] lo speed is unknown, defaulting to 1000 [ 703.583508][T11361] nfs: Bad value for 'source' [ 703.935243][ T5874] IPVS: starting estimator thread 0... [ 703.945105][T11360] bridge0: port 3(team0) entered disabled state [ 703.951674][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.958780][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.973241][T11360] bridge0: entered allmulticast mode [ 704.039652][T11368] IPVS: using max 78 ests per chain, 187200 per kthread [ 704.068318][T11351] team0: left allmulticast mode [ 704.088077][T11351] team_slave_0: left allmulticast mode [ 704.163120][T11351] team_slave_1: left allmulticast mode [ 704.173629][T11351] geneve0: left allmulticast mode [ 704.178728][T11351] team0: left promiscuous mode [ 704.185994][T11351] team_slave_0: left promiscuous mode [ 704.387631][T11360] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1249'. [ 704.399050][T11351] team_slave_1: left promiscuous mode [ 704.407781][T11351] geneve0: left promiscuous mode [ 704.419313][T11351] bridge0: port 3(team0) entered disabled state [ 704.525537][T11377] Can't find a SQUASHFS superblock on nullb0 [ 704.849734][ T30] audit: type=1800 audit(1749102344.977:1527): pid=11377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1255" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 705.745988][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 705.805960][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 705.917769][T11351] bridge_slave_1: left allmulticast mode [ 705.924745][T11351] bridge_slave_1: left promiscuous mode [ 705.931110][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.113671][T11384] ceph: No mds server is up or the cluster is laggy [ 706.121228][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 706.127305][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 706.143400][ T30] audit: type=1804 audit(1749102346.617:1528): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1252" name="file0" dev="ramfs" ino=28996 res=1 errno=0 [ 706.211562][T11351] bridge_slave_0: left allmulticast mode [ 706.217544][T11351] bridge_slave_0: left promiscuous mode [ 706.225007][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.198243][T11408] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.331330][T11428] Cannot find add_set index 1 as target [ 711.485808][ T30] audit: type=1400 audit(1749102351.957:1529): avc: denied { call } for pid=11442 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 712.526404][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1266'. [ 713.020131][T11462] syz.1.1266 (11462): drop_caches: 2 [ 713.905510][T11472] CUSE: unknown device info "" [ 713.910746][T11472] CUSE: zero length info key specified [ 715.019251][T11476] Cannot find add_set index 1 as target [ 715.812505][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1277'. [ 715.867750][T11480] syz.2.1277 (11480): drop_caches: 2 [ 716.342862][ T30] audit: type=1400 audit(1749102356.817:1530): avc: denied { mounton } for pid=11483 comm="syz.1.1278" path="/265/file0" dev="tmpfs" ino=1508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 716.342891][T11484] kAFS: No cell specified [ 716.809576][ T2150] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 717.028118][ T2150] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 717.067477][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.184883][ T2150] usb 2-1: config 0 descriptor?? [ 717.290030][ T30] audit: type=1400 audit(1749102357.747:1531): avc: denied { connect } for pid=11486 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 717.807643][T11497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'. [ 717.830826][T11497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.680067][ T30] audit: type=1400 audit(1749102358.937:1532): avc: denied { remount } for pid=11498 comm="syz.0.1282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 719.082600][ T30] audit: type=1400 audit(1749102359.557:1533): avc: denied { map } for pid=11512 comm="syz.4.1285" path="socket:[29207]" dev="sockfs" ino=29207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.105851][ T30] audit: type=1400 audit(1749102359.557:1534): avc: denied { read } for pid=11512 comm="syz.4.1285" path="socket:[29207]" dev="sockfs" ino=29207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.220497][ T30] audit: type=1326 audit(1749102359.687:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x0 [ 719.424830][ T5871] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 720.010904][ T2150] usb 2-1: USB disconnect, device number 9 [ 720.058378][ T5871] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 720.085587][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.212469][ T5871] usb 1-1: config 0 descriptor?? [ 722.596703][ T5871] gspca_main: mars-2.14.0 probing 093a:050f [ 722.606162][ T5871] usb 1-1: USB disconnect, device number 8 [ 722.733638][T11527] qrtr: Invalid version 0 [ 722.742871][T11527] ptrace attach of "./syz-executor exec"[6572] was attempted by "./syz-executor exec"[11527] [ 724.492059][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 724.741302][T11538] netlink: 'syz.5.1291': attribute type 10 has an invalid length. [ 724.750247][T11538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1291'. [ 724.878954][T11542] CUSE: unknown device info "" [ 724.884077][T11542] CUSE: zero length info key specified [ 725.830631][ T30] audit: type=1400 audit(1749102365.247:1536): avc: denied { mounton } for pid=11530 comm="syz.0.1290" path="/proc/1172/cgroup" dev="proc" ino=29246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 726.009533][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 726.831709][T11538] geneve0: entered promiscuous mode [ 726.866964][T11538] team0: Port device geneve0 added [ 726.891316][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.902212][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.911159][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.920165][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.929064][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.938016][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.946944][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 726.955890][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 727.060638][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 727.089279][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.100391][ T42] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.111470][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 727.122432][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.131250][ T42] usb 1-1: Product: syz [ 727.135581][ T42] usb 1-1: Manufacturer: syz [ 727.220913][ T42] usb 1-1: SerialNumber: syz [ 727.254468][ T42] usb 1-1: config 0 descriptor?? [ 727.763273][T11535] lo speed is unknown, defaulting to 1000 [ 727.908509][T11535] lo speed is unknown, defaulting to 1000 [ 727.915594][T11535] lo speed is unknown, defaulting to 1000 [ 729.624864][ T30] audit: type=1326 audit(1749102370.097:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 730.189586][ T30] audit: type=1326 audit(1749102370.097:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 730.603210][ T5947] usb 1-1: USB disconnect, device number 9 [ 731.781365][ T30] audit: type=1326 audit(1749102370.147:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 732.406286][T11600] __nla_validate_parse: 29 callbacks suppressed [ 732.412711][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 732.496561][ T30] audit: type=1326 audit(1749102370.147:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 732.768617][ T30] audit: type=1326 audit(1749102370.147:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 734.613843][ T30] audit: type=1326 audit(1749102370.147:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 734.878769][ T30] audit: type=1326 audit(1749102370.147:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 734.909545][ T30] audit: type=1326 audit(1749102370.147:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 734.936962][ T30] audit: type=1326 audit(1749102370.147:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 734.993676][ T30] audit: type=1326 audit(1749102370.147:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 735.019304][ T30] audit: type=1326 audit(1749102370.147:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 735.164147][ T30] audit: type=1326 audit(1749102370.147:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 735.808071][ T6348] Bluetooth: (null): Too short H5 packet [ 735.814202][ T6348] Bluetooth: (null): Invalid header checksum [ 735.840691][ T6348] Bluetooth: (null): Invalid header checksum [ 735.848880][T11623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.903124][ T6348] Bluetooth: (null): Invalid header checksum [ 736.266571][ T6348] Bluetooth: (null): Invalid header checksum [ 736.331712][ T6348] Bluetooth: (null): Invalid header checksum [ 736.409270][ T6348] Bluetooth: (null): Invalid header checksum [ 736.450311][ T6348] Bluetooth: (null): Invalid header checksum [ 736.456529][ T6348] Bluetooth: (null): Invalid header checksum [ 736.490895][ T7494] Bluetooth: (null): Invalid header checksum [ 736.637984][ T6066] Bluetooth: (null): Invalid header checksum [ 737.880890][T11633] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 737.886708][T11633] syzkaller0: ignored: set checksum disabled [ 740.043740][T11664] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 740.352253][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 741.317628][T11681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 741.329211][T11681] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 742.799313][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 742.799327][ T30] audit: type=1400 audit(1749102382.357:1593): avc: denied { bind } for pid=11680 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.975016][T11692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 745.632349][ T30] audit: type=1400 audit(1749102386.107:1594): avc: denied { write } for pid=11703 comm="syz.1.1328" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 747.179010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.294500][T11740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 749.685918][T11737] program syz.0.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.463321][T11748] syz.0.1338: attempt to access beyond end of device [ 751.463321][T11748] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 751.476403][T11748] qnx4: unable to read the superblock [ 752.594892][T11759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 755.480687][T11784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 756.227426][T11775] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 756.262508][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1346'. [ 756.824841][T11775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.623985][T11795] Cannot find add_set index 1 as target [ 757.823430][T11799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1350'. [ 757.919653][T11800] syz.5.1350 (11800): drop_caches: 2 [ 759.650745][T11816] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 761.272439][T11832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 761.601928][T11834] qrtr: Invalid version 0 [ 761.610138][T11834] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[11834] [ 762.428273][T11844] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 764.242557][ T30] audit: type=1326 audit(2000000001.040:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 764.277849][T11857] block nbd5: NBD_DISCONNECT [ 764.316055][T11857] block nbd5: Send disconnect failed -107 [ 764.333385][ T30] audit: type=1326 audit(2000000001.040:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 764.479801][T11866] block nbd5: Disconnected due to user request. [ 764.486199][T11866] block nbd5: shutting down sockets [ 764.947377][ T30] audit: type=1326 audit(2000000001.060:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 765.108377][ T30] audit: type=1326 audit(2000000001.060:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 765.132097][ T30] audit: type=1326 audit(2000000001.060:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 765.155618][ T30] audit: type=1326 audit(2000000001.060:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 765.181449][ T30] audit: type=1326 audit(2000000001.060:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 765.424555][ T30] audit: type=1326 audit(2000000001.060:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 765.548755][ T30] audit: type=1326 audit(2000000001.070:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 766.034270][ T30] audit: type=1326 audit(2000000001.070:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 766.163782][T11878] Cannot find add_set index 1 as target [ 766.363252][T11882] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 766.504732][T11885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1370'. [ 766.697921][T11886] syz.5.1370 (11886): drop_caches: 2 [ 767.216442][T11894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 768.156757][ T42] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 768.331788][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 768.357381][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.380272][ T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 768.397595][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.467236][ T42] usb 2-1: config 0 descriptor?? [ 771.073865][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 771.083050][T11921] tipc: Started in network mode [ 771.088417][T11921] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 771.098008][T11921] tipc: Enabling of bearer rejected, failed to enable media [ 771.189546][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 771.189582][ T30] audit: type=1326 audit(2000000007.410:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.443210][ T30] audit: type=1326 audit(2000000007.410:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.475104][ T30] audit: type=1326 audit(2000000007.410:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.637182][ T30] audit: type=1326 audit(2000000007.410:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.660950][ T30] audit: type=1326 audit(2000000007.410:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.686800][ T30] audit: type=1326 audit(2000000007.440:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.712882][ T30] audit: type=1326 audit(2000000007.440:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.742335][ T30] audit: type=1326 audit(2000000007.440:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.765925][ T30] audit: type=1326 audit(2000000007.440:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 771.793020][ T30] audit: type=1326 audit(2000000007.450:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11911 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 773.096928][T11898] usb 2-1: USB disconnect, device number 10 [ 776.520329][T11957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.122927][T11954] lo speed is unknown, defaulting to 1000 [ 777.318001][T11954] lo speed is unknown, defaulting to 1000 [ 777.324477][T11954] lo speed is unknown, defaulting to 1000 [ 778.774455][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 778.774487][ T30] audit: type=1400 audit(2000000015.510:1639): avc: denied { execute_no_trans } for pid=11964 comm="syz.5.1390" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=31085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 778.830286][T11898] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 779.082621][T11898] usb 2-1: Using ep0 maxpacket: 8 [ 779.089050][T11898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 779.300390][T11898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 779.315618][T11898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.330378][T11898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.403039][T11985] SELinux: syz.0.1394 (11985) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 779.449300][T11985] bpf: Bad value for 'uid' [ 779.830964][T11898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.859501][T11898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.286821][T11991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.384262][T11898] usb 2-1: GET_CAPABILITIES returned 0 [ 780.431070][T11898] usbtmc 2-1:16.0: can't read capabilities [ 780.663174][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 781.890282][T11975] fuse: Bad value for 'fd' [ 782.319647][ T5947] usb 2-1: USB disconnect, device number 11 [ 783.388742][ T30] audit: type=1400 audit(2000000020.160:1640): avc: denied { bind } for pid=12015 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 784.879872][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 786.200261][ T5903] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 786.380189][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.398432][T12050] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1410'. [ 786.400650][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.429612][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 786.438700][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.608103][ T5903] usb 1-1: config 0 descriptor?? [ 787.274234][ T30] audit: type=1400 audit(2000000024.070:1641): avc: denied { setopt } for pid=12042 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 787.338591][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 787.346610][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 787.371957][ T5903] usb 1-1: USB disconnect, device number 10 [ 789.532444][ T30] audit: type=1400 audit(2000000282.329:1642): avc: denied { write } for pid=12077 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 791.151310][T12070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1415'. [ 791.599507][ T5947] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 791.759907][T12100] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 792.312154][ T5947] usb 6-1: device descriptor read/64, error -71 [ 792.449721][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 792.474161][T12104] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 792.482016][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'. [ 792.983575][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1426'. [ 793.082911][T12114] SELinux: Context is not valid (left unmapped). [ 793.764045][T12124] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 794.354675][T12120] CUSE: unknown device info "" [ 794.359926][T12120] CUSE: zero length info key specified [ 794.934895][T12130] loop8: detected capacity change from 0 to 1 [ 794.944722][T12130] Dev loop8: unable to read RDB block 1 [ 794.950344][T12130] loop8: unable to read partition table [ 794.956049][T12130] loop8: partition table beyond EOD, truncated [ 794.962255][T12130] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 795.251613][ T30] audit: type=1400 audit(2000000287.909:1643): avc: denied { shutdown } for pid=12129 comm="syz.0.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 796.636558][T12143] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 797.377582][T12140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.455184][ T30] audit: type=1326 audit(2000000290.239:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 798.445869][ T30] audit: type=1326 audit(2000000290.239:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 798.612733][T12159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 798.796767][ T30] audit: type=1326 audit(2000000290.239:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 798.837787][ T30] audit: type=1326 audit(2000000290.239:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 798.955785][ T30] audit: type=1326 audit(2000000290.239:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 798.980005][ T30] audit: type=1326 audit(2000000290.239:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 799.003607][ T30] audit: type=1326 audit(2000000290.239:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 799.045234][ T30] audit: type=1326 audit(2000000290.249:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 799.586650][ T30] audit: type=1326 audit(2000000290.279:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.0.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa5ba98e929 code=0x7ffc0000 [ 800.288560][ T5947] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 800.452859][ T5947] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 800.464020][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.550896][ T5947] usb 2-1: config 0 descriptor?? [ 800.568820][ T5947] gspca_main: mars-2.14.0 probing 093a:050f [ 801.111887][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 801.654051][T12147] Bluetooth: hci0: command 0x0405 tx timeout [ 802.119603][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 802.119633][ T30] audit: type=1400 audit(2000000294.739:1676): avc: denied { ioctl } for pid=12184 comm="syz.5.1444" path="socket:[31817]" dev="sockfs" ino=31817 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 803.486913][ T5947] usb 2-1: USB disconnect, device number 12 [ 803.783979][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 804.367632][ T30] audit: type=1400 audit(2000000297.149:1677): avc: denied { bind } for pid=12214 comm="syz.0.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 804.899947][ T5947] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 805.129900][T12230] tipc: Started in network mode [ 805.134933][T12230] tipc: Node identity ac1414aa, cluster identity 4711 [ 805.146894][T12230] tipc: Enabled bearer , priority 10 [ 806.285977][ T5903] tipc: Node number set to 2886997162 [ 807.860879][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 807.869291][ T5947] usb 1-1: too many configurations: 248, using maximum allowed: 8 [ 807.880201][ T5947] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 807.887772][ T5947] usb 1-1: can't read configurations, error -71 [ 808.127527][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.201901][T12263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 808.693809][T12264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 811.147220][T12289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.338917][ T30] audit: type=1326 audit(2000000304.109:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.4.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0da118e929 code=0x0 [ 812.964998][T12291] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1470'. [ 814.095994][ T30] audit: type=1400 audit(2000000306.889:1679): avc: denied { ioctl } for pid=12307 comm="syz.0.1474" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 815.143840][T12322] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.198744][T12336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 817.209966][T12336] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 818.720906][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 819.768102][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 820.909411][T12367] netlink: 'syz.2.1489': attribute type 3 has an invalid length. [ 820.917271][T12367] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 820.925185][T12367] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1489'. [ 821.690173][T12372] dlm: Unknown command passed to DLM device : 0 [ 821.690173][T12372] [ 822.137546][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 822.150530][T12385] IPVS: Error during creation of socket; terminating [ 822.624383][T12374] netlink: 'syz.5.1490': attribute type 1 has an invalid length. [ 822.645387][T12374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.838703][T12410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1499'. [ 826.920393][T12410] tmpfs: Bad value for 'mpol' [ 828.729459][T12426] binder: 12424:12426 ioctl 4018620d 0 returned -22 [ 831.706537][T12444] loop6: detected capacity change from 0 to 7 [ 831.714889][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.722899][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.730808][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.738693][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.747138][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.799609][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.830552][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.838750][T12444] ldm_validate_partition_table(): Disk read failed. [ 831.845757][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.853898][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.861855][T12444] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.869830][T12444] Dev loop6: unable to read RDB block 0 [ 831.875580][T12444] loop6: unable to read partition table [ 831.881393][T12444] loop6: partition table beyond EOD, truncated [ 831.887960][T12444] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 831.887960][T12444] ) failed (rc=-5) [ 831.990310][ T30] audit: type=1326 audit(2000000324.499:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 832.013762][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.206398][ T30] audit: type=1326 audit(2000000324.499:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 832.229890][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.249206][ T30] audit: type=1326 audit(2000000324.499:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 832.273838][ T30] audit: type=1326 audit(2000000324.499:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 832.297293][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.643387][ T30] audit: type=1326 audit(2000000324.499:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 832.666859][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.673164][ T30] audit: type=1326 audit(2000000324.499:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 832.696628][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.704338][ T30] audit: type=1326 audit(2000000324.499:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 833.364438][T12462] ceph: No mds server is up or the cluster is laggy [ 833.516629][ T30] audit: type=1326 audit(2000000324.499:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 833.547881][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 833.584770][ T30] audit: type=1326 audit(2000000324.499:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 833.713452][T12467] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1510'. [ 833.747583][ T30] audit: type=1326 audit(2000000324.499:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 833.857349][T12473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.912849][T12473] bond0: (slave rose0): Enslaving as an active interface with an up link [ 835.189931][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 835.429609][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 835.458884][ T5874] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 835.471091][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.483604][ T5874] usb 1-1: config 0 descriptor?? [ 835.509362][ T5874] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 835.535087][ T5874] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 835.545660][ T5874] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 835.560000][T12493] block nbd1: NBD_DISCONNECT [ 835.564630][T12493] block nbd1: Send disconnect failed -107 [ 835.572385][T12493] block nbd1: Send disconnect failed -107 [ 836.546879][T12492] block nbd1: Disconnected due to user request. [ 836.554065][T12492] block nbd1: shutting down sockets [ 837.433789][ T5947] usb 1-1: USB disconnect, device number 13 [ 837.938140][T12525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.091162][T12531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 838.102349][T12531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 838.110927][T12531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 838.120802][T12531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 838.131030][T12531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 838.151996][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 838.152009][ T30] audit: type=1400 audit(2000000330.949:1710): avc: denied { mounton } for pid=12530 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 838.235712][T12530] Failed to initialize the IGMP autojoin socket (err -2) [ 838.716533][T12540] 9pnet_fd: Insufficient options for proto=fd [ 839.142809][T12530] chnl_net:caif_netlink_parms(): no params data found [ 840.211161][T12147] Bluetooth: hci5: command tx timeout [ 841.659964][ T30] audit: type=1400 audit(2000000334.449:1711): avc: denied { read write } for pid=12547 comm="syz.1.1531" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 841.789868][ T30] audit: type=1400 audit(2000000334.459:1712): avc: denied { open } for pid=12547 comm="syz.1.1531" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 841.977947][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.002393][T12530] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.048865][T12530] bridge_slave_0: entered allmulticast mode [ 842.095524][T12530] bridge_slave_0: entered promiscuous mode [ 842.217885][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.230358][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.252773][T12530] bridge_slave_1: entered allmulticast mode [ 842.270369][T12530] bridge_slave_1: entered promiscuous mode [ 842.872561][T12147] Bluetooth: hci5: command tx timeout [ 842.892542][ T30] audit: type=1400 audit(2000000335.319:1713): avc: denied { append } for pid=12560 comm="syz.2.1535" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 844.228344][T12581] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1536'. [ 844.292380][T12530] team0: Port device team_slave_0 added [ 844.363150][T12530] team0: Port device team_slave_1 added [ 844.405369][T12578] could not allocate digest TFM handle cbcmac-aes-neon [ 844.727143][T12530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.743345][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.817674][T12530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.831929][T12530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.841606][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.480308][T12147] Bluetooth: hci5: command tx timeout [ 845.492605][T12530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.566737][ T30] audit: type=1326 audit(2000000338.359:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 845.624147][ T42] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 845.736470][T12530] hsr_slave_0: entered promiscuous mode [ 845.773375][T12530] hsr_slave_1: entered promiscuous mode [ 845.779927][T12530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.787606][T12530] Cannot create hsr debugfs directory [ 845.833206][ T30] audit: type=1326 audit(2000000338.359:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 845.905481][ T42] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 846.968257][T12530] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 847.033224][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.045140][ T30] audit: type=1326 audit(2000000338.359:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 847.076984][ T30] audit: type=1326 audit(2000000338.359:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 847.110158][ T42] usb 1-1: config 0 descriptor?? [ 847.121690][ T42] gspca_main: mars-2.14.0 probing 093a:050f [ 847.126032][T12530] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 847.144883][ T30] audit: type=1326 audit(2000000338.359:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 847.208358][T12530] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 847.271113][ T30] audit: type=1326 audit(2000000338.359:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 847.294509][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.348916][T12530] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 847.377702][ T30] audit: type=1326 audit(2000000338.359:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 847.462105][ T30] audit: type=1326 audit(2000000338.359:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 847.492214][ T5871] usb 1-1: USB disconnect, device number 14 [ 847.560965][T12147] Bluetooth: hci5: command tx timeout [ 848.171518][ T30] audit: type=1326 audit(2000000338.359:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 848.195526][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.623821][ T30] audit: type=1326 audit(2000000338.359:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9798e929 code=0x7ffc0000 [ 849.647315][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.778553][T12624] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 851.139368][T12632] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 852.222386][T12633] input: syz0 as /devices/virtual/input/input15 [ 852.795720][T12637] input: syz1 as /devices/virtual/input/input16 [ 852.831751][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.946280][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.953443][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.046952][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.054112][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.438047][T12648] nfs: Unknown parameter 'S6ɝu"kk8o_IJr("Y 2؀;rvou?/Wj "M' [ 853.918794][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 855.079888][T12147] Bluetooth: hci3: command 0x0406 tx timeout [ 855.129576][T12664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.195736][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 856.195750][ T30] audit: type=1400 audit(2000000348.679:1738): avc: denied { ioctl } for pid=12669 comm="syz.0.1558" path="socket:[33205]" dev="sockfs" ino=33205 ioctlcmd=0x5112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 856.892195][T12679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 857.162936][T12686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 858.033650][T12692] hub 8-0:1.0: USB hub found [ 858.040532][T12692] hub 8-0:1.0: 1 port detected [ 858.377495][T12530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.328583][T12530] veth0_vlan: entered promiscuous mode [ 859.431704][T12530] veth1_vlan: entered promiscuous mode [ 859.709488][ T30] audit: type=1400 audit(2000000352.429:1739): avc: denied { listen } for pid=12696 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 859.957584][ T30] audit: type=1400 audit(2000000352.429:1740): avc: denied { accept } for pid=12696 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 860.116190][ T30] audit: type=1326 audit(2000000352.909:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 861.044860][T12530] veth0_macvtap: entered promiscuous mode [ 861.766991][T12530] veth1_macvtap: entered promiscuous mode [ 861.859304][ T30] audit: type=1400 audit(2000000354.649:1742): avc: denied { ioctl } for pid=12735 comm="syz.1.1572" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 862.046041][T12530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.510443][T12530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.081654][ T30] audit: type=1326 audit(2000000355.849:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.1.1574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c9798e929 code=0x0 [ 863.101389][T12530] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 863.104507][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.318691][T12744] can0: slcan on ttyS3. [ 863.335802][T12530] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 863.758993][T12530] wireguard: wg0: Could not create IPv4 socket [ 863.775209][T12530] wireguard: wg1: Could not create IPv4 socket [ 863.783160][T12744] can0 (unregistered): slcan off ttyS3. [ 863.795080][T12530] wireguard: wg2: Could not create IPv4 socket [ 865.149571][ T30] audit: type=1326 audit(2000000357.919:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12764 comm="syz.0.1578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5ba98e929 code=0x0 [ 866.929571][ T30] audit: type=1400 audit(2000000000.930:1745): avc: denied { mount } for pid=12778 comm="syz.1.1581" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 867.465842][T12794] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1583'. [ 867.942062][T12531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 867.953203][T12531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 867.961287][T12531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 867.968735][T12531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 867.976135][T12531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 867.998510][T12796] Failed to initialize the IGMP autojoin socket (err -2) [ 869.580616][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.065910][T12531] Bluetooth: hci5: command tx timeout [ 870.147160][T12823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 871.036933][ T30] audit: type=1400 audit(2000000005.400:1746): avc: denied { watch } for pid=12825 comm="syz.0.1590" path="/353/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 871.081923][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.520875][T12147] Bluetooth: hci5: command tx timeout [ 873.049570][ T30] audit: type=1400 audit(2000000007.140:1747): avc: denied { audit_control } for pid=12833 comm="syz.0.1592" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 873.476558][T12850] Bluetooth: MGMT ver 1.23 [ 874.120020][T12531] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 874.127483][T12531] Bluetooth: hci0: command 0x0405 tx timeout [ 874.600747][T12531] Bluetooth: hci5: command tx timeout [ 875.054043][T12796] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 875.181906][T12796] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 876.175872][T12796] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 876.518592][T12796] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 876.679543][T12531] Bluetooth: hci5: command tx timeout [ 877.663133][T12796] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 877.691600][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'. [ 878.069667][T12796] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 878.180349][T12796] wireguard: wg0: Could not create IPv4 socket [ 878.199973][T12796] wireguard: wg1: Could not create IPv4 socket [ 878.212103][T12796] wireguard: wg2: Could not create IPv4 socket [ 881.235642][T12941] syz.5.1611: attempt to access beyond end of device [ 881.235642][T12941] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 882.291035][ T5903] Process accounting resumed [ 886.469565][T12970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=12970 comm=syz.1.1617 [ 886.853050][ T30] audit: type=1326 audit(2000000021.510:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.008702][ T30] audit: type=1326 audit(2000000021.510:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.145691][ T30] audit: type=1326 audit(2000000021.510:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.199472][ T30] audit: type=1326 audit(2000000021.510:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.243497][ T30] audit: type=1326 audit(2000000021.510:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.270734][ T30] audit: type=1326 audit(2000000021.510:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.354712][ T30] audit: type=1326 audit(2000000021.510:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.676682][ T30] audit: type=1326 audit(2000000021.510:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.706073][ T30] audit: type=1326 audit(2000000021.510:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 887.730738][ T30] audit: type=1326 audit(2000000021.510:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba98e929 code=0x7fc00000 [ 888.053222][T12988] FAT-fs (nullb0): bogus number of reserved sectors [ 888.059973][T12988] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 888.711948][T12995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.141726][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 889.152387][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 889.160658][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 889.168318][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 889.182245][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 889.227075][T12999] Failed to initialize the IGMP autojoin socket (err -2) [ 889.692619][T13005] syz.1.1623: attempt to access beyond end of device [ 889.692619][T13005] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 890.429558][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 890.611368][ T5874] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 890.645309][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.240074][ T51] Bluetooth: hci5: command tx timeout [ 891.263884][ T5874] usb 2-1: config 0 descriptor?? [ 891.305218][ T5874] gspca_main: mars-2.14.0 probing 093a:050f [ 891.674870][ T5874] usb 2-1: USB disconnect, device number 13 [ 892.209863][T13032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 892.790841][T13022] Failed to initialize the IGMP autojoin socket (err -2) [ 893.319658][ T51] Bluetooth: hci5: command tx timeout [ 894.252579][T12999] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 895.005895][T13045] team_slave_0: entered promiscuous mode [ 895.011817][T13046] batadv_slave_1: entered promiscuous mode [ 895.017818][T13046] batadv_slave_1: left promiscuous mode [ 895.028270][T13046] team_slave_0: left promiscuous mode [ 895.221670][T12999] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 895.404799][T13056] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 895.428823][ T51] Bluetooth: hci5: command tx timeout [ 895.746180][T12999] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 896.130014][T12999] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 897.700549][ T51] Bluetooth: hci5: command tx timeout [ 899.109453][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 899.109471][ T30] audit: type=1400 audit(2000000033.690:1815): avc: denied { mount } for pid=13069 comm="syz.2.1637" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 899.608628][T13070] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 899.618706][T13070] SELinux: failed to load policy [ 899.628473][ T30] audit: type=1400 audit(2000000034.260:1816): avc: denied { load_policy } for pid=13069 comm="syz.2.1637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 900.075821][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1639'. [ 900.085189][T13081] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 900.108965][T13081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.846229][T13093] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 901.819596][T12999] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 901.888007][T12999] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 901.931186][T12999] wireguard: wg0: Could not create IPv4 socket [ 901.949801][T12999] wireguard: wg1: Could not create IPv4 socket [ 901.969184][T12999] wireguard: wg2: Could not create IPv4 socket [ 906.408719][T13151] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1652'. [ 906.854109][T13152] syz.5.1652 (13152): drop_caches: 2 [ 907.015918][T13143] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 907.024122][T13143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1651'. [ 907.069990][T13153] CUSE: unknown device info "" [ 907.074993][T13153] CUSE: zero length info key specified [ 907.321221][T13143] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 907.929838][T13165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1654'. [ 910.010267][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 910.048226][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 910.106160][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 910.523476][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 910.531710][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 910.680275][ T30] audit: type=1400 audit(2000000045.330:1817): avc: denied { setopt } for pid=13176 comm="syz.5.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 910.684445][T13178] ptrace attach of "./syz-executor exec"[6572] was attempted by ""[13178] [ 911.022584][T13167] Failed to initialize the IGMP autojoin socket (err -2) [ 911.787150][T13193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.795188][T13193] batadv_slave_0: entered promiscuous mode [ 913.080130][ T51] Bluetooth: hci5: command tx timeout [ 915.212321][ T51] Bluetooth: hci5: command tx timeout [ 917.293814][ T51] Bluetooth: hci5: command tx timeout [ 917.453189][T13235] input: syz0 as /devices/virtual/input/input17 [ 917.784200][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 918.405473][ T30] audit: type=1326 audit(2000000053.060:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 918.515529][ T30] audit: type=1326 audit(2000000053.060:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 918.564915][ T30] audit: type=1326 audit(2000000053.060:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 918.710320][T13246] Invalid ELF header type: 3 != 1 [ 919.572809][ T51] Bluetooth: hci5: command tx timeout [ 920.258008][ T30] audit: type=1326 audit(2000000053.060:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 920.281465][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.289022][ T30] audit: type=1326 audit(2000000053.060:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 920.312742][ T30] audit: type=1326 audit(2000000053.070:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 920.336147][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.358053][ T30] audit: type=1326 audit(2000000053.070:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 920.510981][ T30] audit: type=1326 audit(2000000053.070:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 920.537915][ T30] audit: type=1326 audit(2000000053.070:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 920.565807][ T30] audit: type=1326 audit(2000000053.070:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 921.279906][T13259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 922.528385][T13167] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 924.111454][T13167] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 924.906032][T13167] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 926.317475][T13167] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 926.655332][T13292] ./file0: Can't lookup blockdev [ 926.831950][ T42] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 927.127060][T13295] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 927.209733][ T5871] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 927.839320][T13303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.845675][T13303] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 927.873357][T13303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 927.879369][T13303] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 927.888010][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 927.911826][T13303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 927.917787][T13303] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 928.005937][T13303] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 928.011978][T13303] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 928.027389][ T42] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 928.038230][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.058118][ T42] usb 2-1: Product: syz [ 928.062431][ T42] usb 2-1: Manufacturer: syz [ 928.067341][ T42] usb 2-1: SerialNumber: syz [ 928.078811][ T42] usb 2-1: config 0 descriptor?? [ 928.143301][ T42] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 928.366179][T13167] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 928.519450][T13167] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 928.544469][T13167] wireguard: wg0: Could not create IPv4 socket [ 928.555864][T13167] wireguard: wg1: Could not create IPv4 socket [ 928.603093][T13167] wireguard: wg2: Could not create IPv4 socket [ 928.899869][ T42] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 928.911263][ T42] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 929.002972][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'. [ 929.065285][T13314] syz.0.1686 (13314): drop_caches: 2 [ 929.207038][ T42] usb 2-1: USB disconnect, device number 14 [ 929.462619][ T5871] usb 6-1: unable to get BOS descriptor or descriptor too short [ 929.471788][ T5871] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 929.479373][ T5871] usb 6-1: can't read configurations, error -71 [ 929.737336][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 929.737350][ T30] audit: type=1400 audit(2000000064.390:1864): avc: denied { map } for pid=13315 comm="syz.2.1685" path="/proc/1453/ns" dev="proc" ino=37642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 930.215246][T12531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 930.382565][T12531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 930.390658][T12531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 930.833222][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1687'. [ 931.000470][T13336] syz.0.1687 (13336): drop_caches: 2 [ 931.007522][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.131332][T12531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 931.198213][T12531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 931.258519][T13327] Failed to initialize the IGMP autojoin socket (err -2) [ 932.970453][T13353] syz.0.1691: attempt to access beyond end of device [ 932.970453][T13353] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 932.984124][T13353] syz.0.1691: attempt to access beyond end of device [ 932.984124][T13353] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 932.997753][T13353] Mount JFS Failure: -5 [ 933.003334][T13353] jfs_mount failed w/return code = -5 [ 933.311243][ T51] Bluetooth: hci5: command tx timeout [ 933.609630][ T5874] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 933.674238][T13357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 934.358006][T13368] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1694'. [ 934.657084][T13364] ceph: No mds server is up or the cluster is laggy [ 934.679955][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 935.319484][ T51] Bluetooth: hci5: command 0x041b tx timeout [ 937.402037][T12531] Bluetooth: hci5: command 0x041b tx timeout [ 938.121778][T13383] deleting an unspecified loop device is not supported. [ 939.426823][T13396] Failed to initialize the IGMP autojoin socket (err -2) [ 939.737585][T12531] Bluetooth: hci5: command 0x041b tx timeout [ 939.942744][T13327] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 940.003294][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1702'. [ 940.034716][T13327] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 940.074976][T13397] syz.0.1702 (13397): drop_caches: 2 [ 940.239549][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 940.321249][T13327] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 940.849549][ T24] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 940.968587][T13407] mkiss: ax0: crc mode is auto. [ 940.973625][T13327] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 941.010967][ T5871] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 941.030959][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.046477][ T5871] usb 2-1: config 0 descriptor?? [ 941.069986][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 941.080191][ T5871] gspca_main: mars-2.14.0 probing 093a:050f [ 941.419612][ T24] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 941.484483][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1703'. [ 941.599603][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 941.614167][ T24] usb usb6-port1: attempt power cycle [ 941.800564][T12531] Bluetooth: hci5: command 0x041b tx timeout [ 942.016026][ T24] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 942.040784][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 942.180493][ T24] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 942.213141][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 942.233510][ T24] usb usb6-port1: unable to enumerate USB device [ 942.262198][T13327] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 942.336174][T13327] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 942.388432][T13327] wireguard: wg0: Could not create IPv4 socket [ 942.424896][T13327] wireguard: wg1: Could not create IPv4 socket [ 942.438418][T13327] wireguard: wg2: Could not create IPv4 socket [ 942.760518][T13429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 942.884578][T13432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1706'. [ 942.961898][T13433] syz.0.1706 (13433): drop_caches: 2 [ 943.075912][ T24] usb 2-1: USB disconnect, device number 15 [ 943.741019][ T30] audit: type=1400 audit(2000000078.380:1865): avc: denied { setopt } for pid=13434 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 943.846944][ T30] audit: type=1400 audit(2000000078.500:1866): avc: denied { unmount } for pid=6572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 943.908686][ T30] audit: type=1326 audit(2000000078.560:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 943.933287][ T30] audit: type=1326 audit(2000000078.560:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 944.161521][ T30] audit: type=1326 audit(2000000078.590:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 944.736969][ T30] audit: type=1326 audit(2000000078.590:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 944.737011][ T30] audit: type=1326 audit(2000000078.590:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 944.926130][ T30] audit: type=1326 audit(2000000078.710:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 944.949864][ T30] audit: type=1326 audit(2000000078.710:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 945.502535][ T30] audit: type=1326 audit(2000000078.710:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab70d8e929 code=0x7ffc0000 [ 946.029780][T13463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.202402][T13473] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 947.095602][T13475] gretap1: entered allmulticast mode [ 947.399497][ T5874] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 947.430614][T13484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 947.587374][ T5874] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 947.606073][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.738578][ T5874] usb 6-1: config 0 descriptor?? [ 947.758217][ T5874] gspca_main: mars-2.14.0 probing 093a:050f [ 947.843316][T13489] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 948.450799][ T5874] usb 6-1: USB disconnect, device number 23 [ 948.864373][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'. [ 948.927913][T13500] syz.0.1721 (13500): drop_caches: 2 [ 949.099373][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 949.113533][ T30] audit: type=1326 audit(2000000083.750:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.258138][ T30] audit: type=1326 audit(2000000083.760:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.283734][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 949.302536][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 949.312171][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 949.319919][ T30] audit: type=1326 audit(2000000083.760:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.343724][ T30] audit: type=1326 audit(2000000083.760:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.367476][ T30] audit: type=1326 audit(2000000083.760:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.391228][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 949.398312][ T30] audit: type=1326 audit(2000000083.760:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.423126][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.468034][ T30] audit: type=1326 audit(2000000083.760:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.492094][ T30] audit: type=1326 audit(2000000083.760:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.515863][ T30] audit: type=1326 audit(2000000083.760:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 949.540795][ T30] audit: type=1326 audit(2000000083.760:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13497 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7918e929 code=0x7ffc0000 [ 950.086571][T13502] Failed to initialize the IGMP autojoin socket (err -2) [ 951.631577][T13528] overlayfs: missing 'lowerdir' [ 951.948290][ T51] Bluetooth: hci2: command tx timeout [ 952.839458][ C1] ------------[ cut here ]------------ [ 952.845193][ C1] refcount_t: addition on 0; use-after-free. [ 952.851595][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0x1ca/0x210 [ 952.860748][ C1] Modules linked in: [ 952.864805][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 952.876090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.886148][ C1] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 952.892314][ C1] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 c0 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 952.911910][ C1] RSP: 0018:ffffc90000a088b0 EFLAGS: 00010286 [ 952.917955][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 952.925913][ C1] RDX: ffff88801e2d2440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 952.933881][ C1] RBP: ffff88807c8521ec R08: 0000000000000001 R09: 0000000000000000 [ 952.941835][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807c8521ec [ 952.949793][ C1] R13: ffff88807c852080 R14: ffff888034f53b00 R15: ffff888055636600 [ 952.957740][ C1] FS: 0000000000000000(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000 [ 952.966657][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.973230][ C1] CR2: 0000200000120030 CR3: 000000003b5f8000 CR4: 00000000003526f0 [ 952.981200][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 952.989148][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 952.997104][ C1] Call Trace: [ 953.000370][ C1] [ 953.003191][ C1] tipc_crypto_xmit+0x20c1/0x2550 [ 953.008203][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 953.013569][ C1] ? lock_acquire+0x179/0x350 [ 953.018226][ C1] ? find_held_lock+0x2b/0x80 [ 953.022890][ C1] ? net_generic+0xea/0x2a0 [ 953.027374][ C1] tipc_bearer_xmit_skb+0x15f/0x430 [ 953.032560][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 953.038256][ C1] ? mark_held_locks+0x49/0x80 [ 953.043009][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 953.048274][ C1] tipc_disc_timeout+0x5b2/0x850 [ 953.053200][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 953.058641][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 953.064094][ C1] call_timer_fn+0x19a/0x620 [ 953.068665][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 953.073768][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.078509][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 953.083969][ C1] __run_timers+0x6ef/0x960 [ 953.088470][ C1] ? __pfx___run_timers+0x10/0x10 [ 953.093503][ C1] run_timer_base+0x114/0x190 [ 953.098169][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 953.103392][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.108139][ C1] run_timer_softirq+0x1a/0x40 [ 953.112899][ C1] handle_softirqs+0x219/0x8e0 [ 953.117643][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 953.122919][ C1] __irq_exit_rcu+0x109/0x170 [ 953.127575][ C1] irq_exit_rcu+0x9/0x30 [ 953.131807][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 953.137423][ C1] [ 953.140343][ C1] [ 953.143251][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 953.149206][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 953.154830][ C1] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 953.174433][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 953.180489][ C1] RAX: 0000000005dfcb53 RBX: 0000000000000001 RCX: ffffffff8b7f1c99 [ 953.188446][ C1] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157060 [ 953.196416][ C1] RBP: ffffed1003c5a488 R08: 0000000000000001 R09: ffffed10170a6645 [ 953.204375][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 953.212335][ C1] R13: ffff88801e2d2440 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 953.220300][ C1] ? ct_kernel_exit+0x139/0x190 [ 953.225147][ C1] default_idle+0x13/0x20 [ 953.229471][ C1] default_idle_call+0x6d/0xb0 [ 953.234231][ C1] do_idle+0x391/0x510 [ 953.238285][ C1] ? __pfx_do_idle+0x10/0x10 [ 953.242880][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 953.248062][ C1] cpu_startup_entry+0x4f/0x60 [ 953.252828][ C1] start_secondary+0x21d/0x2b0 [ 953.257575][ C1] ? __pfx_start_secondary+0x10/0x10 [ 953.262851][ C1] common_startup_64+0x13e/0x148 [ 953.267782][ C1] [ 953.270792][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 953.278045][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 953.289304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 953.299332][ C1] Call Trace: [ 953.302589][ C1] [ 953.305410][ C1] dump_stack_lvl+0x3d/0x1f0 [ 953.309991][ C1] panic+0x71c/0x800 [ 953.313864][ C1] ? __pfx_panic+0x10/0x10 [ 953.318262][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 953.323442][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 953.328534][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 953.334071][ C1] check_panic_on_warn+0xab/0xb0 [ 953.338993][ C1] __warn+0xf6/0x3c0 [ 953.342875][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 953.347880][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 953.353415][ C1] report_bug+0x3c3/0x580 [ 953.357742][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 953.363271][ C1] handle_bug+0x184/0x210 [ 953.367581][ C1] exc_invalid_op+0x17/0x50 [ 953.372067][ C1] asm_exc_invalid_op+0x1a/0x20 [ 953.376891][ C1] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 953.383026][ C1] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 c0 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 953.402623][ C1] RSP: 0018:ffffc90000a088b0 EFLAGS: 00010286 [ 953.408666][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 953.416614][ C1] RDX: ffff88801e2d2440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 953.424561][ C1] RBP: ffff88807c8521ec R08: 0000000000000001 R09: 0000000000000000 [ 953.432515][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807c8521ec [ 953.440463][ C1] R13: ffff88807c852080 R14: ffff888034f53b00 R15: ffff888055636600 [ 953.448412][ C1] ? __warn_printk+0x198/0x350 [ 953.453155][ C1] ? __warn_printk+0x1a5/0x350 [ 953.457899][ C1] tipc_crypto_xmit+0x20c1/0x2550 [ 953.462909][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 953.468282][ C1] ? lock_acquire+0x179/0x350 [ 953.472966][ C1] ? find_held_lock+0x2b/0x80 [ 953.477618][ C1] ? net_generic+0xea/0x2a0 [ 953.482112][ C1] tipc_bearer_xmit_skb+0x15f/0x430 [ 953.487286][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 953.492982][ C1] ? mark_held_locks+0x49/0x80 [ 953.497722][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 953.502983][ C1] tipc_disc_timeout+0x5b2/0x850 [ 953.507893][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 953.513333][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 953.518774][ C1] call_timer_fn+0x19a/0x620 [ 953.523364][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 953.528455][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.533194][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 953.538625][ C1] __run_timers+0x6ef/0x960 [ 953.543119][ C1] ? __pfx___run_timers+0x10/0x10 [ 953.548146][ C1] run_timer_base+0x114/0x190 [ 953.552801][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 953.557974][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.562718][ C1] run_timer_softirq+0x1a/0x40 [ 953.567459][ C1] handle_softirqs+0x219/0x8e0 [ 953.572202][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 953.577465][ C1] __irq_exit_rcu+0x109/0x170 [ 953.582118][ C1] irq_exit_rcu+0x9/0x30 [ 953.586337][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 953.591947][ C1] [ 953.594863][ C1] [ 953.597769][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 953.603724][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 953.609331][ C1] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 953.628912][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 953.634967][ C1] RAX: 0000000005dfcb53 RBX: 0000000000000001 RCX: ffffffff8b7f1c99 [ 953.642913][ C1] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157060 [ 953.650858][ C1] RBP: ffffed1003c5a488 R08: 0000000000000001 R09: ffffed10170a6645 [ 953.658804][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 953.666747][ C1] R13: ffff88801e2d2440 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 953.674700][ C1] ? ct_kernel_exit+0x139/0x190 [ 953.679531][ C1] default_idle+0x13/0x20 [ 953.683837][ C1] default_idle_call+0x6d/0xb0 [ 953.688589][ C1] do_idle+0x391/0x510 [ 953.692637][ C1] ? __pfx_do_idle+0x10/0x10 [ 953.697200][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 953.702378][ C1] cpu_startup_entry+0x4f/0x60 [ 953.707118][ C1] start_secondary+0x21d/0x2b0 [ 953.711859][ C1] ? __pfx_start_secondary+0x10/0x10 [ 953.717120][ C1] common_startup_64+0x13e/0x148 [ 953.722037][ C1] [ 953.725225][ C1] Kernel Offset: disabled [ 953.729527][ C1] Rebooting in 86400 seconds..