last executing test programs: 44m34.718959787s ago: executing program 32 (id=517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29m57.151819737s ago: executing program 33 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0x63, 0x5, 0x2, 0x1}) 26m46.124840522s ago: executing program 34 (id=2326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 19m39.911569444s ago: executing program 35 (id=2861): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x240400c2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r4, 0xe, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x2, 0xfffffff9, {{0x6, 0x4, 0x1, 0x27, 0x18, 0x68, 0x0, 0x25, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@end]}}}}}) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x18, 0x1100) 19m11.074047856s ago: executing program 5 (id=2887): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000010, 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)) 19m10.851716611s ago: executing program 5 (id=2895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x207}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 19m10.132032518s ago: executing program 5 (id=2898): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x7}, 0x14) 19m9.761597892s ago: executing program 5 (id=2899): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000010, 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)) 19m9.540387186s ago: executing program 5 (id=2901): r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}]}) 18m23.999275823s ago: executing program 36 (id=2901): r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}]}) 17m6.042005384s ago: executing program 6 (id=2964): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) 17m5.923730072s ago: executing program 6 (id=2965): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}}, 0x90) 17m5.442613433s ago: executing program 6 (id=2966): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fdatasync(r1) 17m2.698688602s ago: executing program 6 (id=2970): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000404}, 0x8020) 17m0.850290732s ago: executing program 6 (id=2972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 16m59.570352745s ago: executing program 6 (id=2973): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="18011000786c6c2500000000002020207b1a00fe00000000bfa101000000010027010000f8ffffffb702000008000000b70300000300000085000000ae00000095"], &(0x7f0000000680)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x10, 0x1d, 0x100, &(0x7f00000000c0)="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"}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800080, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 16m13.57774085s ago: executing program 37 (id=2973): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="18011000786c6c2500000000002020207b1a00fe00000000bfa101000000010027010000f8ffffffb702000008000000b70300000300000085000000ae00000095"], &(0x7f0000000680)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x10, 0x1d, 0x100, &(0x7f00000000c0)="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"}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800080, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 13m31.672002201s ago: executing program 3 (id=3093): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) epoll_create(0x100806) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 13m28.786029029s ago: executing program 3 (id=3094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000240)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '_#&'}}, 0x2c) 13m17.891772386s ago: executing program 7 (id=3099): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) inotify_init1(0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r0], 0x0) 13m17.731198897s ago: executing program 7 (id=3100): socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x2, 0x300, 0x4, 0x0, 0xf, 0x9}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xd7317ca9cb2905ec, 0x6, "16614c09144b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x19, 0x2, "a504"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r3, 0x406, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r6, 0x400, 0x70bd26, 0x5, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x10044000) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) 13m17.510943251s ago: executing program 7 (id=3101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000540)) 13m14.369385365s ago: executing program 3 (id=3102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005880)={0x2020}, 0x2020) 13m11.843117399s ago: executing program 3 (id=3103): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1f1, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x81, 0x3, 0x4, {0x7, 0x25, 0x1, 0x100, 0x6, 0x61a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x7, 0x1, {0x7, 0x25, 0x1, 0x2, 0x7, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x5, @string={0x5, 0x3, "2a8372"}}}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 13m11.711676047s ago: executing program 3 (id=3104): r0 = io_uring_setup(0x9de, &(0x7f0000000040)={0x0, 0x2ad4, 0x800, 0x0, 0xfe}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000c00)={0x6, 0x0, &(0x7f0000000b80)=[{0x0}], 0x0, 0x1}, 0x20) 13m11.612932884s ago: executing program 3 (id=3105): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000280)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 13m6.771467818s ago: executing program 7 (id=3106): munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 13m6.630068208s ago: executing program 7 (id=3107): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="8520000009e4"], &(0x7f0000000000)='GPL\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x22}, 0x94) 13m6.512944985s ago: executing program 7 (id=3108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8000, 0x0) 12m26.469142475s ago: executing program 38 (id=3105): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000280)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 12m21.291656981s ago: executing program 39 (id=3108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8000, 0x0) 11m57.785634787s ago: executing program 8 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f0000000000)=0x2, 0x9, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x0, 0x0) 11m54.714563176s ago: executing program 8 (id=3117): rt_sigprocmask(0x0, &(0x7f0000000080)={[0x100]}, &(0x7f0000000200), 0x8) 11m54.101823066s ago: executing program 8 (id=3118): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 11m53.381974343s ago: executing program 8 (id=3119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = accept(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x160, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x1, 0x1, [0x5, 0x6, 0x7, 0xb, 0x1, 0x9, 0x7, 0x8, 0x9, 0x6, 0x6, 0x0, 0x4, 0x2, 0x9c, 0x8], 0xc}}, @common=@dst={{0x48}, {0x8, 0x0, 0x0, [0xfff, 0x80, 0x0, 0x9, 0x800, 0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x9, 0x1, 0x8, 0x4, 0x101], 0xd}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb, 0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x6, 0x1}, {0x1, 0x3, 0x4}, 0x8, 0xfffffffa}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'geneve0\x00', 'lo\x00', {}, {}, 0x33, 0x4d, 0x4, 0x1}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x7, 0x1, [0x7fff, 0xfffd, 0x2, 0x719, 0x80, 0x0, 0x9, 0x5, 0xff0a, 0xe8d, 0x7, 0xe6f8, 0x1ff, 0x9, 0xa, 0x4], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0xd, 0x5, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x42}, 0x51, r6}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11m50.371003698s ago: executing program 8 (id=3120): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x980, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x2801, 0x0) 11m50.081574507s ago: executing program 8 (id=3121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 11m4.174416378s ago: executing program 40 (id=3121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 10m22.884200238s ago: executing program 0 (id=3164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x160, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x1, 0x1, [0x5, 0x6, 0x7, 0xb, 0x1, 0x9, 0x7, 0x8, 0x9, 0x6, 0x6, 0x0, 0x4, 0x2, 0x9c, 0x8], 0xc}}, @common=@dst={{0x48}, {0x8, 0x0, 0x0, [0xfff, 0x80, 0x0, 0x9, 0x800, 0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x9, 0x1, 0x8, 0x4, 0x101], 0xd}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb, 0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x6, 0x1}, {0x1, 0x3, 0x4}, 0x8, 0xfffffffa}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'geneve0\x00', 'lo\x00', {}, {}, 0x33, 0x4d, 0x4, 0x1}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x7, 0x1, [0x7fff, 0xfffd, 0x2, 0x719, 0x80, 0x0, 0x9, 0x5, 0xff0a, 0xe8d, 0x7, 0xe6f8, 0x1ff, 0x9, 0xa, 0x4], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0xd, 0x5, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}]}}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x42}, 0x51, r5}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10m19.501995788s ago: executing program 0 (id=3167): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 10m16.213111981s ago: executing program 0 (id=3170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r4, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/108, 0x6c}}], 0x1, 0x0, 0x0) 9m48.250767827s ago: executing program 0 (id=3171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x160, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x1, 0x1, [0x5, 0x6, 0x7, 0xb, 0x1, 0x9, 0x7, 0x8, 0x9, 0x6, 0x6, 0x0, 0x4, 0x2, 0x9c, 0x8], 0xc}}, @common=@dst={{0x48}, {0x8, 0x0, 0x0, [0xfff, 0x80, 0x0, 0x9, 0x800, 0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x9, 0x1, 0x8, 0x4, 0x101], 0xd}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb, 0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x6, 0x1}, {0x1, 0x3, 0x4}, 0x8, 0xfffffffa}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'geneve0\x00', 'lo\x00', {}, {}, 0x33, 0x4d, 0x4, 0x1}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x7, 0x1, [0x7fff, 0xfffd, 0x2, 0x719, 0x80, 0x0, 0x9, 0x5, 0xff0a, 0xe8d, 0x7, 0xe6f8, 0x1ff, 0x9, 0xa, 0x4], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0xd, 0x5, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}]}}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x42}, 0x51, r5}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9m45.544570122s ago: executing program 0 (id=3173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x0) 9m45.001593338s ago: executing program 0 (id=3174): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x2000000000006) fcntl$getown(r5, 0x9) lseek(r5, 0x8, 0x4) 8m59.602815975s ago: executing program 41 (id=3174): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x2000000000006) fcntl$getown(r5, 0x9) lseek(r5, 0x8, 0x4) 7m59.271443162s ago: executing program 9 (id=3200): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000027c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x2) 7m58.68868447s ago: executing program 9 (id=3201): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/103, 0x67}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$cgroup_pid(r4, 0x0, 0x0) 7m45.562329072s ago: executing program 9 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x68, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x54, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0x774}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40001, @rand_addr=' \x01\x00', 0x9}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 7m45.100858712s ago: executing program 9 (id=3207): socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24040801, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 7m44.217577179s ago: executing program 2 (id=3208): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x8) 7m43.891560401s ago: executing program 2 (id=3209): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) close(0x3) 7m43.703721323s ago: executing program 2 (id=3210): socket(0x2, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000001580)=[{{&(0x7f0000000300)=@generic={0x1e, "dfb6b86803bfbd40c4604d04ca34cb0c41a93d3ec38474d3520f1bedf2f0bc62a0760e993d9188c0fb37f42a13de79254eb993ac8cd7ee450169dbe9aedbb8e3b34f1f7cb49299ff6feff6128559168e02ed7b2b89c22bfe2ca1541b45cbe7868f058e7f967ec42deb83a7e48b85f214650cfd0acf9fd82c0d5e4d7080f1"}, 0x80, 0x0}}], 0x1, 0x9200000000040041) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 7m43.193735896s ago: executing program 2 (id=3211): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0xefe, 0x2, 0xffffffff}}}}}, 0x0) 7m43.047244935s ago: executing program 2 (id=3212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x65}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e86493e0aa"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "f6"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "de4c2dd4"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "596c2051e8784dec2f94c0b32b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)={0x20000001}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '_#&'}}, 0x2c) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x20d}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 7m42.422807206s ago: executing program 9 (id=3213): socket(0x10, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 7m40.653207521s ago: executing program 9 (id=3214): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @empty=0xe0000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x5, 0xfff1}, {0xfff3, 0xfff3}}}, 0x24}}, 0x40084) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) getsockopt$inet_opts(r7, 0x0, 0x9, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'veth1_vlan\x00', {0x4}, 0xd}) 7m28.323848931s ago: executing program 2 (id=3215): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x309041, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x7, 0xf427, 0x2280, r1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x2, 0xa}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 6m55.052200012s ago: executing program 42 (id=3214): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @empty=0xe0000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x5, 0xfff1}, {0xfff3, 0xfff3}}}, 0x24}}, 0x40084) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) getsockopt$inet_opts(r7, 0x0, 0x9, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'veth1_vlan\x00', {0x4}, 0xd}) 6m42.877566662s ago: executing program 43 (id=3215): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x309041, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x7, 0xf427, 0x2280, r1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x2, 0xa}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 10.872079793s ago: executing program 4 (id=3519): unshare(0x22020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) 10.711158843s ago: executing program 4 (id=3520): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000080)=""/195, 0xc3, 0x591f) 10.569808803s ago: executing program 4 (id=3521): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b8bae4403d0fa368182c010203010902120001000000000904070000ffffff"], 0x0) 10.441363421s ago: executing program 4 (id=3522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304fcfffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500140012800b0001006272696467650000040002800500100002000000050011"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4044080) 9.959802193s ago: executing program 4 (id=3523): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r4, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)) getpid() 5.894183941s ago: executing program 1 (id=3532): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 5.811354857s ago: executing program 1 (id=3533): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) 3.991591196s ago: executing program 1 (id=3534): socket$packet(0x11, 0x2, 0x300) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.78163647s ago: executing program 1 (id=3535): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) 3.661769168s ago: executing program 1 (id=3536): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) 3.530216367s ago: executing program 1 (id=3537): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8001, 0x80000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) r1 = syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f202", @ANYRES64], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000005c0)={0x34, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x10}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 0s ago: executing program 4 (id=3538): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x8, 0xd4, 0x3, 0x0, 0x0, 0xd5f2, 0x20, 0xf7fffff5, 0xffffeadb, 0xffffffff, 0x3c, 0x8, 0x4, 0x8000000, 0x9]}) kernel console output (not intermixed with test programs): t_register_driver returned -16 [ 895.752168][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.758019][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.428250][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.429325][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.598416][ T4189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 896.816056][ T4189] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 896.817232][ T4189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 896.823403][ T4189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 896.826911][ T4189] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 896.829537][ T4189] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.832784][ T4189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.849074][ T4189] usb 2-1: config 0 descriptor?? [ 897.008820][ T9057] fuse: Unknown parameter 'user_i00000000000000000000' [ 897.358671][ T4189] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 897.385905][ T4189] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 898.707924][ T9072] fuse: Unknown parameter 'group_id00000000000000000000' [ 899.108979][ T9071] usb 2-1: string descriptor 0 read error: -71 [ 899.504093][ T9077] fuse: Bad value for 'fd' [ 900.190791][ T8949] usb 2-1: USB disconnect, device number 3 [ 900.232105][ T9092] fuse: Unknown parameter 'fd0x0000000000000003' [ 900.323525][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.327009][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.505988][ T8949] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 900.546249][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.549405][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.662311][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.666651][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.669033][ T8949] usb 2-1: Using ep0 maxpacket: 32 [ 900.679883][ T8949] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 900.680540][ T8949] usb 2-1: config 0 has no interface number 0 [ 900.681130][ T8949] usb 2-1: config 0 interface 184 has no altsetting 0 [ 900.696583][ T8949] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 900.696979][ T8949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.697188][ T8949] usb 2-1: Product: syz [ 900.697241][ T8949] usb 2-1: Manufacturer: syz [ 900.697271][ T8949] usb 2-1: SerialNumber: syz [ 900.704226][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.706552][ T8949] usb 2-1: config 0 descriptor?? [ 900.711704][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.832431][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.839034][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.029891][ T9112] fuse: Bad value for 'fd' [ 901.187477][ T9114] fuse: Unknown parameter 'fd0x0000000000000003' [ 901.443973][ T8949] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 901.445112][ T8949] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 901.648994][ T8949] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 901.649707][ T8949] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 901.650226][ T8949] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 901.650553][ T8949] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 901.651341][ T8949] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 901.828660][ T9123] fuse: Bad value for 'fd' [ 901.948702][ T9125] fuse: Unknown parameter 'fd0x0000000000000003' [ 902.076054][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.079036][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.937835][ T9138] fuse: Bad value for 'fd' [ 914.779589][ T93] usb 2-1: USB disconnect, device number 4 [ 916.218585][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.219553][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.328082][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.330399][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.451323][ T9189] fuse: Unknown parameter '0x0000000000000003' [ 916.577092][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.578096][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.583874][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.589576][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.597420][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.598367][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.609713][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.610923][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.822928][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.827764][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.672008][ T9212] fuse: Unknown parameter 'fd0x0000000000000003' [ 918.618094][ T9226] fuse: Unknown parameter 'fd0x0000000000000003' [ 918.801359][ T28] audit: type=1400 audit(918.690:573): avc: denied { map } for pid=9229 comm="syz.2.1617" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 918.830574][ T28] audit: type=1400 audit(918.710:574): avc: denied { call } for pid=9229 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 919.345716][ T93] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 919.407776][ T9242] binder_alloc: 9229: binder_alloc_buf, no vma [ 919.572487][ T93] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 919.572865][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.573340][ T93] usb 2-1: Product: syz [ 919.573397][ T93] usb 2-1: Manufacturer: syz [ 919.573452][ T93] usb 2-1: SerialNumber: syz [ 919.579143][ T93] usb 2-1: config 0 descriptor?? [ 921.647228][ T9249] fuse: Unknown parameter 'fd0x0000000000000003' [ 922.118201][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.120745][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.922136][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.925557][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.821391][ T28] audit: type=1400 audit(925.710:575): avc: denied { associate } for pid=9280 comm="syz.2.1630" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 928.709150][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.713786][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.734083][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.740050][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.750037][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.753447][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.763867][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.767514][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.981380][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.983431][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.288811][ T9306] syzkaller0: entered promiscuous mode [ 929.289763][ T9306] syzkaller0: entered allmulticast mode [ 929.491084][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.491931][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.851472][ T3694] usb 2-1: USB disconnect, device number 5 [ 930.021451][ T9330] fuse: Invalid rootmode [ 930.083117][ T9331] syzkaller0: entered promiscuous mode [ 930.083915][ T9331] syzkaller0: entered allmulticast mode [ 930.702472][ T9344] binder_alloc: 9343: binder_alloc_buf, no vma [ 930.791103][ T9346] fuse: Invalid rootmode [ 931.096338][ T8958] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 931.256183][ T8958] usb 2-1: Using ep0 maxpacket: 32 [ 931.315330][ T8958] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 931.315602][ T8958] usb 2-1: config 0 has no interface number 0 [ 931.315832][ T8958] usb 2-1: config 0 interface 89 has no altsetting 0 [ 931.333926][ T8958] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 931.335032][ T8958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.337178][ T8958] usb 2-1: Product: syz [ 931.338922][ T8958] usb 2-1: Manufacturer: syz [ 931.341279][ T8958] usb 2-1: SerialNumber: syz [ 931.346210][ T8958] usb 2-1: config 0 descriptor?? [ 933.258229][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.260425][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.579200][ T3694] usb 2-1: USB disconnect, device number 6 [ 942.844131][ T9382] fuse: Bad value for 'rootmode' [ 944.297024][ T93] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 944.518685][ T93] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 944.520591][ T93] usb 2-1: config 0 has no interface number 0 [ 944.564239][ T93] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 944.566385][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.569747][ T93] usb 2-1: Product: syz [ 944.576928][ T93] usb 2-1: Manufacturer: syz [ 944.579899][ T93] usb 2-1: SerialNumber: syz [ 944.590928][ T93] usb 2-1: config 0 descriptor?? [ 944.685740][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.687132][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.209907][ T9412] fuse: Bad value for 'fd' [ 949.380628][ T28] audit: type=1400 audit(949.270:576): avc: denied { create } for pid=9413 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 952.596981][ T9426] fuse: Unknown parameter 'user_i00000000000000000000' [ 953.120533][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.125986][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.938608][ T9441] fuse: Unknown parameter 'user_i00000000000000000000' [ 956.464195][ T9447] fuse: Unknown parameter 'fd00000000000000000003' [ 958.559625][ T8958] usb 2-1: USB disconnect, device number 7 [ 959.065999][ T8958] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 959.225742][ T8958] usb 2-1: Using ep0 maxpacket: 32 [ 959.245133][ T8958] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 959.245550][ T8958] usb 2-1: config 0 has no interface number 0 [ 959.246179][ T8958] usb 2-1: config 0 interface 12 has no altsetting 0 [ 959.262835][ T8958] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 959.263134][ T8958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.266399][ T8958] usb 2-1: Product: syz [ 959.266686][ T8958] usb 2-1: Manufacturer: syz [ 959.266872][ T8958] usb 2-1: SerialNumber: syz [ 959.276464][ T8958] usb 2-1: config 0 descriptor?? [ 960.825160][ T8958] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 960.825714][ T8958] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 960.825771][ T8958] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 960.826182][ T8958] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 960.831826][ T8958] usb 2-1: USB disconnect, device number 8 [ 961.297008][ T8958] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 961.457718][ T8958] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 961.458254][ T8958] usb 2-1: config 0 has no interface number 0 [ 961.473291][ T8958] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 961.473656][ T8958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.473972][ T8958] usb 2-1: Product: syz [ 961.474026][ T8958] usb 2-1: Manufacturer: syz [ 961.474056][ T8958] usb 2-1: SerialNumber: syz [ 961.482103][ T8958] usb 2-1: config 0 descriptor?? [ 963.981341][ T9492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.986977][ T9492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.803204][ T9492] hsr_slave_0: entered promiscuous mode [ 964.808619][ T9492] hsr_slave_1: entered promiscuous mode [ 964.811124][ T9492] debugfs: 'hsr0' already exists in 'hsr' [ 964.811669][ T9492] Cannot create hsr debugfs directory [ 965.243292][ T9492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.313837][ T9492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.350336][ T9492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.420259][ T9492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.559817][ T9492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 965.570576][ T9492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 965.581511][ T9492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 965.591737][ T9492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 966.436934][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.492022][ T9492] veth0_vlan: entered promiscuous mode [ 969.519751][ T9492] veth1_vlan: entered promiscuous mode [ 969.612697][ T9492] veth0_macvtap: entered promiscuous mode [ 969.627326][ T9492] veth1_macvtap: entered promiscuous mode [ 969.725285][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.729310][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.736379][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.738039][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.884067][ T28] audit: type=1400 audit(969.770:577): avc: denied { unmount } for pid=9492 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 971.520713][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.521674][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.227705][ T5008] usb 2-1: USB disconnect, device number 9 [ 975.742025][ C1] vcan0: j1939_tp_rxtimer: 0x85e12700: rx timeout, send abort [ 975.750047][ T28] audit: type=1400 audit(975.640:578): avc: denied { read } for pid=2896 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 975.752883][ T28] audit: type=1400 audit(975.640:579): avc: denied { search } for pid=2896 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.754600][ T28] audit: type=1400 audit(975.640:580): avc: denied { search } for pid=2896 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.760684][ T28] audit: type=1400 audit(975.650:581): avc: denied { add_name } for pid=2896 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.765320][ T28] audit: type=1400 audit(975.650:582): avc: denied { create } for pid=2896 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 975.765685][ T28] audit: type=1400 audit(975.650:583): avc: denied { append open } for pid=2896 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 975.767864][ T28] audit: type=1400 audit(975.660:584): avc: denied { getattr } for pid=2896 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 976.243023][ C1] vcan0: j1939_tp_rxtimer: 0x85e12700: abort rx timeout. Force session deactivation [ 976.245360][ C1] vcan0: j1939_tp_rxtimer: 0x85ee7c00: rx timeout, send abort [ 976.745645][ C1] vcan0: j1939_tp_rxtimer: 0x85ee7c00: abort rx timeout. Force session deactivation [ 977.764084][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.767215][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.212360][ T28] audit: type=1400 audit(978.100:585): avc: denied { create } for pid=9879 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 978.220459][ T28] audit: type=1400 audit(978.110:586): avc: denied { bind } for pid=9879 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 987.240342][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 987.954021][ T9929] geneve2: entered promiscuous mode [ 987.965285][ T9929] geneve2: entered allmulticast mode [ 991.758930][ T9949] fuse: Unknown parameter 'fd0x0000000000000003' [ 995.202234][ T9956] syzkaller0: entered promiscuous mode [ 995.203475][ T9956] syzkaller0: entered allmulticast mode [ 998.826290][ T9972] fuse: Unknown parameter 'fd0x0000000000000003' [ 998.936357][ T28] audit: type=1400 audit(998.830:587): avc: denied { write } for pid=9973 comm="syz.1.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1003.621140][ T28] audit: type=1400 audit(1003.510:588): avc: denied { create } for pid=10021 comm="syz.2.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1005.945783][ T28] audit: type=1400 audit(1005.830:589): avc: denied { setopt } for pid=10027 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1006.189148][ T28] audit: type=1400 audit(1006.080:590): avc: denied { create } for pid=10029 comm="syz.2.1743" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1006.228966][ T28] audit: type=1400 audit(1006.120:591): avc: denied { mounton } for pid=10029 comm="syz.2.1743" path="/41/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1006.378209][T10030] fuse: Bad value for 'fd' [ 1006.762297][ T28] audit: type=1400 audit(1006.650:592): avc: denied { unlink } for pid=9492 comm="syz-executor" name="file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1014.337115][T10047] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1014.566708][T10059] fuse: Unknown parameter 'grou00000000000000000000' [ 1017.186124][T10070] fuse: Unknown parameter 'grou00000000000000000000' [ 1019.696358][T10088] fuse: Unknown parameter 'grou00000000000000000000' [ 1020.958810][ T28] audit: type=1400 audit(1020.850:593): avc: denied { getopt } for pid=10094 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1021.646346][T10099] fuse: Unknown parameter 'group_i00000000000000000000' [ 1021.858399][T10101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1768'. [ 1021.859548][T10101] nbd: socks must be embedded in a SOCK_ITEM attr [ 1022.301195][ T28] audit: type=1400 audit(1022.190:594): avc: denied { write } for pid=10102 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1022.301693][ T28] audit: type=1400 audit(1022.190:595): avc: denied { nlmsg_write } for pid=10102 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1023.039751][T10105] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1028.379555][T10129] fuse: Bad value for 'fd' [ 1033.247312][ T28] audit: type=1400 audit(1033.140:596): avc: denied { create } for pid=10157 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1033.252765][ T28] audit: type=1400 audit(1033.140:597): avc: denied { write } for pid=10157 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1035.577878][ T28] audit: type=1400 audit(1035.470:598): avc: denied { create } for pid=10170 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1038.732633][ T28] audit: type=1400 audit(1038.620:599): avc: denied { connect } for pid=10179 comm="syz.2.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1039.885721][T10185] fuse: Bad value for 'fd' [ 1042.000450][T10191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1804'. [ 1042.005760][T10191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1804'. [ 1042.017084][T10191] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1042.915801][ T28] audit: type=1400 audit(1042.800:600): avc: denied { ioctl } for pid=10192 comm="syz.2.1805" path="socket:[17720]" dev="sockfs" ino=17720 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1043.470164][T10195] fuse: Bad value for 'fd' [ 1044.294269][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 1046.045575][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 1060.073825][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1064.126286][T10243] netlink: 'syz.1.1821': attribute type 3 has an invalid length. [ 1064.201787][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 1064.294058][ T28] audit: type=1400 audit(1064.180:601): avc: denied { write } for pid=10242 comm="syz.1.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1065.181816][ T28] audit: type=1400 audit(1065.070:602): avc: denied { ioctl } for pid=10242 comm="syz.1.1821" path="socket:[17810]" dev="sockfs" ino=17810 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1066.533525][T10263] syzkaller1: entered promiscuous mode [ 1066.534050][T10263] syzkaller1: entered allmulticast mode [ 1066.607603][ T28] audit: type=1400 audit(1066.500:603): avc: denied { create } for pid=10260 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1067.137263][ T28] audit: type=1400 audit(1067.030:604): avc: denied { write } for pid=10274 comm="syz.2.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1068.602086][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 1068.727386][T10288] hsr_slave_1 (unregistering): left promiscuous mode [ 1070.548196][T10315] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 1070.706460][T10315] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1070.707671][T10315] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1070.899796][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1071.557406][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1071.576824][T10315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.745733][T10315] macvlan2: entered promiscuous mode [ 1071.746339][T10315] macvlan2: entered allmulticast mode [ 1071.770927][T10315] bond1: entered promiscuous mode [ 1071.808191][T10315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1071.885615][T10315] bond1: left promiscuous mode [ 1079.054627][T10382] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 1082.089346][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'. [ 1082.915924][ T28] audit: type=1400 audit(1082.800:605): avc: denied { map } for pid=10411 comm="syz.1.1860" path="socket:[17989]" dev="sockfs" ino=17989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1083.967105][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 1085.072966][T10424] fuse: Unknown parameter '00000000000000000000' [ 1088.197110][T10442] fuse: Unknown parameter '00000000000000000000' [ 1090.443956][T10457] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1875'. [ 1090.467475][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 1091.022700][T10459] fuse: Unknown parameter 'user00000000000000000000' [ 1093.454032][ T28] audit: type=1400 audit(1093.340:606): avc: denied { bind } for pid=10476 comm="syz.1.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1093.479822][ T28] audit: type=1400 audit(1093.370:607): avc: denied { listen } for pid=10476 comm="syz.1.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1093.521795][ T28] audit: type=1400 audit(1093.410:608): avc: denied { accept } for pid=10476 comm="syz.1.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1093.920465][T10479] fuse: Unknown parameter 'user00000000000000000000' [ 1097.948704][ T28] audit: type=1400 audit(1097.840:609): avc: denied { create } for pid=10489 comm="syz.2.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1097.990987][ T28] audit: type=1400 audit(1097.880:610): avc: denied { getopt } for pid=10489 comm="syz.2.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1098.684065][T10492] fuse: Unknown parameter 'user00000000000000000000' [ 1112.155827][T10505] fuse: Unknown parameter '0x0000000000000003' [ 1113.053257][T10510] fuse: Unknown parameter 'user_id00000000000000000000' [ 1113.190601][ T28] audit: type=1400 audit(1113.080:611): avc: denied { bind } for pid=10513 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1113.193159][ T28] audit: type=1400 audit(1113.080:612): avc: denied { name_bind } for pid=10513 comm="syz.2.1895" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1113.197491][ T28] audit: type=1400 audit(1113.080:613): avc: denied { node_bind } for pid=10513 comm="syz.2.1895" saddr=fe80::3c src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1114.178998][T10537] fuse: Bad value for 'fd' [ 1114.370129][T10525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.467836][T10525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.534084][T10525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.621375][T10525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.810168][ T67] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.876841][ T67] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.918630][ T67] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.939787][ T67] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.118432][T10563] fuse: Bad value for 'fd' [ 1115.626973][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 1116.561632][T10573] fuse: Bad value for 'fd' [ 1117.231691][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 1117.242156][T10577] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 1117.326827][T10579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10579 comm=syz.2.1914 [ 1117.995969][T10585] fuse: Unknown parameter '0x0000000000000003' [ 1118.115623][ T28] audit: type=1400 audit(1117.990:614): avc: denied { create } for pid=10586 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1118.120111][ T28] audit: type=1400 audit(1118.010:615): avc: denied { bind } for pid=10586 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1118.771033][ T28] audit: type=1400 audit(1118.660:616): avc: denied { ioctl } for pid=10589 comm="syz.1.1919" path="socket:[18496]" dev="sockfs" ino=18496 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1119.133034][ T28] audit: type=1400 audit(1119.020:617): avc: denied { getopt } for pid=10593 comm="syz.1.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1119.448305][ T28] audit: type=1400 audit(1119.340:618): avc: denied { write } for pid=10586 comm="syz.2.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1120.262415][T10607] fuse: Unknown parameter '0x0000000000000003' [ 1120.408155][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 1122.117215][ T28] audit: type=1400 audit(1122.010:619): avc: denied { write } for pid=10617 comm="syz.1.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1122.162398][T10619] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 1122.569742][T10619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1122.594424][T10619] bond2: (slave bond3): making interface the new active one [ 1122.609949][T10619] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1122.967699][T10619] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1122.973096][T10619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1929'. [ 1123.098056][T10619] vlan2: entered promiscuous mode [ 1123.099951][T10619] bond2: entered promiscuous mode [ 1123.101178][T10619] bond3: entered promiscuous mode [ 1123.104387][T10619] bond2: (slave vlan2): Opening slave failed [ 1123.712110][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 1126.601772][ T28] audit: type=1400 audit(1126.490:620): avc: denied { getopt } for pid=10719 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1129.571815][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 1130.739509][ T28] audit: type=1400 audit(1130.620:621): avc: denied { bind } for pid=10754 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1132.941706][T10762] netlink: 'syz.1.1956': attribute type 4 has an invalid length. [ 1133.138708][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1958'. [ 1134.363718][ T28] audit: type=1400 audit(1134.250:622): avc: denied { setopt } for pid=10787 comm="syz.1.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1134.393046][ T28] audit: type=1400 audit(1134.280:623): avc: denied { read } for pid=10787 comm="syz.1.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1141.889463][T10841] syzkaller0: entered promiscuous mode [ 1141.895605][T10841] syzkaller0: entered allmulticast mode [ 1143.740021][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'. [ 1144.430337][T10852] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1981'. [ 1144.797631][T10855] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1982'. [ 1145.087375][ T28] audit: type=1400 audit(1144.980:624): avc: denied { nlmsg_read } for pid=10856 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1151.202620][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 1151.204374][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 1151.540282][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 1164.660040][T10960] syzkaller0: entered promiscuous mode [ 1164.660793][T10960] syzkaller0: entered allmulticast mode [ 1177.918371][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 1178.789013][T11008] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 1178.970014][T11008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1179.725831][ T28] audit: type=1400 audit(1179.610:625): avc: denied { write } for pid=11046 comm="syz.2.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1181.668248][ T6670] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.669457][ T6670] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.681538][ T6670] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.681991][ T6670] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.613470][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2068'. [ 1193.816653][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 1196.389002][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 1204.872589][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.886271][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.538315][ T8958] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1205.712942][ T28] audit: type=1400 audit(1205.600:626): avc: denied { mount } for pid=11202 comm="syz.2.2096" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1205.919156][ T8958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1205.919425][ T8958] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1205.919816][ T8958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.937172][ T8958] usb 2-1: config 0 descriptor?? [ 1206.400781][ T8958] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 1206.401272][ T8958] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 1206.401636][ T8958] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 1206.401851][ T8958] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 1206.402076][ T8958] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 1206.415427][ T8958] uclogic 0003:5543:0064.0003: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 1206.597013][T11208] usb 2-1: USB disconnect, device number 10 [ 1213.359312][ T28] audit: type=1326 audit(1213.250:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.381315][ T28] audit: type=1326 audit(1213.260:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.385387][ T28] audit: type=1326 audit(1213.260:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.388231][ T28] audit: type=1326 audit(1213.260:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.402136][ T28] audit: type=1326 audit(1213.260:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.404397][ T28] audit: type=1326 audit(1213.260:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.407834][ T28] audit: type=1326 audit(1213.260:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.410106][ T28] audit: type=1326 audit(1213.270:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.412324][ T28] audit: type=1326 audit(1213.270:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=163 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1213.415633][ T28] audit: type=1326 audit(1213.270:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.2.2111" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1230.594326][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.596747][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.765441][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1237.767489][ T28] audit: type=1400 audit(1237.650:640): avc: denied { read } for pid=11337 comm="syz.1.2131" path="socket:[20227]" dev="sockfs" ino=20227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1238.775325][ T8929] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1238.938871][ T8929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1238.939512][ T8929] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1238.939947][ T8929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.950289][ T8929] usb 2-1: config 0 descriptor?? [ 1238.956206][T11344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1239.436170][ T8929] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1240.361073][ T8929] usb 2-1: USB disconnect, device number 11 [ 1241.306294][T11208] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1241.476870][T11208] usb 2-1: Using ep0 maxpacket: 32 [ 1241.492160][T11208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.492378][T11208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.492621][T11208] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1241.492725][T11208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.500392][T11208] usb 2-1: config 0 descriptor?? [ 1241.952163][T11208] samsung 0003:0419:0600.0005: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 1242.147124][T11208] usb 2-1: USB disconnect, device number 12 [ 1245.858714][ T28] audit: type=1326 audit(1245.750:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.1.2147" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7fc00000 [ 1246.715269][ T8929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1246.935467][ T8929] usb 2-1: Using ep0 maxpacket: 8 [ 1247.197083][ T8929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.200178][ T8929] usb 2-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 1247.218390][ T8929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.252591][ T8929] usb 2-1: config 0 descriptor?? [ 1247.468076][ T93] usb 2-1: USB disconnect, device number 13 [ 1253.370965][ T28] audit: type=1400 audit(1253.250:642): avc: denied { create } for pid=11446 comm="syz.2.2158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 1254.101572][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 1255.311661][T11464] SELinux: failed to load policy [ 1255.453150][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.454285][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.680928][ T28] audit: type=1400 audit(1294.570:643): avc: denied { setopt } for pid=11540 comm="syz.1.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1295.027143][ T28] audit: type=1400 audit(1294.920:644): avc: denied { getopt } for pid=11544 comm="syz.1.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1298.777883][T11563] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2188'. [ 1298.781148][T11563] 0ªî{X¹¦: renamed from gretap0 [ 1298.788011][T11563] 0ªî{X¹¦: entered allmulticast mode [ 1298.796760][T11563] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1304.016396][T11587] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1307.554750][T11594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.570290][T11594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.717559][T11594] hsr_slave_0: entered promiscuous mode [ 1309.721168][T11594] hsr_slave_1: entered promiscuous mode [ 1309.736087][T11594] debugfs: 'hsr0' already exists in 'hsr' [ 1309.736837][T11594] Cannot create hsr debugfs directory [ 1310.490033][T11594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1310.518560][T11594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1310.532699][T11594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1310.567946][T11594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1311.999861][T11594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.271791][T11594] veth0_vlan: entered promiscuous mode [ 1317.314421][T11594] veth1_vlan: entered promiscuous mode [ 1317.387686][T11594] veth0_macvtap: entered promiscuous mode [ 1317.398762][T11594] veth1_macvtap: entered promiscuous mode [ 1317.521327][ T4680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.521790][ T4680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.522151][ T4680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.522390][ T4680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.861306][T11918] netlink: 'syz.3.2190': attribute type 12 has an invalid length. [ 1317.861784][T11918] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2190'. [ 1319.568034][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.568780][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.569163][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.569446][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.278150][T11957] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2200'. [ 1343.668186][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.668640][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.669060][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.669536][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.460049][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.467101][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.677899][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.683997][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.704195][ T31] bond0 (unregistering): Released all slaves [ 1348.713833][ T31] bond1 (unregistering): Released all slaves [ 1348.749268][ T31] bond2 (unregistering): Released all slaves [ 1348.910401][ T28] audit: type=1326 audit(1348.780:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1348.946217][ T28] audit: type=1326 audit(1348.830:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=324 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1348.969586][ T28] audit: type=1326 audit(1348.860:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1349.215949][ T31] hsr_slave_0: left promiscuous mode [ 1349.218625][ T28] audit: type=1326 audit(1349.090:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1349.238403][ T28] audit: type=1326 audit(1349.130:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=233 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1349.249166][ T28] audit: type=1326 audit(1349.130:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1349.254441][ T31] hsr_slave_1: left promiscuous mode [ 1349.258467][ T28] audit: type=1326 audit(1349.130:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1351.334057][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 1392.561103][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2254'. [ 1394.329258][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 1394.725669][ T5044] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1394.927812][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1394.930674][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1394.936353][ T5044] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1394.940106][ T5044] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1394.959442][ T5044] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1394.960783][ T5044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.966561][ T5044] usb 2-1: Product: syz [ 1394.969254][ T5044] usb 2-1: Manufacturer: syz [ 1394.973175][ T5044] usb 2-1: SerialNumber: syz [ 1395.004290][T12189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.250296][T12189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.268077][T12189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.898142][T12189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.898811][T12189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1396.108527][ T5044] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1396.112621][ T5044] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1396.113407][ T5044] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1396.312070][ T5044] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 1396.329670][ T5044] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1396.343481][ T5044] usb 2-1: USB disconnect, device number 14 [ 1396.347823][ T5044] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1396.622045][ T28] audit: type=1400 audit(1396.510:652): avc: denied { bind } for pid=12211 comm="syz.1.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1396.975843][ T8933] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1397.169218][ T8933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1397.172791][ T8933] usb 2-1: not running at top speed; connect to a high speed hub [ 1397.204044][ T8933] usb 2-1: config 1 has an invalid interface number: 152 but max is 1 [ 1397.205380][ T8933] usb 2-1: config 1 has an invalid interface number: 21 but max is 1 [ 1397.205527][ T8933] usb 2-1: config 1 has no interface number 0 [ 1397.205566][ T8933] usb 2-1: config 1 has no interface number 1 [ 1397.205683][ T8933] usb 2-1: config 1 interface 152 has no altsetting 0 [ 1397.205728][ T8933] usb 2-1: config 1 interface 21 has no altsetting 0 [ 1397.279506][ T8933] usb 2-1: New USB device found, idVendor=0c26, idProduct=0013, bcdDevice=9f.0b [ 1397.279747][ T8933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.282308][ T8933] usb 2-1: Product: syz [ 1397.282683][ T8933] usb 2-1: Manufacturer: syz [ 1397.282800][ T8933] usb 2-1: SerialNumber: syz [ 1397.542741][ T8933] ftdi_sio 2-1:1.152: FTDI USB Serial Device converter detected [ 1397.544024][ T8933] ftdi_sio ttyUSB0: unknown device type: 0x9f0b [ 1397.562917][ T8933] ftdi_sio 2-1:1.21: FTDI USB Serial Device converter detected [ 1397.563862][ T8933] ftdi_sio ttyUSB1: unknown device type: 0x9f0b [ 1397.585142][ T8933] usb 2-1: USB disconnect, device number 15 [ 1397.589392][ T8933] ftdi_sio 2-1:1.152: device disconnected [ 1397.600791][ T8933] ftdi_sio 2-1:1.21: device disconnected [ 1403.679795][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.682912][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.991305][ T28] audit: type=1400 audit(1413.880:653): avc: denied { lock } for pid=12325 comm="syz.1.2282" path="/dev/vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1415.255912][ T8929] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1415.425091][ T8929] usb 2-1: not running at top speed; connect to a high speed hub [ 1415.434391][ T8929] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1415.435342][ T8929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.435590][ T8929] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1415.435800][ T8929] usb 2-1: config 1 has no interface number 1 [ 1415.436028][ T8929] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1415.436128][ T8929] usb 2-1: config 1 interface 2 has no altsetting 0 [ 1415.489337][ T8929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1415.489571][ T8929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.491256][ T8929] usb 2-1: Product: syz [ 1415.491321][ T8929] usb 2-1: Manufacturer: syz [ 1415.491351][ T8929] usb 2-1: SerialNumber: syz [ 1415.772430][ T8929] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1415.773395][ T8929] usb 2-1: 2:1: invalid format type 0x3be0 is detected, processed as PCM [ 1415.788138][ T8929] usb 2-1: selecting invalid altsetting 0 [ 1415.795393][ T8929] usb 2-1: selecting invalid altsetting 0 [ 1415.886989][ T8929] usb 2-1: USB disconnect, device number 16 [ 1416.311199][T12371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.709181][T12371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1416.716232][T12371] veth1_vlan: left promiscuous mode [ 1416.720096][T12371] veth0_vlan: left promiscuous mode [ 1416.722251][T12371] veth0_vlan: entered promiscuous mode [ 1416.733229][T12371] veth1_vlan: entered promiscuous mode [ 1416.802204][T12371] veth1_macvtap: left promiscuous mode [ 1416.805881][T12371] veth0_macvtap: left promiscuous mode [ 1416.807741][T12371] veth0_macvtap: entered promiscuous mode [ 1416.814406][T12371] veth1_macvtap: entered promiscuous mode [ 1416.842657][T12371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1416.890294][T12371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1416.894339][T12371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1416.971780][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.972381][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.972748][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.973018][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.393770][T12404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2293'. [ 1428.007609][ T8991] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1428.180031][ T8991] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1428.180727][ T8991] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1428.181420][ T8991] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1428.181474][ T8991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.965308][ T8991] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1429.975674][ T8991] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 1430.019344][ T8991] input: failed to attach handler kbd to device input5, error: -5 [ 1430.062299][ T8991] usb 2-1: USB disconnect, device number 17 [ 1431.788423][ T28] audit: type=1400 audit(1431.680:654): avc: denied { write } for pid=12521 comm="syz.1.2298" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1437.651407][T12542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.653235][T12542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.882218][T12564] tun0: tun_chr_ioctl cmd 2147767511 [ 1439.078099][T12570] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1439.230233][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.234728][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.937304][T11208] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1448.183084][T11208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.213741][T11208] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1448.214096][T11208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.215105][T11208] usb 2-1: Product: syz [ 1448.215200][T11208] usb 2-1: Manufacturer: syz [ 1448.215240][T11208] usb 2-1: SerialNumber: syz [ 1448.233391][T11208] usb 2-1: config 0 descriptor?? [ 1448.392678][T11208] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1448.828598][T11208] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1448.995622][T11208] usb 2-1: USB disconnect, device number 18 [ 1459.098670][T12686] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1464.426992][T12707] process 'syz.3.2344' launched './file0' with NULL argv: empty string added [ 1465.776785][ T28] audit: type=1800 audit(1465.670:655): pid=12707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2344" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1467.838033][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.839282][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.901369][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.902366][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.391278][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.406651][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.748174][ T28] audit: type=1326 audit(1484.640:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.3.2351" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1484.755811][ T28] audit: type=1326 audit(1484.640:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.3.2351" exe="/syz-executor" sig=0 arch=40000028 syscall=234 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1484.761532][ T28] audit: type=1326 audit(1484.650:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.3.2351" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1484.764377][ T28] audit: type=1326 audit(1484.650:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.3.2351" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1499.041395][T12747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.051019][T12747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.138535][T12747] hsr_slave_0: entered promiscuous mode [ 1501.148019][T12747] hsr_slave_1: entered promiscuous mode [ 1501.151901][T12747] debugfs: 'hsr0' already exists in 'hsr' [ 1501.153220][T12747] Cannot create hsr debugfs directory [ 1501.629229][T12747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1501.651445][T12747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1501.663736][T12747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1501.676869][T12747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1503.054088][T12747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.242311][T13030] netlink: 'syz.3.2363': attribute type 21 has an invalid length. [ 1505.728889][T13072] netlink: 'syz.3.2371': attribute type 13 has an invalid length. [ 1510.956331][T13098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2378'. [ 1510.978096][T13098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2378'. [ 1511.126414][T13098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2378'. [ 1513.381018][T12747] veth0_vlan: entered promiscuous mode [ 1513.437597][T12747] veth1_vlan: entered promiscuous mode [ 1513.529759][T12747] veth0_macvtap: entered promiscuous mode [ 1513.547912][T12747] veth1_macvtap: entered promiscuous mode [ 1513.683029][T12482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.684476][T12482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.699045][T12482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.701725][T12482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.399908][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2402'. [ 1522.429121][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2402'. [ 1522.456796][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2402'. [ 1523.660380][T13186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13186 comm=syz.3.2403 [ 1523.660903][T13186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13186 comm=syz.3.2403 [ 1524.036919][T13191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1524.052467][T13191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1524.173757][T13193] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2407'. [ 1525.537112][T13203] netlink: 492 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1532.758366][T13238] netlink: 'syz.4.2422': attribute type 10 has an invalid length. [ 1532.776944][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1534.577497][T13249] netlink: 'syz.3.2427': attribute type 1 has an invalid length. [ 1539.393035][T13274] syzkaller0: entered promiscuous mode [ 1539.393592][T13274] syzkaller0: entered allmulticast mode [ 1540.527576][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1540.528841][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1540.867675][T13289] netlink: 'syz.3.2438': attribute type 1 has an invalid length. [ 1541.619553][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 1545.903339][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1545.908324][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1545.912453][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1545.996874][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1546.011162][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1546.078307][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1546.281302][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1546.282924][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1546.283396][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1546.284458][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1549.708159][ T28] audit: type=1400 audit(1549.600:660): avc: denied { write } for pid=13343 comm="syz.4.2454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1551.252863][T13358] __nla_validate_parse: 10 callbacks suppressed [ 1551.316345][T13358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1551.317122][T13358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1551.838146][T13363] netlink: 'syz.4.2460': attribute type 10 has an invalid length. [ 1552.979378][T13370] netlink: 1060 bytes leftover after parsing attributes in process `syz.3.2462'. [ 1553.930727][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1553.931272][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1553.931676][T13383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1557.570267][T13396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2473'. [ 1557.591678][T13396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2473'. [ 1557.648707][T13396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2473'. [ 1560.767795][T13426] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2484'. [ 1561.705752][ T28] audit: type=1400 audit(1561.600:661): avc: denied { setopt } for pid=13434 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1562.767845][ T28] audit: type=1400 audit(1562.660:662): avc: denied { create } for pid=13446 comm="syz.4.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1568.235822][T13472] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2501'. [ 1570.459865][ T28] audit: type=1400 audit(1570.350:663): avc: denied { sqpoll } for pid=13479 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1570.999465][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.000554][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.691846][ T28] audit: type=1400 audit(1575.580:664): avc: denied { watch watch_reads } for pid=13497 comm="syz.4.2509" path="/proc/157/task" dev="proc" ino=23516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1593.163168][ T9476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.229136][ T9476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.330635][ T9476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.394466][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.411930][ T9476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.434075][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.949731][ T9476] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1594.032228][ T9476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1594.056348][ T9476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.061654][ T9476] bond0 (unregistering): Released all slaves [ 1594.087691][ T9476] bond1 (unregistering): (slave lo): Releasing backup interface [ 1594.101704][ T9476] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1594.110430][ T9476] bond1 (unregistering): Released all slaves [ 1594.137083][ T9476] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1594.138458][ T9476] bond3 (unregistering): left promiscuous mode [ 1594.155653][ T9476] bond2 (unregistering): Released all slaves [ 1594.173237][ T9476] bond3 (unregistering): Released all slaves [ 1594.318175][ T9476] hsr_slave_0: left promiscuous mode [ 1594.342610][ T9476] veth1_macvtap: left promiscuous mode [ 1594.350511][ T9476] veth0_macvtap: left promiscuous mode [ 1594.363584][ T9476] veth1_vlan: left promiscuous mode [ 1594.368141][ T9476] veth0_vlan: left promiscuous mode [ 1600.556018][T13597] syz.4.2533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1616.320041][T13654] binfmt_misc: register: failed to install interpreter file ./file0 [ 1636.742860][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.746854][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.902745][ T28] audit: type=1400 audit(1636.790:665): avc: denied { execute_no_trans } for pid=13712 comm="syz.4.2555" path="/87/file1" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1638.074383][T13717] binfmt_misc: register: failed to install interpreter file ./file0 [ 1647.060290][T13741] binder: 13740:13741 ioctl 400c620e 20000240 returned -22 [ 1648.442631][T13760] binfmt_misc: register: failed to install interpreter file ./file0 [ 1653.629768][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.646065][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.552402][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 1657.577187][T13798] IPv6: Can't replace route, no match found [ 1657.780380][ T28] audit: type=1400 audit(1657.670:666): avc: denied { create } for pid=13799 comm="syz.4.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1657.801775][ T28] audit: type=1400 audit(1657.690:667): avc: denied { write } for pid=13799 comm="syz.4.2592" path="socket:[25065]" dev="sockfs" ino=25065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1667.234013][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.248574][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.669698][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 1673.323117][T13872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.325966][T13872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.351185][T13872] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2616'. [ 1690.127639][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2632'. [ 1690.166647][T13927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2632'. [ 1695.596934][T13949] cgroup: Unknown subsys name 'cpuset' [ 1696.525910][T13953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2645'. [ 1710.391317][T14034] vlan0: entered promiscuous mode [ 1731.609708][T14074] Restarting kernel threads ... [ 1731.620727][T14074] Done restarting kernel threads. [ 1731.825506][ T28] audit: type=1400 audit(1731.710:668): avc: denied { mounton } for pid=14075 comm="syz.4.2694" path="/proc/321/cgroup" dev="proc" ino=26395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1731.827986][ T28] audit: type=1400 audit(1731.710:669): avc: denied { getattr } for pid=14075 comm="syz.4.2694" path="/proc/321/cgroup" dev="nsfs" ino=4026532733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1732.358724][ T28] audit: type=1400 audit(1732.250:670): avc: denied { compute_member } for pid=14083 comm="syz.4.2698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1735.941673][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.949254][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.159346][T14109] raw_sendmsg: syz.4.2709 forgot to set AF_INET. Fix it! [ 1736.976774][T14113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.977630][T14113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.883859][ T28] audit: type=1400 audit(1746.770:671): avc: denied { accept } for pid=14180 comm="syz.3.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1747.456915][ T28] audit: type=1400 audit(1747.350:672): avc: denied { setopt } for pid=14188 comm="syz.3.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1779.296431][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2745'. [ 1787.190176][T14269] syzkaller0: entered promiscuous mode [ 1787.215399][T14269] syzkaller0: entered allmulticast mode [ 1816.433440][T14414] *** NOT YET: opcode db *** [ 1820.950525][T14457] syzkaller0: entered promiscuous mode [ 1820.950957][T14457] syzkaller0: entered allmulticast mode [ 1824.363425][ T28] audit: type=1400 audit(1824.250:673): avc: denied { getopt } for pid=14484 comm="syz.3.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1841.348296][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1848.440755][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.445154][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.001399][ T28] audit: type=1400 audit(1866.890:674): avc: denied { create } for pid=14610 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1898.564145][T14641] comedi: valid board names for 8255 driver are: [ 1898.571285][T14641] 8255 [ 1898.579050][T14641] comedi: valid board names for vmk80xx driver are: [ 1898.580820][T14641] vmk80xx [ 1898.584200][T14641] comedi: valid board names for usbduxsigma driver are: [ 1898.590247][T14641] usbduxsigma [ 1898.591602][T14641] comedi: valid board names for usbduxfast driver are: [ 1898.592697][T14641] usbduxfast [ 1898.592840][T14641] comedi: valid board names for usbdux driver are: [ 1898.592929][T14641] usbdux [ 1898.593008][T14641] comedi: valid board names for ni6501 driver are: [ 1898.593079][T14641] ni6501 [ 1898.593151][T14641] comedi: valid board names for dt9812 driver are: [ 1898.593223][T14641] dt9812 [ 1898.593293][T14641] comedi: valid board names for ni_labpc_cs driver are: [ 1898.593363][T14641] ni_labpc_cs [ 1898.593433][T14641] comedi: valid board names for ni_daq_700 driver are: [ 1898.593503][T14641] ni_daq_700 [ 1898.593571][T14641] comedi: valid board names for labpc_pci driver are: [ 1898.593641][T14641] labpc_pci [ 1898.593709][T14641] comedi: valid board names for adl_pci9118 driver are: [ 1898.593778][T14641] pci9118dg [ 1898.593846][T14641] pci9118hg [ 1898.593921][T14641] pci9118hr [ 1898.593991][T14641] comedi: valid board names for 8255_pci driver are: [ 1898.594064][T14641] 8255_pci [ 1898.599526][T14641] comedi: valid board names for comedi_parport driver are: [ 1898.599672][T14641] comedi_parport [ 1898.599749][T14641] comedi: valid board names for comedi_test driver are: [ 1898.599820][T14641] comedi_test [ 1898.599889][T14641] comedi: valid board names for comedi_bond driver are: [ 1898.599968][T14641] comedi_bond [ 1901.836028][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.836988][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.327705][ T28] audit: type=1400 audit(1908.220:675): avc: denied { watch } for pid=14680 comm="syz.3.2875" path="/418" dev="tmpfs" ino=2138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1908.336356][ T28] audit: type=1400 audit(1908.230:676): avc: denied { watch_sb } for pid=14680 comm="syz.3.2875" path="/418" dev="tmpfs" ino=2138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1917.308353][T14703] syz.3.2883 (14703): drop_caches: 2 [ 1922.535539][T14727] can0: slcan on ptm0. [ 1922.727721][T14727] can0 (unregistered): slcan off ptm0. [ 1923.117919][T14736] syzkaller0: entered promiscuous mode [ 1923.126950][T14736] syzkaller0: entered allmulticast mode [ 1929.454275][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.511334][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1933.830268][T14717] hsr_slave_0: entered promiscuous mode [ 1933.856811][T14717] hsr_slave_1: entered promiscuous mode [ 1933.863702][T14717] debugfs: 'hsr0' already exists in 'hsr' [ 1933.866188][T14717] Cannot create hsr debugfs directory [ 1935.057618][T14717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1935.098965][T14717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1935.127808][T14717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1935.176358][T14717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1937.662738][T14717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1939.043238][T12482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.153406][T12482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.238289][T12482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.401913][T12482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.237224][T12482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1940.268726][T12482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1940.274660][T12482] bond0 (unregistering): Released all slaves [ 1940.445730][T12482] hsr_slave_0: left promiscuous mode [ 1940.447516][T12482] hsr_slave_1: left promiscuous mode [ 1940.468109][T12482] veth1_macvtap: left promiscuous mode [ 1940.468400][T12482] veth0_macvtap: left promiscuous mode [ 1940.468718][T12482] veth1_vlan: left promiscuous mode [ 1940.468795][T12482] veth0_vlan: left promiscuous mode [ 1949.404138][T14717] veth0_vlan: entered promiscuous mode [ 1949.433305][T14717] veth1_vlan: entered promiscuous mode [ 1949.496766][T14717] veth0_macvtap: entered promiscuous mode [ 1949.517359][T14717] veth1_macvtap: entered promiscuous mode [ 1949.631853][T12480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.632693][T12480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.632833][T12480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.632914][T12480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1950.691766][T15107] comedi: valid board names for 8255 driver are: [ 1950.695013][T15107] 8255 [ 1950.698726][T15107] comedi: valid board names for vmk80xx driver are: [ 1950.704061][T15107] vmk80xx [ 1950.706766][T15107] comedi: valid board names for usbduxsigma driver are: [ 1950.709158][T15107] usbduxsigma [ 1950.711383][T15107] comedi: valid board names for usbduxfast driver are: [ 1950.713518][T15107] usbduxfast [ 1950.716170][T15107] comedi: valid board names for usbdux driver are: [ 1950.718568][T15107] usbdux [ 1950.721599][T15107] comedi: valid board names for ni6501 driver are: [ 1950.726345][T15107] ni6501 [ 1950.730559][T15107] comedi: valid board names for dt9812 driver are: [ 1950.733467][T15107] dt9812 [ 1950.736667][T15107] comedi: valid board names for ni_labpc_cs driver are: [ 1950.738748][T15107] ni_labpc_cs [ 1950.738864][T15107] comedi: valid board names for ni_daq_700 driver are: [ 1950.738889][T15107] ni_daq_700 [ 1950.738902][T15107] comedi: valid board names for labpc_pci driver are: [ 1950.738948][T15107] labpc_pci [ 1950.738968][T15107] comedi: valid board names for adl_pci9118 driver are: [ 1950.738987][T15107] pci9118dg [ 1950.739001][T15107] pci9118hg [ 1950.739051][T15107] pci9118hr [ 1950.739071][T15107] comedi: valid board names for 8255_pci driver are: [ 1950.739089][T15107] 8255_pci [ 1950.739110][T15107] comedi: valid board names for comedi_parport driver are: [ 1950.739125][T15107] comedi_parport [ 1950.739140][T15107] comedi: valid board names for comedi_test driver are: [ 1950.739154][T15107] comedi_test [ 1950.739218][T15107] comedi: valid board names for comedi_bond driver are: [ 1950.739238][T15107] comedi_bond [ 1951.098490][T15112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15112 comm=syz.5.2898 [ 1951.176117][T15112] netlink: 'syz.5.2898': attribute type 1 has an invalid length. [ 1956.802114][T15190] netlink: 'syz.3.2907': attribute type 5 has an invalid length. [ 1958.729198][T15216] syzkaller1: entered promiscuous mode [ 1958.746050][T15216] syzkaller1: entered allmulticast mode [ 1961.474370][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1961.486699][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1963.537051][T15243] binfmt_misc: register: failed to install interpreter file ./file0 [ 1983.083753][ T28] audit: type=1800 audit(1982.970:677): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.2922" name="/newroot/460/file0" dev="tmpfs" ino=2357 res=0 errno=0 [ 2001.456320][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2001.502630][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2006.509808][T15279] hsr_slave_0: entered promiscuous mode [ 2006.536955][T15279] hsr_slave_1: entered promiscuous mode [ 2006.539400][T15279] debugfs: 'hsr0' already exists in 'hsr' [ 2006.546059][T15279] Cannot create hsr debugfs directory [ 2007.699307][T15279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2007.721833][T15279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2007.754188][T15279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2007.798171][T15279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2010.737442][T15279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2020.660127][T12482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.750734][T12482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.836338][T12482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.913049][T12482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.322961][T12482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2021.333196][T12482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2021.350752][T12482] bond0 (unregistering): Released all slaves [ 2021.419833][T12482] hsr_slave_0: left promiscuous mode [ 2021.422624][T12482] hsr_slave_1: left promiscuous mode [ 2021.437372][T12482] veth1_macvtap: left promiscuous mode [ 2021.437764][T12482] veth0_macvtap: left promiscuous mode [ 2021.438057][T12482] veth1_vlan: left promiscuous mode [ 2021.438200][T12482] veth0_vlan: left promiscuous mode [ 2023.380951][T15279] veth0_vlan: entered promiscuous mode [ 2023.457867][T15279] veth1_vlan: entered promiscuous mode [ 2023.951425][T15279] veth0_macvtap: entered promiscuous mode [ 2023.980315][T15279] veth1_macvtap: entered promiscuous mode [ 2024.123730][T15150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.131790][T15150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.132243][T15150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.132563][T15150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.589669][T15624] syzkaller1: entered promiscuous mode [ 2025.600082][T15624] syzkaller1: entered allmulticast mode [ 2029.142708][T15648] batadv_slave_0: entered promiscuous mode [ 2029.184180][T15646] batadv_slave_0: left promiscuous mode [ 2043.511793][T15688] netlink: 'syz.3.2940': attribute type 4 has an invalid length. [ 2043.517610][T15688] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2940'. [ 2043.530740][T15688] .`: renamed from dummy0 [ 2060.440205][T15731] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2060.578966][T15733] input: syz0 as /devices/virtual/input/input7 [ 2060.891971][T15739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.901404][T15739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.188894][T15857] netlink: 'syz.3.2980': attribute type 11 has an invalid length. [ 2123.192355][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2980'. [ 2123.826577][ T28] audit: type=1400 audit(2123.720:678): avc: denied { connect } for pid=15861 comm="syz.3.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2131.868674][T15868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.882604][T15868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2137.264573][T15868] hsr_slave_0: entered promiscuous mode [ 2137.270204][T15868] hsr_slave_1: entered promiscuous mode [ 2137.286773][T15868] debugfs: 'hsr0' already exists in 'hsr' [ 2137.288025][T15868] Cannot create hsr debugfs directory [ 2138.924000][T15868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2138.964357][T15868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2138.999491][T15868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2139.021000][T15868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2139.618243][T12480] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.746917][T12480] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.898514][T12480] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.086510][T12480] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.694543][T12480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.728591][T12480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.758252][T12480] bond0 (unregistering): Released all slaves [ 2142.208668][T12480] hsr_slave_0: left promiscuous mode [ 2142.210076][T12480] hsr_slave_1: left promiscuous mode [ 2142.237431][T12480] veth1_macvtap: left promiscuous mode [ 2142.237775][T12480] veth0_macvtap: left promiscuous mode [ 2142.238211][T12480] veth1_vlan: left promiscuous mode [ 2142.238505][T12480] veth0_vlan: left promiscuous mode [ 2143.172909][T15868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.840842][T15868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2149.704061][T15868] veth0_vlan: entered promiscuous mode [ 2149.778728][T15868] veth1_vlan: entered promiscuous mode [ 2149.978182][T15868] veth0_macvtap: entered promiscuous mode [ 2150.021983][T15868] veth1_macvtap: entered promiscuous mode [ 2150.216177][T15172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.217043][T15172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.217312][T15172] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.218302][T15172] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.957505][T16251] bond1: (slave ip6_vti0): Device is not bonding slave [ 2156.961177][T16251] bond1: option active_slave: invalid value (ip6_vti0) [ 2156.973648][T16251] bond1 (unregistering): Released all slaves [ 2158.928947][ T28] audit: type=1400 audit(2158.820:679): avc: denied { create } for pid=16328 comm="syz.3.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2158.955177][ T28] audit: type=1400 audit(2158.840:680): avc: denied { sys_admin } for pid=16328 comm="syz.3.2994" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2158.995902][ T28] audit: type=1400 audit(2158.890:681): avc: denied { mount } for pid=16328 comm="syz.3.2994" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2162.602317][T16346] bond1: (slave ip6_vti0): Device is not bonding slave [ 2162.607202][T16346] bond1: option active_slave: invalid value (ip6_vti0) [ 2162.619561][T16346] bond1 (unregistering): Released all slaves [ 2175.828597][T16455] input: syz1 as /devices/virtual/input/input8 [ 2176.949901][ T28] audit: type=1400 audit(2176.840:682): avc: denied { create } for pid=16454 comm="syz.7.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2181.161509][ T28] audit: type=1400 audit(2181.050:683): avc: denied { read } for pid=16472 comm="syz.3.3012" path="socket:[31686]" dev="sockfs" ino=31686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2181.409557][T16475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.413343][T16475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.390925][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.392648][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.891526][ T28] audit: type=1400 audit(2187.780:684): avc: denied { mounton } for pid=16510 comm="syz.3.3027" path="/524/file0" dev="tmpfs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2194.404242][T16516] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2206.686488][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.688751][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.647570][T16552] bond1: (slave ip6_vti0): Device is not bonding slave [ 2207.658072][T16552] bond1: option active_slave: invalid value (ip6_vti0) [ 2207.681467][T16552] bond1 (unregistering): Released all slaves [ 2209.642197][T16621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.648729][T16621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.922966][ T28] audit: type=1400 audit(2237.810:685): avc: denied { mount } for pid=16651 comm="syz.7.3048" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2238.574002][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.579445][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.950063][ T28] audit: type=1400 audit(2250.840:686): avc: denied { unmount } for pid=15868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2258.732070][T16680] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 2261.439051][T16693] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2261.439051][T16693] The task syz.3.3058 (16693) triggered the difference, watch for misbehavior. [ 2264.109766][T16697] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3060'. [ 2269.915714][ T28] audit: type=1400 audit(2269.800:687): avc: denied { getopt } for pid=16738 comm="syz.7.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2275.828976][ T28] audit: type=1326 audit(2275.720:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.7.3080" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 2278.667618][T16764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.671305][T16764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.484075][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3086'. [ 2284.276957][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.287605][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2302.955713][T16807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2302.956318][T16807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2303.261708][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2303.263931][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2309.281900][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.287010][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.800119][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2359.839093][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2362.139297][T16845] hsr_slave_0: entered promiscuous mode [ 2362.147033][T16845] hsr_slave_1: entered promiscuous mode [ 2362.156350][T16845] debugfs: 'hsr0' already exists in 'hsr' [ 2362.158408][T16845] Cannot create hsr debugfs directory [ 2362.751495][T16845] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2362.782232][T16845] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2362.812875][T16845] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2362.833930][T16845] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2365.879058][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2369.787894][ T6670] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2369.853542][ T6670] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2369.931432][ T6670] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.048361][ T6670] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.715815][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2370.737628][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2370.743034][ T6670] bond0 (unregistering): Released all slaves [ 2370.882540][ T6670] hsr_slave_0: left promiscuous mode [ 2370.926476][ T6670] hsr_slave_1: left promiscuous mode [ 2370.948974][ T6670] veth1_macvtap: left promiscuous mode [ 2370.949496][ T6670] veth0_macvtap: left promiscuous mode [ 2370.949701][ T6670] veth1_vlan: left promiscuous mode [ 2370.949827][ T6670] veth0_vlan: left promiscuous mode [ 2371.862334][T16987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2371.910011][T16987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2374.366871][T16987] hsr_slave_0: entered promiscuous mode [ 2374.370541][T16987] hsr_slave_1: entered promiscuous mode [ 2374.381008][T16987] debugfs: 'hsr0' already exists in 'hsr' [ 2374.381503][T16987] Cannot create hsr debugfs directory [ 2375.142930][T16987] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2375.208274][T16987] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2375.242431][T16987] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2375.274095][T16987] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2376.546211][T16845] veth0_vlan: entered promiscuous mode [ 2376.613355][T16845] veth1_vlan: entered promiscuous mode [ 2376.737014][T16845] veth0_macvtap: entered promiscuous mode [ 2376.749380][T16845] veth1_macvtap: entered promiscuous mode [ 2376.916742][T15144] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2376.918050][ T6670] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2376.918463][T15144] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2376.923323][T15144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.999510][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2379.762939][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2379.764115][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.498628][T16987] veth0_vlan: entered promiscuous mode [ 2390.551430][T16987] veth1_vlan: entered promiscuous mode [ 2390.684355][T16987] veth0_macvtap: entered promiscuous mode [ 2390.758369][T16987] veth1_macvtap: entered promiscuous mode [ 2390.859002][ T9476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.863545][ T9476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.867114][ T9476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.872546][ T9476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.891034][T17565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.894367][T17565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.296559][T17601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2398.298448][T17601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2405.860613][T17625] netlink: 'syz.9.3131': attribute type 7 has an invalid length. [ 2405.861012][T17625] netlink: 'syz.9.3131': attribute type 8 has an invalid length. [ 2413.815897][T17639] random: crng reseeded on system resumption [ 2429.768680][T17651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2429.772459][T17651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2430.305809][T17657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2430.309203][T17657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.949506][T17671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2444.007310][T17671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2446.224210][T17671] hsr_slave_0: entered promiscuous mode [ 2446.241553][T17671] hsr_slave_1: entered promiscuous mode [ 2446.247154][T17671] debugfs: 'hsr0' already exists in 'hsr' [ 2446.257242][T17671] Cannot create hsr debugfs directory [ 2447.620806][T17671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2447.653371][T17671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2447.682684][T17671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2447.694647][T17671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2451.672750][T17671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.290008][T17671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2459.335600][T17998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2459.377049][T17998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2463.867553][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3151'. [ 2464.536063][T17671] veth0_vlan: entered promiscuous mode [ 2464.558750][T17671] veth1_vlan: entered promiscuous mode [ 2464.983142][T17671] veth0_macvtap: entered promiscuous mode [ 2465.042907][T17671] veth1_macvtap: entered promiscuous mode [ 2465.137239][T18036] binder: 18035:18036 ioctl c0306201 0 returned -14 [ 2465.415720][T15158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.416608][T15158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.417302][T15158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.417562][T15158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.321150][T15158] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.390728][T15158] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.467223][T15158] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.498007][T15158] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2533.781603][T15158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2533.821775][T15158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2533.836698][T15158] bond0 (unregistering): Released all slaves [ 2533.907015][T15158] hsr_slave_0: left promiscuous mode [ 2533.920660][T15158] hsr_slave_1: left promiscuous mode [ 2533.931558][T15158] veth1_macvtap: left promiscuous mode [ 2533.932535][T15158] veth0_macvtap: left promiscuous mode [ 2533.938929][T15158] veth1_vlan: left promiscuous mode [ 2533.939766][T15158] veth0_vlan: left promiscuous mode [ 2537.723392][ T28] audit: type=1400 audit(2537.590:689): avc: denied { shutdown } for pid=18190 comm="syz.9.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2537.723710][ T28] audit: type=1326 audit(2537.600:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.723881][ T28] audit: type=1326 audit(2537.600:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.724004][ T28] audit: type=1326 audit(2537.600:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=383 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.724375][ T28] audit: type=1326 audit(2537.610:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.738584][ T28] audit: type=1326 audit(2537.610:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.738954][ T28] audit: type=1326 audit(2537.610:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.739084][ T28] audit: type=1326 audit(2537.610:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.739207][ T28] audit: type=1326 audit(2537.610:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2537.739316][ T28] audit: type=1326 audit(2537.610:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.9.3176" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2556.601989][T18263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.603562][T18263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.913101][T18291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2569.948770][T18291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2573.134066][T18291] hsr_slave_0: entered promiscuous mode [ 2573.147279][T18291] hsr_slave_1: entered promiscuous mode [ 2573.148747][T18291] debugfs: 'hsr0' already exists in 'hsr' [ 2573.149126][T18291] Cannot create hsr debugfs directory [ 2575.653957][T18291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2575.674346][T18291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2575.721929][T18291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2575.758752][T18291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2577.880461][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 2577.880916][ T28] audit: type=1400 audit(2577.770:871): avc: denied { remount } for pid=18603 comm="syz.9.3194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2577.974027][T18291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2590.741706][T18291] veth0_vlan: entered promiscuous mode [ 2590.870797][T18291] veth1_vlan: entered promiscuous mode [ 2591.403208][T18291] veth0_macvtap: entered promiscuous mode [ 2591.510475][T18291] veth1_macvtap: entered promiscuous mode [ 2591.993190][T15172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2591.994600][T15172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.011959][T15172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2592.014538][T15172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.128642][ T28] audit: type=1400 audit(2636.020:872): avc: denied { write } for pid=18775 comm="syz.9.3207" path="socket:[35941]" dev="sockfs" ino=35941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2639.993031][T18791] bond0: (slave bond_slave_0): Releasing backup interface [ 2640.022113][T18791] bond0: (slave bond_slave_1): Releasing backup interface [ 2640.039693][T18791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2665.498342][T12480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2665.634406][T12480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2665.777599][T12480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2666.079182][T12480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2666.739117][T12480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2666.766626][T12480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2666.786540][T12480] bond0 (unregistering): Released all slaves [ 2667.071626][T12480] hsr_slave_0: left promiscuous mode [ 2667.085915][T12480] hsr_slave_1: left promiscuous mode [ 2667.132761][T12480] veth1_macvtap: left promiscuous mode [ 2667.134161][T12480] veth0_macvtap: left promiscuous mode [ 2667.139021][T12480] veth1_vlan: left promiscuous mode [ 2667.140355][T12480] veth0_vlan: left promiscuous mode [ 2691.552964][T18872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2691.574543][T18872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2694.089267][T18872] hsr_slave_0: entered promiscuous mode [ 2694.091625][T18872] hsr_slave_1: entered promiscuous mode [ 2694.102658][T18872] debugfs: 'hsr0' already exists in 'hsr' [ 2694.103294][T18872] Cannot create hsr debugfs directory [ 2695.133829][T18872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2695.180220][T18872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2695.207219][T18872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2695.226522][T18872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2697.933544][T18872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2701.122449][T18872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2710.709570][T19193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2710.762784][T19193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2716.577578][T19193] hsr_slave_0: entered promiscuous mode [ 2716.579450][T19193] hsr_slave_1: entered promiscuous mode [ 2716.598938][T19193] debugfs: 'hsr0' already exists in 'hsr' [ 2716.615434][T19193] Cannot create hsr debugfs directory [ 2717.179803][T18872] veth0_vlan: entered promiscuous mode [ 2717.297574][T18872] veth1_vlan: entered promiscuous mode [ 2717.487667][T18872] veth0_macvtap: entered promiscuous mode [ 2717.579153][T18872] veth1_macvtap: entered promiscuous mode [ 2718.717636][T12487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.718467][T12487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.718600][T12487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2718.718668][T12487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.872871][T19193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2719.910308][T19193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2719.938014][T19193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2720.000765][T19193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2721.306387][T18139] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2721.465941][T18139] usb 2-1: Using ep0 maxpacket: 8 [ 2721.524534][T18139] usb 2-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 2721.548261][T18139] usb 2-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 2721.548440][T18139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2721.548561][T18139] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 2721.548608][T18139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2721.657468][T18139] usb 2-1: config 0 descriptor?? [ 2722.148765][T18139] wacom 0003:056A:010E.0006: unbalanced collection at end of report description [ 2722.149454][T18139] wacom 0003:056A:010E.0006: parse failed [ 2722.149574][T18139] wacom 0003:056A:010E.0006: probe with driver wacom failed with error -22 [ 2722.754608][T17517] usb 2-1: USB disconnect, device number 19 [ 2723.346439][T17517] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2723.546338][T17517] usb 2-1: Using ep0 maxpacket: 32 [ 2723.601778][T17517] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2723.603119][T17517] usb 2-1: config 2 has no interface number 0 [ 2723.605974][T17517] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2723.655983][T17517] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2723.657372][T17517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.658549][T17517] usb 2-1: Product: syz [ 2723.659381][T17517] usb 2-1: Manufacturer: syz [ 2723.660966][T17517] usb 2-1: SerialNumber: syz [ 2724.414408][T17517] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2724.416249][T17517] asix 2-1:2.88: probe with driver asix failed with error -71 [ 2724.426719][T17517] usb 2-1: USB disconnect, device number 20 [ 2725.101404][T19193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2728.271623][T18141] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2728.596630][T18141] usb 2-1: Using ep0 maxpacket: 8 [ 2728.798248][T18141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2728.798666][T18141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2728.799006][T18141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2728.799096][T18141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2728.799163][T18141] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2728.799188][T18141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2728.843415][T18141] usb 2-1: config 0 descriptor?? [ 2729.140364][T17517] usb 2-1: USB disconnect, device number 21 [ 2743.655874][T19193] veth0_vlan: entered promiscuous mode [ 2743.849905][T19193] veth1_vlan: entered promiscuous mode [ 2744.070620][T19193] veth0_macvtap: entered promiscuous mode [ 2744.081725][T19193] veth1_macvtap: entered promiscuous mode [ 2744.292879][T15172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.293670][T15172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.294447][T15172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.294545][T15172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.455536][T19702] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2756.635590][T19702] usb 2-1: Using ep0 maxpacket: 8 [ 2756.672578][T19702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2756.702474][T19702] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2756.711341][T19702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2756.713367][T19702] usb 2-1: SerialNumber: syz [ 2756.748700][T19702] usb 2-1: config 0 descriptor?? [ 2757.171451][T13319] usb 2-1: USB disconnect, device number 22 [ 2763.646129][T19702] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2763.826663][T19702] usb 2-1: Using ep0 maxpacket: 8 [ 2763.938035][T19702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2763.986385][T19702] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2764.032710][T19702] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2764.037788][T19702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2764.040407][T19702] usb 2-1: Product: syz [ 2764.043757][T19702] usb 2-1: Manufacturer: syz [ 2764.046676][T19702] usb 2-1: SerialNumber: syz [ 2764.452985][T19702] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2765.031743][T19702] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 2765.066672][T19702] usb 2-1: USB disconnect, device number 23 [ 2803.692251][ T28] audit: type=1400 audit(2803.580:873): avc: denied { create } for pid=19954 comm="syz.4.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2810.018290][T12480] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.112718][T12480] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.250202][T12480] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.409205][T12480] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.090491][T12480] bond0 (unregistering): Released all slaves [ 2811.138240][T12480] hsr_slave_0: left promiscuous mode [ 2811.140246][T12480] hsr_slave_1: left promiscuous mode [ 2811.152311][T12480] veth1_macvtap: left promiscuous mode [ 2811.153151][T12480] veth0_macvtap: left promiscuous mode [ 2811.158921][T12480] veth1_vlan: left promiscuous mode [ 2811.162555][T12480] veth0_vlan: left promiscuous mode [ 2811.371080][ T28] audit: type=1400 audit(2811.260:874): avc: denied { transfer } for pid=19983 comm="syz.4.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2820.631634][T15158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2820.842310][T15158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2820.951018][T15158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.142356][T15158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.870324][T15158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2821.883993][T15158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2821.910931][T15158] bond0 (unregistering): Released all slaves [ 2821.998612][T15158] hsr_slave_0: left promiscuous mode [ 2822.001765][T15158] hsr_slave_1: left promiscuous mode [ 2822.050987][T15158] veth1_macvtap: left promiscuous mode [ 2822.051442][T15158] veth0_macvtap: left promiscuous mode [ 2822.051949][T15158] veth1_vlan: left promiscuous mode [ 2822.052099][T15158] veth0_vlan: left promiscuous mode [ 2848.409762][T20167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2848.410414][T20167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2850.374158][ T28] audit: type=1326 audit(2850.260:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.1.3312" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 2868.717822][T20223] input: syz1 as /devices/virtual/input/input13 [ 2869.285943][T19702] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 2869.474974][T19702] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2869.475380][T19702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2869.481175][T19702] usb 2-1: config 0 descriptor?? [ 2871.395694][T19702] pegasus 2-1:0.0: can't reset MAC [ 2871.397674][T19702] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 2871.419522][T19702] usb 2-1: USB disconnect, device number 24 [ 2873.396436][T20273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3329'. [ 2889.786057][T20337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2889.787155][T20337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2896.126276][T13427] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2896.285897][T13427] usb 2-1: Using ep0 maxpacket: 16 [ 2896.332152][T13427] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2896.334199][T13427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2896.335735][T13427] usb 2-1: Product: syz [ 2896.336466][T13427] usb 2-1: Manufacturer: syz [ 2896.337204][T13427] usb 2-1: SerialNumber: syz [ 2896.435700][T13427] usb 2-1: config 0 descriptor?? [ 2896.441984][T13427] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2896.447221][T13427] usb 2-1: Detected FT232H [ 2896.650400][T13427] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2897.162429][T13427] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2897.428893][T18147] usb 2-1: USB disconnect, device number 25 [ 2897.463356][T18147] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2897.475913][T18147] ftdi_sio 2-1:0.0: device disconnected [ 2919.059061][T20436] pimreg: entered allmulticast mode [ 2919.755326][ T28] audit: type=1400 audit(2919.640:876): avc: denied { map } for pid=20449 comm="syz.4.3363" path="socket:[37863]" dev="sockfs" ino=37863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2920.169628][T20458] syz_tun: entered allmulticast mode [ 2920.193015][T20456] syz_tun: left allmulticast mode [ 2920.716826][T19702] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2920.730084][T20474] netlink: 'syz.4.3372': attribute type 30 has an invalid length. [ 2920.865731][T19702] usb 2-1: Using ep0 maxpacket: 8 [ 2920.889641][T19702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2920.890044][T19702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2920.890273][T19702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2920.890405][T19702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2920.890525][T19702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2920.890673][T19702] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2920.890788][T19702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2920.910926][T19702] usb 2-1: config 0 descriptor?? [ 2921.539073][T19883] usb 2-1: USB disconnect, device number 26 [ 2949.993310][ T28] audit: type=1400 audit(2949.880:877): avc: denied { remount } for pid=20537 comm="syz.4.3398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2964.444455][T20607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3426'. [ 2965.452208][ T28] audit: type=1400 audit(2965.340:878): avc: denied { read } for pid=20610 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2986.115942][ T28] audit: type=1326 audit(2986.010:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.1.3437" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2986.118917][ T28] audit: type=1326 audit(2986.010:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.1.3437" exe="/syz-executor" sig=0 arch=40000028 syscall=181 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2986.142575][ T28] audit: type=1326 audit(2986.030:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.1.3437" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2987.065754][T19569] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2987.215819][T19569] usb 2-1: Using ep0 maxpacket: 16 [ 2987.262744][T19569] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2987.265183][T19569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2987.265795][T19569] usb 2-1: Product: syz [ 2987.266311][T19569] usb 2-1: Manufacturer: syz [ 2987.266694][T19569] usb 2-1: SerialNumber: syz [ 2987.318421][T19569] usb 2-1: config 0 descriptor?? [ 2987.796751][T20648] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3439'. [ 2989.467197][T20652] ip6tnl1: entered allmulticast mode [ 2997.681684][T19911] usb 2-1: USB disconnect, device number 27 [ 3041.012894][ T28] audit: type=1400 audit(3040.900:882): avc: denied { bind } for pid=20843 comm="syz.4.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3041.017664][ T28] audit: type=1400 audit(3040.910:883): avc: denied { getopt } for pid=20843 comm="syz.4.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3043.128425][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3479'. [ 3059.122319][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3488'. [ 3067.410484][ T28] audit: type=1400 audit(3067.300:884): avc: denied { ioctl } for pid=20979 comm="syz.1.3500" path="socket:[39468]" dev="sockfs" ino=39468 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3070.924583][T21017] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 3073.136390][T19702] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 3073.306605][T19702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3073.308527][T19702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3073.329491][T19702] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3073.329867][T19702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3073.334098][T19702] usb 2-1: SerialNumber: syz [ 3073.617032][T19702] usb 2-1: 0:2 : does not exist [ 3073.639498][T19702] usb 2-1: USB disconnect, device number 28 [ 3090.551369][T21099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3090.552614][T21099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3097.199387][ T28] audit: type=1400 audit(3097.090:885): avc: denied { rename } for pid=21132 comm="syz.1.3534" name="file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3097.218253][ T28] audit: type=1400 audit(3097.110:886): avc: denied { unlink } for pid=21132 comm="syz.1.3534" name="file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3097.856443][T19569] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 3098.038826][T19569] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 3098.039175][T19569] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3098.039351][T19569] usb 2-1: config 0 has no interface number 0 [ 3098.039453][T19569] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 3098.039490][T19569] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 3098.039513][T19569] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 3098.039533][T19569] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 3098.039587][T19569] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 3098.039609][T19569] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 3098.067115][T19569] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 3098.067338][T19569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.067486][T19569] usb 2-1: Product: syz [ 3098.067574][T19569] usb 2-1: Manufacturer: syz [ 3098.067655][T19569] usb 2-1: SerialNumber: syz [ 3098.072787][T19569] usb 2-1: config 0 descriptor?? [ 3098.078754][T21139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3098.102841][T21139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3098.147968][T19569] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 3098.150312][T19569] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 3098.150421][T19569] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 3098.166350][T19569] scsi host0: microtekX6 [ 3098.209053][T15144] microtek usb (rev 0.4.3): error -90 submitting URB [ 3098.238809][ T2844] microtek usb (rev 0.4.3): error -90 submitting URB [ 3098.276435][ T2844] microtek usb (rev 0.4.3): error -90 submitting URB [ 3098.315646][ T2844] microtek usb (rev 0.4.3): error -90 submitting URB [ 3101.113348][T21153] 8<--- cut here --- [ 3101.113725][T21153] Unable to handle kernel paging request at virtual address fee04f2a when write SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3101.119403][T21153] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 3101.182120][T21153] Internal error: Oops: a06 [#1] SMP ARM [ 3101.184102][T21153] Modules linked in: [ 3101.185492][T21153] CPU: 0 UID: 0 PID: 21153 Comm: syz.4.3538 Tainted: G L syzkaller #0 PREEMPT [ 3101.186121][T21153] Tainted: [L]=SOFTLOCKUP [ 3101.186340][T21153] Hardware name: ARM-Versatile Express [ 3101.186763][T21153] PC is at subdev_8255_io+0x60/0x6c [ 3101.188344][T21153] LR is at subdev_8255_io+0x4c/0x6c [ 3101.188628][T21153] pc : [<8141c3e0>] lr : [<8141c3cc>] psr: 60000013 [ 3101.188903][T21153] sp : e00d9cb8 ip : e00d9cb8 fp : e00d9cd4 [ 3101.189135][T21153] r10: 00000000 r9 : 00000084 r8 : e00d9da4 [ 3101.189406][T21153] r7 : 00004f27 r6 : 0000009b r5 : 833a0840 r4 : 00004f2a [ 3101.189710][T21153] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 833a0840 [ 3101.190203][T21153] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 3101.190529][T21153] Control: 30c5387d Table: 869603c0 DAC: fffffffd [ 3101.190873][T21153] Register r0 information: slab kmalloc-192 start 833a0840 pointer offset 0 size 192 [ 3101.192172][T21153] Register r1 information: non-paged memory [ 3101.192968][T21153] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 3101.193692][T21153] Register r3 information: non-paged memory [ 3101.193983][T21153] Register r4 information: non-paged memory [ 3101.194330][T21153] Register r5 information: slab kmalloc-192 start 833a0840 pointer offset 0 size 192 [ 3101.195068][T21153] Register r6 information: non-paged memory [ 3101.195494][T21153] Register r7 information: non-paged memory [ 3101.195743][T21153] Register r8 information: 2-page vmalloc region starting at 0xe00d8000 allocated at kernel_clone+0xac/0x3f4 [ 3101.196235][T21153] Register r9 information: non-paged memory [ 3101.196472][T21153] Register r10 information: NULL pointer [ 3101.196912][T21153] Register r11 information: 2-page vmalloc region starting at 0xe00d8000 allocated at kernel_clone+0xac/0x3f4 [ 3101.197410][T21153] Register r12 information: 2-page vmalloc region starting at 0xe00d8000 allocated at kernel_clone+0xac/0x3f4 [ 3101.197993][T21153] Process syz.4.3538 (pid: 21153, stack limit = 0xe00d8000) [ 3101.198496][T21153] Stack: (0xe00d9cb8 to 0xe00da000) [ 3101.198912][T21153] 9ca0: 8141c380 00004f27 [ 3101.199256][T21153] 9cc0: 833a0840 00004f27 e00d9cf4 e00d9cd8 8141c0bc 8141c38c 00004f27 80518988 [ 3101.199561][T21153] 9ce0: 85863000 85863000 e00d9d14 e00d9cf8 8141c474 8141c070 833a0840 00000000 [ 3101.199922][T21153] 9d00: 85863000 00004f27 e00d9d54 e00d9d18 8141c624 8141c3f8 82b06134 83ed7380 [ 3101.200355][T21153] 9d20: 82821780 00000000 00000000 829d6444 833a0840 00000000 e00d9d90 833a0840 [ 3101.200737][T21153] 9d40: 00000000 82b2df9c e00d9d8c e00d9d58 8140b014 8141c5bc 40946400 00000000 [ 3101.201048][T21153] 9d60: e00d9d7c 200000c0 833a0840 b5403587 40946400 87214800 00000003 833a0870 [ 3101.201397][T21153] 9d80: e00d9e4c e00d9d90 8140694c 8140af14 35353238 00000000 00000000 00000000 [ 3101.201715][T21153] 9da0: 00000000 00004f27 00000005 00000002 00000401 00000001 00000cc7 00000fff [ 3101.202027][T21153] 9dc0: 5c952399 00000005 000003ff 00000802 00001600 00000001 00000001 00000009 [ 3101.202319][T21153] 9de0: 0000e1cb 00000008 000000d4 00000003 00000000 00000000 0000d5f2 00000020 [ 3101.202611][T21153] 9e00: f7fffff5 ffffeadb ffffffff 0000003c 00000008 00000004 08000000 00000009 [ 3101.202916][T21153] 9e20: 00000000 ef87355b 00000000 860c83c0 833a0840 200000c0 40946400 87214800 [ 3101.203218][T21153] 9e40: e00d9f14 e00d9e50 814074cc 81406884 00000000 ef87355b 00000000 00000000 [ 3101.203504][T21153] 9e60: 824b457c e00d9ea4 0000005f 84156640 00000064 841daa2c e00d9ee4 e00d9e88 [ 3101.204756][T21153] 9e80: 807ba9a4 807b0d7c 00000064 00000001 00000000 e00d9ea4 86b37a90 834e0000 [ 3101.205149][T21153] 9ea0: 00006400 0000000b e00d9e98 00000000 00000000 ef87355b 00000000 860c83c0 [ 3101.205443][T21153] 9ec0: 40946400 200000c0 200000c0 860c83c0 00000003 87214800 e00d9ef4 e00d9ee8 [ 3101.205850][T21153] 9ee0: 807baad4 ef87355b e00d9f14 00000000 860c83c1 40946400 200000c0 860c83c0 [ 3101.206216][T21153] 9f00: 00000003 87214800 e00d9fa4 e00d9f18 80584f98 814073d4 ecac8b10 87214800 [ 3101.206525][T21153] 9f20: e00d9f3c e00d9f30 81ab95fc 81ab94c8 e00d9f54 e00d9f40 8025a030 8028d8bc [ 3101.206834][T21153] 9f40: e00d9fb0 40000000 e00d9f84 e00d9f58 80220a4c 80259fec 00000000 8281d27c [ 3101.207290][T21153] 9f60: e00d9fb0 0013ddc0 ecac8b10 802209a0 00000000 ef87355b e00d9fac 00000000 [ 3101.207707][T21153] 9f80: 00000000 00346310 00000036 8020029c 87214800 00000036 00000000 e00d9fa8 [ 3101.208276][T21153] 9fa0: 80200060 80584d60 00000000 00000000 00000003 40946400 200000c0 00000000 [ 3101.208703][T21153] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f160dc [ 3101.209164][T21153] 9fe0: 76f15e88 76f15e78 00018734 0012fc20 60000010 00000003 00000000 00000000 [ 3101.209775][T21153] Call trace: [ 3101.210367][T21153] [<8141c380>] (subdev_8255_io) from [<8141c0bc>] (subdev_8255_do_config+0x58/0x60) [ 3101.211309][T21153] r7:00004f27 r6:833a0840 r5:00004f27 r4:8141c380 [ 3101.211735][T21153] [<8141c064>] (subdev_8255_do_config) from [<8141c474>] (subdev_8255_io_init+0x88/0x98) [ 3101.212167][T21153] r4:85863000 [ 3101.212331][T21153] [<8141c3ec>] (subdev_8255_io_init) from [<8141c624>] (dev_8255_attach+0x74/0x120) [ 3101.212716][T21153] r7:00004f27 r6:85863000 r5:00000000 r4:833a0840 [ 3101.212946][T21153] [<8141c5b0>] (dev_8255_attach) from [<8140b014>] (comedi_device_attach+0x10c/0x248) [ 3101.213311][T21153] r10:82b2df9c r9:00000000 r8:833a0840 r7:e00d9d90 r6:00000000 r5:833a0840 [ 3101.213616][T21153] r4:829d6444 [ 3101.213769][T21153] [<8140af08>] (comedi_device_attach) from [<8140694c>] (do_devconfig_ioctl+0xd4/0x21c) [ 3101.214384][T21153] r10:833a0870 r9:00000003 r8:87214800 r7:40946400 r6:b5403587 r5:833a0840 [ 3101.215056][T21153] r4:200000c0 [ 3101.215271][T21153] [<81406878>] (do_devconfig_ioctl) from [<814074cc>] (comedi_unlocked_ioctl+0x104/0x1c80) [ 3101.216175][T21153] r8:87214800 r7:40946400 r6:200000c0 r5:833a0840 r4:860c83c0 [ 3101.216450][T21153] [<814073c8>] (comedi_unlocked_ioctl) from [<80584f98>] (sys_ioctl+0x244/0xb5c) [ 3101.216951][T21153] r10:87214800 r9:00000003 r8:860c83c0 r7:200000c0 r6:40946400 r5:860c83c1 [ 3101.217372][T21153] r4:00000000 [ 3101.217581][T21153] [<80584d54>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3101.218005][T21153] Exception stack(0xe00d9fa8 to 0xe00d9ff0) [ 3101.218292][T21153] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 3101.218608][T21153] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f160dc [ 3101.219062][T21153] 9fe0: 76f15e88 76f15e78 00018734 0012fc20 [ 3101.219373][T21153] r10:00000036 r9:87214800 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 3101.219674][T21153] r4:00000000 [ 3101.220146][T21153] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 3101.220533][T19569] usb 2-1: USB disconnect, device number 29 [ 3101.222370][T21153] ---[ end trace 0000000000000000 ]--- [ 3101.227644][T21153] Kernel panic - not syncing: Fatal exception [ 3101.233558][T21153] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:08:39 Registers: info registers vcpu 0 CPU#0 R00=00000004 R01=76880008 R02=00040000 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000003 R08=02194ac0 R09=00000000 R10=00000001 R11=7ee872bc R12=00000001 R13=7ee87148 R14=00000000 R15=769c6590 PSR=20030010 --C- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=400f0013 R02=00000000 R03=8469d400 R04=828efd00 R05=8469d400 R06=8469d9a8 R07=400f0013 R08=00000000 R09=00000000 R10=8469d9a8 R11=eba5dd7c R12=eba5dd70 R13=eba5dd70 R14=81ac7104 R15=81ac7104 PSR=200f0013 --C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000