last executing test programs: 12m46.777221434s ago: executing program 32 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 12m16.933446463s ago: executing program 2 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x40000000, 0x25dfdbfa, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x4000014) 12m16.802091307s ago: executing program 2 (id=657): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 12m15.861614247s ago: executing program 2 (id=675): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m15.776799818s ago: executing program 2 (id=679): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 12m15.618581181s ago: executing program 2 (id=681): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 12m14.86147618s ago: executing program 2 (id=696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 12m14.525469351s ago: executing program 33 (id=696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 11m56.212669176s ago: executing program 0 (id=964): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x2, 0x3, 0xffffffff, 0x1}, 0x10005}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32={[0x0, 0x400000]}}], 0x1c) 11m56.010318646s ago: executing program 0 (id=967): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000659000/0x2000)=nil, &(0x7f0000bd5000/0x1000)=nil, 0x2000}) 11m55.773919254s ago: executing program 0 (id=972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8749ee0d3f510c764131b4218a46cd7c2d3c99ef99d5442a6472f74c677c431784c317607750b0f88b7575faf59a9f3d0cc346d0b5a7dd8949753cf51cb7b70eb86bd53a19b0661b0ec33ad3b24e8bd3ddfe2546ebd4e", 0xb0}, {0x0}], 0x2, 0x0, 0x0, 0x8011}], 0x4924924924924ea, 0x40800) 11m55.673687157s ago: executing program 0 (id=976): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) 11m55.575959593s ago: executing program 0 (id=978): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x6040000, 0x0, 0x0, 0x0) 11m54.911431345s ago: executing program 0 (id=989): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0) 11m54.655752378s ago: executing program 34 (id=989): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0) 8m45.928433611s ago: executing program 3 (id=3622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e471cc80f218dbc1c56a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 8m45.845484074s ago: executing program 3 (id=3624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0xc008800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "0b0100fa00", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c", "0000002bfefeffeb"}, 0x38) 8m45.684528229s ago: executing program 3 (id=3625): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0], 0x38, 0x4000005}}], 0x1, 0x10) 8m45.443930582s ago: executing program 3 (id=3626): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 8m45.40784746s ago: executing program 3 (id=3627): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 8m45.09344145s ago: executing program 3 (id=3632): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) 8m44.990140035s ago: executing program 35 (id=3632): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) 6m1.466866708s ago: executing program 7 (id=5157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 6m0.066822031s ago: executing program 7 (id=5171): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m0.043193869s ago: executing program 7 (id=5172): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000900)="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", 0x386}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 5m59.521385546s ago: executing program 7 (id=5174): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 5m59.395635627s ago: executing program 7 (id=5175): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 5m59.289168048s ago: executing program 7 (id=5176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x8, 0x2, 0x10000340}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}}) io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 5m51.021774444s ago: executing program 1 (id=5239): prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffdfff, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) 5m48.961826638s ago: executing program 1 (id=5249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000023000701feffffff02000000027c0000040042800c00000000000000000914bb140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 5m48.053641664s ago: executing program 1 (id=5251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x12042, 0x1}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 5m46.051390083s ago: executing program 1 (id=5255): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 5m45.888926949s ago: executing program 1 (id=5258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x836, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 5m45.550923456s ago: executing program 1 (id=5265): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x2, r0, 0x0, 0x80000}) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}]) 5m45.398305293s ago: executing program 36 (id=5265): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x2, r0, 0x0, 0x80000}) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}]) 5m44.248339513s ago: executing program 37 (id=5176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x8, 0x2, 0x10000340}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}}) io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 40.962094282s ago: executing program 6 (id=6352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r0, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 38.267711525s ago: executing program 6 (id=6357): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440c0517b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x3, 0x60000000, 0x90, 0x71, &(0x7f0000001c00)="28032c66f908793c8eda07791303680ac7a1ca981d44bea33700000000eab220430e3c46d87ebc9240f068cdc1d7adc21d2bde54de4884fd9e0ab4ce0657258109cf21066659392a6fed0acc174eae0d0e49346ddace19f63a4f85f491469d2aee8444a186ec242edf0e7578855be0e40c4922a80f2193f8aa080c55b08eb7199aa9fb6738c51f9fd057436c78c04ab5", &(0x7f0000001840)="25afc7461e81212f9443beb23c112731df2c56f913f8562c047c4549fc4979f85fe509a3ce48befd5bc4a21994ba85482cb5552c6eb95463869559d331490fcf8e4e235af572ef1181d68b989b845c84436ffade96ce62a5525540162294309a8e76f8ee0a587a031f6af03c2872c95d65", 0x7}, 0x50) readahead(r0, 0xfffffffffffffff8, 0xfffffffffffff470) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000040)={0x30, &(0x7f00000000c0)=[{0x26, '\x00', @buffer={"7190922176407934171021c317eb26a019f948de06651e593867a11b95484403", 0x20}, 0xffffffc0}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x13, 0x19, 0x1, 0x70bd2e, 0x25dfdbfe, {0x1d, 0x1, 0xa}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x40840) r4 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_dev$evdev(&(0x7f0000002f80), 0x3, 0x484000) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 36.961448984s ago: executing program 6 (id=6360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 36.653442103s ago: executing program 6 (id=6362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 35.443872286s ago: executing program 6 (id=6369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 32.828310807s ago: executing program 6 (id=6371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 16.896145936s ago: executing program 38 (id=6371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 15.418356466s ago: executing program 9 (id=6418): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') lseek(r3, 0x5b5f, 0x0) 14.664154268s ago: executing program 9 (id=6420): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.753551596s ago: executing program 9 (id=6426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.881671349s ago: executing program 4 (id=6430): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x8804) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1}, 0x20) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4, 0x2}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x122) write$rfkill(r1, &(0x7f0000000340)={0x10006, 0x0, 0x3, 0x1, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.61131175s ago: executing program 4 (id=6432): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x431) 8.679598513s ago: executing program 4 (id=6433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) 8.665815958s ago: executing program 9 (id=6434): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, 0x0, 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 8.654761505s ago: executing program 5 (id=6435): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000000400)='./file0\x00', 0x60c180, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000100000214000000020a01"], 0x70}}, 0x0) 8.404524996s ago: executing program 5 (id=6436): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) r4 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.151436008s ago: executing program 4 (id=6437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.458377211s ago: executing program 5 (id=6438): io_uring_setup(0x3beb, &(0x7f0000000100)={0x0, 0xe861, 0x0, 0x4, 0x2aa}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) unshare(0x400) r6 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r6, &(0x7f00000044c0)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/182, 0xb6}], 0x1}, 0x2010}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/26, 0x1a}, {0x0}, {&(0x7f0000000680)=""/196, 0xc4}, {0x0}, {&(0x7f0000000900)=""/176, 0xb0}], 0x5, &(0x7f0000001140)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000000a40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000ac0)=""/198, 0xc6}, {0x0}, {&(0x7f0000000f00)=""/235, 0xeb}], 0x3}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002140)=""/140, 0x8c}, {&(0x7f0000006c00)=""/66, 0x42}, {&(0x7f0000002240)=""/28, 0x1c}, {&(0x7f0000002380)=""/176, 0xb0}], 0x4, &(0x7f00000024c0)=""/107, 0x6b}, 0x100}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/247, 0xf7}, 0x10001}, {{0x0, 0x0, 0x0}, 0xc}], 0x6, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 6.134736969s ago: executing program 8 (id=6439): fchdir(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='test_dummy_encryption', &(0x7f0000000180)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 5.332805214s ago: executing program 5 (id=6440): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x82cd, 0x4, 0x9, 0x1, 0xfffdfffffffffffe, 0x4, 0x0, 0x800000000002, 0x821a, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 5.05978785s ago: executing program 8 (id=6441): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 3.816647149s ago: executing program 5 (id=6442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc06, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xa, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x9b3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.558150022s ago: executing program 8 (id=6443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x80002, 0x0, {[0x800, 0x8, 0x2, 0x9, 0x9, 0xfffffffffffffff3, 0x200, 0x81]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) socketpair(0x1e, 0x6, 0x4, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000020200000008001e00010000006c26568bd1a6c71f5ad9d9ddbde8f584792e8fe275d5d051d79dc269ab453a30d5ef57ffeef4c8909f4fdef65a5f718156809e06b5f079b7ae1b4f68325bef95bf15ed4c2053b0cbba90557693a9716c73e2104db5e2fb9fba8713f752e074aa341613c72322f551813b71c4706f93e8512c27bd06a2ddfccf"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r7], 0x6c}}, 0x0) 3.39667384s ago: executing program 5 (id=6444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x4, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x40001) 3.384743694s ago: executing program 4 (id=6445): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x2041, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.347378s ago: executing program 9 (id=6446): socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$uid(0x0, 0x0, 0x4007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 2.598984825s ago: executing program 8 (id=6447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd145, 0x400, 0x1, 0x284}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x5, 0x80000001, 0x0, 0x5, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.338950729s ago: executing program 4 (id=6448): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)={@cgroup=r4, r4, 0x2f, 0x2030, 0x4}, 0x27) 2.337628157s ago: executing program 9 (id=6449): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0xe1) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0x0, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000bec000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.050303361s ago: executing program 8 (id=6450): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x1896, 0x7fff, 0xd3, 0x6, 0x2}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 0s ago: executing program 8 (id=6451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): 5][T18521] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4878'. [ 439.815329][T18527] netlink: 'syz.6.4880': attribute type 10 has an invalid length. [ 439.899985][T18527] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 440.091032][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4885'. [ 440.166156][T18542] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 440.176363][T12550] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 440.202597][T18542] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 440.234190][T18540] macvlan2: entered promiscuous mode [ 440.239514][T18540] macvlan2: entered allmulticast mode [ 440.245963][T18540] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 440.297036][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4886'. [ 440.338062][T12550] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.348878][T12550] usb 8-1: config 0 has no interfaces? [ 440.360471][T12550] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.371303][T12550] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.379819][T12550] usb 8-1: Product: syz [ 440.384975][T12550] usb 8-1: Manufacturer: syz [ 440.392230][T12550] usb 8-1: config 0 descriptor?? [ 440.622817][T12550] usb 8-1: USB disconnect, device number 32 [ 440.823307][T18562] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 441.359242][T18572] team0: Port device vlan3 added [ 441.581081][ T5966] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 441.687774][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 441.747221][ T5966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.767636][ T5966] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 441.780770][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.823758][ T5966] usb 8-1: config 0 descriptor?? [ 441.850825][ T5966] pwc: Askey VC010 type 2 USB webcam detected. [ 441.881575][T18584] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 442.025390][T18586] ref_ctr increment failed for inode: 0x1763 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802dcc8c40 [ 442.256723][ T5966] pwc: recv_control_msg error -32 req 02 val 2b00 [ 442.264183][ T5966] pwc: recv_control_msg error -32 req 02 val 2700 [ 442.271572][ T5966] pwc: recv_control_msg error -32 req 02 val 2c00 [ 442.284133][ T5966] pwc: recv_control_msg error -32 req 04 val 1000 [ 442.301726][ T5966] pwc: recv_control_msg error -32 req 04 val 1300 [ 442.445875][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4906'. [ 442.521989][ T5966] pwc: recv_control_msg error -32 req 02 val 2000 [ 442.583468][T18603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4909'. [ 442.649916][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4909'. [ 442.665458][T18601] binder: 18600:18601 ioctl c0306201 2000000003c0 returned -14 [ 442.738197][ T5966] pwc: recv_control_msg error -71 req 04 val 1500 [ 442.799300][T18606] random: crng reseeded on system resumption [ 442.817287][ T30] audit: type=1400 audit(1771647038.862:1054): avc: denied { write } for pid=18604 comm="syz.6.4910" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 442.880367][ T5966] pwc: recv_control_msg error -71 req 02 val 2500 [ 443.058091][ T5966] pwc: recv_control_msg error -71 req 02 val 2400 [ 443.075236][ T5966] pwc: recv_control_msg error -71 req 02 val 2600 [ 443.092893][ T30] audit: type=1400 audit(1771647038.862:1055): avc: denied { open } for pid=18604 comm="syz.6.4910" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 443.132249][ T5966] pwc: recv_control_msg error -71 req 02 val 2900 [ 443.143992][T18608] netlink: 'syz.5.4911': attribute type 1 has an invalid length. [ 443.167729][ T5966] pwc: recv_control_msg error -71 req 02 val 2800 [ 443.175742][ T5966] pwc: recv_control_msg error -71 req 04 val 1100 [ 443.184368][ T5966] pwc: recv_control_msg error -71 req 04 val 1200 [ 443.251036][ T5966] pwc: Registered as video103. [ 443.276284][ T5966] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input50 [ 443.306728][ T5966] usb 8-1: USB disconnect, device number 33 [ 443.336963][T18610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.395316][T18616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4911'. [ 443.662342][T18610] bond3: (slave bond4): making interface the new active one [ 443.695585][T18620] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4914'. [ 443.749733][T18610] bond3: (slave bond4): Enslaving as an active interface with an up link [ 443.922292][T18608] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 443.945303][T18616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.952797][T18619] ip6tnl0: Caught tx_queue_len zero misconfig [ 444.036821][ T30] audit: type=1400 audit(1771647040.102:1056): avc: denied { create } for pid=18627 comm="syz.8.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 444.071121][ T5966] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 444.120820][T18637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.143367][ T30] audit: type=1400 audit(1771647040.212:1057): avc: denied { bind } for pid=18627 comm="syz.8.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 444.157370][T18638] overlayfs: failed to clone upperpath [ 444.243065][ T5966] usb 8-1: Using ep0 maxpacket: 32 [ 444.254380][ T5966] usb 8-1: config 0 has no interfaces? [ 444.268646][ T5966] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 444.297143][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.316869][ T5966] usb 8-1: config 0 descriptor?? [ 444.328797][ T30] audit: type=1400 audit(1771647040.402:1058): avc: denied { accept } for pid=18642 comm="syz.6.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 444.535501][T12549] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 444.638799][ T792] usb 8-1: USB disconnect, device number 34 [ 444.712077][T12549] usb 9-1: Using ep0 maxpacket: 16 [ 444.718848][T12549] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 444.731785][T12549] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 444.746388][T12549] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 444.755821][T12549] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.764193][T12549] usb 9-1: Product: syz [ 444.771601][T12549] usb 9-1: Manufacturer: syz [ 444.777334][T12549] usb 9-1: SerialNumber: syz [ 444.787431][T12549] usb 9-1: config 0 descriptor?? [ 444.800138][T12549] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 444.809910][T12549] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 444.817807][ T30] audit: type=1326 audit(1771647040.882:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.5.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7fc00000 [ 445.037382][T18667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4933'. [ 445.050494][T18667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18667 comm=syz.1.4933 [ 445.063595][T18667] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4933'. [ 445.074089][T18667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4933'. [ 445.490429][ T30] audit: type=1326 audit(1771647041.560:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.5.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcbdd59c629 code=0x7fc00000 [ 445.497429][T12549] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 445.524592][T12549] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 445.955018][T12549] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 445.999474][T12549] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 446.046522][T12549] em28xx 9-1:0.0: No AC97 audio processor [ 446.246721][T12549] usb 9-1: USB disconnect, device number 9 [ 446.257385][ T30] audit: type=1326 audit(1771647041.560:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.5.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7fc00000 [ 446.302881][T12549] em28xx 9-1:0.0: Disconnecting em28xx [ 446.331997][T12549] em28xx 9-1:0.0: Freeing device [ 446.976007][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 447.018717][T18689] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.129637][ T3593] bond0: (slave bond_slave_0): interface is now down [ 448.168617][ T3593] bond0: (slave bond_slave_1): interface is now down [ 448.221004][ T3593] bond0: now running without any active interface! [ 448.257719][ T3489] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 448.290433][ T3489] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 448.321743][ T3489] bond0: active interface up! [ 448.374812][T18723] netlink: 'syz.7.4953': attribute type 1 has an invalid length. [ 448.427937][T18723] bond3: (slave geneve4): making interface the new active one [ 448.438209][T18723] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 448.447264][ T3593] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 448.456576][ T3593] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 448.469055][ T3593] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 448.479164][ T3593] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 448.644310][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4958'. [ 450.204858][ T30] audit: type=1400 audit(1771647046.272:1062): avc: denied { watch watch_reads } for pid=18786 comm="syz.5.4972" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 452.432745][T18821] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4982'. [ 454.077284][ T5966] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 454.259228][ T5966] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.279390][T18865] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.329914][ T5966] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 454.362843][ T5966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 454.383974][ T5966] usb 9-1: Product: syz [ 454.397023][ T5966] usb 9-1: Manufacturer: syz [ 454.411843][ T5966] usb 9-1: SerialNumber: syz [ 454.672496][ T5966] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 454.965612][ T5966] usb 9-1: USB disconnect, device number 10 [ 454.986004][ T5966] usblp0: removed [ 455.369076][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5008'. [ 456.122710][T18917] 9pnet_fd: p9_fd_create_unix (18917): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 456.276093][ T5966] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 456.537595][ T5966] usb 8-1: unable to get BOS descriptor or descriptor too short [ 456.559532][ T5966] usb 8-1: not running at top speed; connect to a high speed hub [ 456.587030][ T5966] usb 8-1: config 2 has an invalid interface number: 212 but max is 1 [ 456.598423][ T5966] usb 8-1: config 2 has an invalid interface number: 226 but max is 1 [ 456.613437][ T5966] usb 8-1: config 2 has no interface number 0 [ 456.652637][ T5966] usb 8-1: config 2 has no interface number 1 [ 456.669374][ T5966] usb 8-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 456.681976][ T5966] usb 8-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 456.693558][ T5966] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 456.797830][ T5966] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64 [ 456.809450][ T5966] usb 8-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 456.822794][ T5966] usb 8-1: config 2 interface 212 has no altsetting 0 [ 456.834159][ T5966] usb 8-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 456.928499][ T5966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.958211][ T5966] usb 8-1: Product: syz [ 456.971835][ T5966] usb 8-1: Manufacturer: syz [ 456.981368][ T5966] usb 8-1: SerialNumber: syz [ 457.207717][T18910] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5014'. [ 457.225764][T18910] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5014'. [ 457.241379][T18910] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5014'. [ 457.334879][ T5966] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.226/input/input51 [ 457.378591][ T5966] usb 8-1: USB disconnect, device number 35 [ 457.384565][ C0] xpad 8-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 458.005034][T12549] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 458.238843][T12549] usb 9-1: Using ep0 maxpacket: 32 [ 458.276637][T12549] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 458.300137][T12549] usb 9-1: config 0 has no interface number 0 [ 458.312129][T12549] usb 9-1: config 0 interface 184 has no altsetting 0 [ 458.345219][ T5966] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 458.345364][T12549] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 458.362527][T12549] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.377715][T12549] usb 9-1: Product: syz [ 458.383514][T12549] usb 9-1: Manufacturer: syz [ 458.392687][T12549] usb 9-1: SerialNumber: syz [ 458.400429][T12549] usb 9-1: config 0 descriptor?? [ 458.528657][ T5966] usb 8-1: Using ep0 maxpacket: 8 [ 458.535609][ T5966] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 458.543692][ T5966] usb 8-1: config 0 has no interface number 0 [ 458.555156][ T5966] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.574448][ T5966] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 458.593975][ T5966] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.605079][ T5966] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.633397][ T5966] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 458.653634][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.666836][ T5966] usb 8-1: config 0 descriptor?? [ 458.675776][ T5966] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 458.919827][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5042'. [ 458.971304][ T792] usb 8-1: USB disconnect, device number 36 [ 458.971365][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 458.990656][ T792] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 458.990661][T18971] ldusb: No device or device unplugged -19 [ 459.052912][T18999] bridge0: left promiscuous mode [ 459.061529][T18999] bridge0: entered allmulticast mode [ 459.453513][T12549] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 459.599098][T12549] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.435237][T12549] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 460.453746][T12549] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 460.463320][T12549] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 460.494064][T12549] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 460.531141][T12549] usb 9-1: USB disconnect, device number 11 [ 460.861531][T19037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.869747][T19037] IPv6: NLM_F_CREATE should be set when creating new route [ 461.010471][T19037] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.017770][T19037] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.067904][T19041] overlayfs: failed to clone upperpath [ 461.183072][T19037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.308462][T19037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.561938][T19054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.797413][ T3593] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.817701][ T3593] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.830703][ T3593] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 461.846737][T19061] lo: Caught tx_queue_len zero misconfig [ 461.886902][ T3593] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.901244][ T3593] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.910672][ T3593] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 461.920682][ T3593] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.932407][ T3593] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.942119][ T3593] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 461.951743][ T3593] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.961865][ T3593] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.971792][ T3593] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 462.029024][T19072] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.617342][T19083] fuse: Bad value for 'fd' [ 463.303236][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5077'. [ 463.849405][T19107] overlayfs: failed to clone upperpath [ 465.133066][T19128] SELinux: failed to load policy [ 465.237902][T19129] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5084'. [ 465.488130][T19136] netlink: 'syz.1.5087': attribute type 13 has an invalid length. [ 465.580582][T19138] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.588539][T19136] netlink: 'syz.1.5087': attribute type 17 has an invalid length. [ 466.110088][T19136] 8021q: adding VLAN 0 to HW filter on device .` [ 466.164986][T19136] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.371265][T19136] batman_adv: batadv0: Interface activated: dummy0 [ 466.466476][T19136] batadv0: mtu less than device minimum [ 466.501394][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.512996][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.523786][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.534586][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.545372][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.556139][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.566909][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.577661][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 466.588423][T19136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 469.181765][T19176] ip6_vti0 speed is unknown, defaulting to 1000 [ 469.596505][T19182] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 469.646250][T19182] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 470.358888][ T5966] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 470.519125][ T5966] usb 8-1: Using ep0 maxpacket: 8 [ 470.549529][ T5966] usb 8-1: unable to get BOS descriptor or descriptor too short [ 470.596207][ T5966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.659373][ T5966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 471.015016][ T5966] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 471.221286][ T5966] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 471.236264][ T5966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.254444][ T5966] usb 8-1: Product: syz [ 471.280561][ T5966] usb 8-1: Manufacturer: syz [ 471.336281][ T5966] usb 8-1: SerialNumber: syz [ 471.508778][ T5966] usb 8-1: config 0 descriptor?? [ 471.556667][ T5966] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.864233][ T5966] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 472.003103][ T9393] udevd[9393]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.003295][ T5966] usb 8-1: USB disconnect, device number 37 [ 472.414148][T19229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5117'. [ 472.936907][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5121'. [ 473.042117][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5121'. [ 473.401065][ T30] audit: type=1400 audit(1771647069.474:1063): avc: denied { setattr } for pid=19256 comm="syz.1.5126" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.205643][ T30] audit: type=1804 audit(1771647071.255:1064): pid=19286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.5131" name="file0" dev="ramfs" ino=66361 res=1 errno=0 [ 475.514790][T19294] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 477.437274][T19335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5148'. [ 477.508054][T19337] uprobe: syz.5.5147:19337 failed to unregister, leaking uprobe [ 477.608232][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5148'. [ 478.920009][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5155'. [ 479.093889][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5155'. [ 480.470957][T19411] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5166'. [ 480.601044][ T5966] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 480.765191][ T5966] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.112949][ T5966] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.122846][ T5966] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 481.132149][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.188072][ T5966] hub 9-1:4.0: USB hub found [ 481.384853][ T5966] hub 9-1:4.0: 2 ports detected [ 481.389778][ T5966] usb 9-1: selecting invalid altsetting 1 [ 481.404469][ T5966] hub 9-1:4.0: Using single TT (err -22) [ 481.435319][ T30] audit: type=1400 audit(1771647077.528:1065): avc: denied { read } for pid=19432 comm="syz.7.5175" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 481.488278][ T30] audit: type=1400 audit(1771647077.528:1066): avc: denied { open } for pid=19432 comm="syz.7.5175" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 481.594092][ T30] audit: type=1400 audit(1771647077.548:1067): avc: denied { ioctl } for pid=19432 comm="syz.7.5175" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 481.852509][ T5966] usb 9-1: USB disconnect, device number 12 [ 481.947770][T19440] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5179'. [ 481.979197][T19440] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5179'. [ 481.988683][T19440] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5179'. [ 482.052465][ T30] audit: type=1400 audit(1771647078.138:1068): avc: denied { unmount } for pid=19448 comm="syz.5.5181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 483.110470][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 483.125556][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 483.183840][T19483] ceph: No mds server is up or the cluster is laggy [ 483.966102][ T5817] Bluetooth: hci1: unexpected event for opcode 0x080c [ 484.052023][ T30] audit: type=1400 audit(1771647080.139:1069): avc: denied { listen } for pid=19501 comm="syz.5.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 484.154870][ T30] audit: type=1400 audit(1771647080.139:1070): avc: denied { getopt } for pid=19501 comm="syz.5.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.254903][T19514] netlink: 'syz.8.5203': attribute type 16 has an invalid length. [ 484.271906][T19514] netlink: 'syz.8.5203': attribute type 17 has an invalid length. [ 484.320296][ T30] audit: type=1400 audit(1771647080.409:1071): avc: denied { mounton } for pid=19510 comm="syz.6.5202" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.359323][T19514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.368895][T19514] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.376855][T19519] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5204'. [ 484.391464][T19514] net_ratelimit: 11 callbacks suppressed [ 484.391474][T19514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.444336][T19519] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.464523][T19519] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.475074][T19519] .` (unregistering): Released all slaves [ 485.783025][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5212'. [ 486.028274][ T30] audit: type=1804 audit(1771647082.120:1072): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5215" name="file0" dev="ramfs" ino=68843 res=1 errno=0 [ 487.234256][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5222'. [ 487.326226][ T3489] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.326333][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5222'. [ 487.338136][ T3489] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.420048][ T3489] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.450611][ T3489] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.463669][ T30] audit: type=1400 audit(1771647083.561:1073): avc: denied { firmware_load } for pid=19580 comm="syz.5.5224" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 487.568571][T19582] syz.5.5224 (19582) used greatest stack depth: 19672 bytes left [ 487.964557][ T30] audit: type=1400 audit(1771647084.051:1074): avc: denied { audit_read } for pid=19592 comm="syz.8.5228" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 488.373303][T19604] virtio-fs: tag not found [ 489.221122][T19620] netlink: 'syz.6.5235': attribute type 16 has an invalid length. [ 489.229014][T19620] netlink: 'syz.6.5235': attribute type 17 has an invalid length. [ 489.276010][T19620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.285790][T19620] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.298576][T19620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.400659][T19624] cgroup: Unknown subsys name 'cpuset' [ 489.441748][T19624] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.881812][T19634] netlink: 'syz.5.5241': attribute type 39 has an invalid length. [ 494.760702][T19685] overlayfs: failed to clone upperpath [ 495.083438][T19699] syz_tun: entered allmulticast mode [ 495.276254][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5263'. [ 495.447477][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.458199][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.467056][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.476047][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.483602][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.540010][T19715] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.892692][T19715] chnl_net:caif_netlink_parms(): no params data found [ 496.002375][T19715] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.010308][T19715] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.018382][T19715] bridge_slave_0: entered allmulticast mode [ 496.036189][T19715] bridge_slave_0: entered promiscuous mode [ 496.048929][T19715] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.069038][T19715] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.076981][T19715] bridge_slave_1: entered allmulticast mode [ 496.084361][T19715] bridge_slave_1: entered promiscuous mode [ 496.118274][T19715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.132276][T19715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.164395][T19715] team0: Port device team_slave_0 added [ 496.172663][T19715] team0: Port device team_slave_1 added [ 496.200084][T19715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.207396][T19715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.301769][T19715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.335103][T19733] overlayfs: failed to clone upperpath [ 496.340966][T19715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.361319][T19715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.389009][T19715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.498248][T19715] hsr_slave_0: entered promiscuous mode [ 497.504255][T19715] hsr_slave_1: entered promiscuous mode [ 497.510003][ T5814] Bluetooth: hci1: command tx timeout [ 497.525616][T19715] debugfs: 'hsr0' already exists in 'hsr' [ 497.531353][T19715] Cannot create hsr debugfs directory [ 497.943470][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.954095][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.962661][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.970445][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.978102][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.101783][T19715] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 498.137634][T19715] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 498.173633][T19753] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.180491][T19715] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 498.188696][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5281'. [ 498.204045][T19715] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 499.578584][ T5817] Bluetooth: hci1: command tx timeout [ 499.765879][T19715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.090555][ T5817] Bluetooth: hci5: command tx timeout [ 500.172284][T19715] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.303260][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.310376][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.370356][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.377442][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.494070][T19796] Invalid argument reading file caps for ./file0 [ 500.608701][T19715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.624137][T19715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.639959][T19753] chnl_net:caif_netlink_parms(): no params data found [ 501.015454][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.021978][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.379587][T19753] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.431680][T12549] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 501.444177][T19753] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.451405][T19753] bridge_slave_0: entered allmulticast mode [ 501.495357][T19753] bridge_slave_0: entered promiscuous mode [ 501.502771][T19753] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.513321][T19753] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.520540][T19753] bridge_slave_1: entered allmulticast mode [ 501.544449][T19753] bridge_slave_1: entered promiscuous mode [ 501.614932][T12549] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.631730][T12549] usb 9-1: config 0 has no interface number 0 [ 501.645888][T19753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.655680][ T5817] Bluetooth: hci1: command tx timeout [ 501.661651][T12549] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 501.683188][T12549] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 501.704842][T19753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.718978][T12549] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 501.747976][T12549] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.786057][T12549] usb 9-1: config 0 descriptor?? [ 501.810781][T19801] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 501.821446][T19753] team0: Port device team_slave_0 added [ 501.836255][T19715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.845988][T12549] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 501.865318][T19753] team0: Port device team_slave_1 added [ 501.937018][T19753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.944520][T19753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.986107][T19753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.038278][T19753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.057694][T19753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.095578][T19753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.115565][ T3489] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 502.125425][ T3489] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 502.142543][ T3489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 502.144162][ T5817] Bluetooth: hci5: command tx timeout [ 502.153078][ T3489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 502.203775][T12549] usb 9-1: USB disconnect, device number 13 [ 502.203866][ C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 502.462943][T19753] hsr_slave_0: entered promiscuous mode [ 502.469577][T19753] hsr_slave_1: entered promiscuous mode [ 502.476606][T19753] debugfs: 'hsr0' already exists in 'hsr' [ 502.482320][T19753] Cannot create hsr debugfs directory [ 503.277988][T19715] veth0_vlan: entered promiscuous mode [ 503.315659][T19715] veth1_vlan: entered promiscuous mode [ 503.438009][ T30] audit: type=1400 audit(1771647099.539:1075): avc: denied { create } for pid=19836 comm="syz.5.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 503.675594][T19715] veth0_macvtap: entered promiscuous mode [ 503.726679][T19715] veth1_macvtap: entered promiscuous mode [ 503.780097][ T5817] Bluetooth: hci1: command tx timeout [ 504.147794][T19715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.228138][ T5817] Bluetooth: hci5: command tx timeout [ 504.383311][T19715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.520817][ T3580] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.529673][ T3580] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.590357][ T30] audit: type=1400 audit(1771647100.679:1076): avc: denied { connect } for pid=19877 comm="syz.5.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 504.721626][ T3580] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.730426][ T3580] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.040498][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.111851][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.462751][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.521548][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.608540][ T30] audit: type=1400 audit(1771647101.710:1077): avc: denied { mounton } for pid=19715 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 505.654280][T19753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 505.739272][T19753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.794503][T19753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.838127][T19753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.184284][T19753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.261150][ T30] audit: type=1400 audit(1771647102.320:1078): avc: denied { ioctl } for pid=19924 comm="syz.8.5314" path="socket:[70237]" dev="sockfs" ino=70237 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 506.293330][T19753] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.300863][ T5817] Bluetooth: hci5: command tx timeout [ 506.355755][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.362905][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.406070][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.413242][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.658780][T19753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.729287][T19753] veth0_vlan: entered promiscuous mode [ 508.773740][T19753] veth1_vlan: entered promiscuous mode [ 508.849171][T19753] veth0_macvtap: entered promiscuous mode [ 508.890946][T19753] veth1_macvtap: entered promiscuous mode [ 509.052125][T19753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.093339][T19753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.189823][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.218869][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.267014][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.302290][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.591354][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.648168][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.777767][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.818938][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.358989][T18288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 510.532677][T18288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.574065][T18288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.605857][T18288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.634745][T18288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.667196][T18288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.692789][T18288] usb 5-1: config 0 descriptor?? [ 511.165450][T18288] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 511.195919][T18288] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 511.230948][T18288] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 512.623226][ T30] audit: type=1400 audit(1771647108.723:1079): avc: denied { create } for pid=20062 comm="syz.8.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 513.244120][T12549] usb 5-1: USB disconnect, device number 2 [ 513.561843][T20099] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 513.646268][T20099] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 513.675247][T20099] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 514.350574][ T30] audit: type=1326 audit(1771647110.434:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20114 comm="syz.4.5353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54cc39c629 code=0x0 [ 515.784554][T20130] netlink: 'syz.6.5355': attribute type 2 has an invalid length. [ 515.958987][T20130] netlink: 'syz.6.5355': attribute type 2 has an invalid length. [ 517.136637][T20163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5365'. [ 518.614678][ T5922] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 518.766676][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 518.779931][ T5922] usb 5-1: not running at top speed; connect to a high speed hub [ 518.842314][ T5922] usb 5-1: config 7 has an invalid interface number: 84 but max is 0 [ 518.854872][ T5922] usb 5-1: config 7 has no interface number 0 [ 518.863399][ T5922] usb 5-1: config 7 interface 84 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 518.893877][ T5922] usb 5-1: config 7 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 518.961281][ T5922] usb 5-1: config 7 interface 84 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 519.408529][ T5922] usb 5-1: string descriptor 0 read error: -22 [ 519.418176][ T5922] usb 5-1: New USB device found, idVendor=1199, idProduct=0112, bcdDevice=aa.e3 [ 519.444285][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.482905][ T5922] sierra 5-1:7.84: Sierra USB modem converter detected [ 519.708189][ T5922] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 519.774502][ T5922] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 519.824894][ T5922] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 520.156202][ T5922] usb 5-1: USB disconnect, device number 3 [ 520.267039][ T5922] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 520.365342][ T5922] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 520.571240][ T5922] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 521.061638][ T5922] sierra 5-1:7.84: device disconnected [ 522.662893][T20249] 9p: Bad value for 'rfdno' [ 525.438225][ T5922] IPVS: starting estimator thread 0... [ 525.561339][T20282] IPVS: using max 46 ests per chain, 110400 per kthread [ 531.130148][T20374] overlayfs: failed to clone upperpath [ 534.038394][T20407] overlayfs: failed to clone lowerpath [ 536.896942][T20450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5433'. [ 536.959855][T20450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20450 comm=syz.5.5433 [ 537.606656][T20467] netlink: 'syz.6.5440': attribute type 27 has an invalid length. [ 538.896190][ T30] audit: type=1326 audit(1771647135.017:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.6.5447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x0 [ 539.224838][T20492] SET target dimension over the limit! [ 542.196876][T20546] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5466'. [ 542.427371][T20546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20546 comm=syz.9.5466 [ 543.456304][ T30] audit: type=1804 audit(1771647139.559:1082): pid=20582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.5474" name="/newroot/23/file0" dev="tmpfs" ino=137 res=1 errno=0 [ 545.587541][T20619] ip6_vti0 speed is unknown, defaulting to 1000 [ 547.506328][ T30] audit: type=1400 audit(1771647143.611:1083): avc: denied { read write } for pid=20641 comm="syz.9.5490" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 547.506392][ T30] audit: type=1400 audit(1771647143.611:1084): avc: denied { open } for pid=20641 comm="syz.9.5490" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 547.506431][ T30] audit: type=1400 audit(1771647143.621:1085): avc: denied { ioctl } for pid=20641 comm="syz.9.5490" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 548.331542][ T30] audit: type=1326 audit(1771647144.461:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20651 comm="syz.5.5493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x0 [ 548.721639][ T5922] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 548.899538][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 548.920629][ T5922] usb 5-1: config 0 has no interfaces? [ 548.934066][ T5922] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 548.954519][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.980775][ T5922] usb 5-1: config 0 descriptor?? [ 549.397939][T12549] usb 5-1: USB disconnect, device number 4 [ 550.801527][T20685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5503'. [ 551.087292][T20687] netlink: 'syz.4.5505': attribute type 1 has an invalid length. [ 551.148473][T20687] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5505'. [ 551.819553][ T58] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 551.994003][T20698] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.274268][ T58] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 552.315841][ T58] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 552.355855][ T58] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 552.473357][T20698] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.880502][T20698] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.079913][T20698] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.730808][T20724] netlink: 'syz.9.5515': attribute type 1 has an invalid length. [ 553.741082][T20724] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5515'. [ 553.772884][T20724] NCSI netlink: No device for ifindex 4294967295 [ 553.908740][T20729] tipc: Enabling of bearer rejected, already enabled [ 558.354302][T20792] sctp: [Deprecated]: syz.6.5538 (pid 20792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.354302][T20792] Use struct sctp_sack_info instead [ 559.936556][T20813] binder_alloc: 20812: pid 20812 spamming oneway? 1 buffers allocated for a total size of 4096 [ 559.969492][T20813] binder_alloc: 20812: pid 20812 spamming oneway? 2 buffers allocated for a total size of 5120 [ 560.630135][T20826] netlink: 'syz.4.5547': attribute type 8 has an invalid length. [ 562.322441][T20852] overlayfs: failed to clone upperpath [ 562.503664][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.543976][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.108670][T18288] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 563.742954][T18288] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 563.752623][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.761761][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.776189][T20865] netlink: 'syz.6.5560': attribute type 2 has an invalid length. [ 563.785102][T20865] netlink: 'syz.6.5560': attribute type 1 has an invalid length. [ 563.854143][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 564.034348][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.094167][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.113482][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 564.150462][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.167459][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.187278][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 564.219471][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.247087][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.361280][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 564.875758][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.906558][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.006554][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 565.028495][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.075347][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.124052][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 565.152353][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.182342][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.230650][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 565.258774][T18288] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.271467][T18288] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.361502][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 565.395292][T18288] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 565.409093][T18288] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 565.487111][T18288] usb 9-1: Product: syz [ 565.509618][T18288] usb 9-1: Manufacturer: syz [ 565.520051][T18288] usb 9-1: SerialNumber: syz [ 565.542500][T18288] usb 9-1: config 0 descriptor?? [ 565.673598][T18288] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 566.152776][T18288] usb 9-1: USB disconnect, device number 14 [ 566.178456][T18288] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 567.973477][ T30] audit: type=1400 audit(1771647164.111:1087): avc: denied { connect } for pid=20923 comm="syz.4.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 568.095737][ T30] audit: type=1400 audit(1771647164.171:1088): avc: denied { bind } for pid=20923 comm="syz.4.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 568.196901][ T30] audit: type=1400 audit(1771647164.171:1089): avc: denied { listen } for pid=20923 comm="syz.4.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 568.449043][ T30] audit: type=1400 audit(1771647164.171:1090): avc: denied { accept } for pid=20923 comm="syz.4.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 568.746882][ T30] audit: type=1400 audit(1771647164.882:1091): avc: denied { ioctl } for pid=20935 comm="syz.4.5580" path="socket:[73549]" dev="sockfs" ino=73549 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 569.196303][T20945] ip6_vti0 speed is unknown, defaulting to 1000 [ 570.633660][T20957] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.235493][ T30] audit: type=1326 audit(1771647167.363:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.9.5585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132839c629 code=0x0 [ 572.852127][T20986] netlink: 'syz.6.5595': attribute type 1 has an invalid length. [ 572.927607][T20986] netlink: 'syz.6.5595': attribute type 4 has an invalid length. [ 572.956383][T20986] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5595'. [ 573.014138][T20986] netlink: 'syz.6.5595': attribute type 1 has an invalid length. [ 573.022138][T20986] netlink: 'syz.6.5595': attribute type 4 has an invalid length. [ 573.029926][T20986] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5595'. [ 575.459993][T21014] netlink: 'syz.5.5603': attribute type 1 has an invalid length. [ 575.550758][T21022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5603'. [ 575.729975][T21014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 575.751001][T21022] bond5: entered promiscuous mode [ 575.756349][T21022] bond5: entered allmulticast mode [ 575.772806][T21024] bond5: (slave dummy0): making interface the new active one [ 575.781297][T21024] dummy0: entered allmulticast mode [ 575.788026][T21024] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 579.285434][ T30] audit: type=1800 audit(1771647175.417:1093): pid=21059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5612" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 580.241334][T21071] fuse: Invalid rootmode [ 582.015365][T21102] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 582.874200][T15624] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 582.893213][T15624] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 582.902520][ T981] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 582.912961][ T3593] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 585.983020][T21148] netlink: 'syz.8.5638': attribute type 1 has an invalid length. [ 586.077096][T21148] bond1: entered promiscuous mode [ 586.085933][T21148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.091443][ T30] audit: type=1400 audit(1771647182.230:1094): avc: denied { create } for pid=21147 comm="syz.8.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 586.101763][T21149] bond1: (slave bridge3): making interface the new active one [ 586.120675][T21149] bridge3: entered promiscuous mode [ 586.141786][T21149] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 586.159212][T21151] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 586.200872][ T30] audit: type=1400 audit(1771647182.230:1095): avc: denied { write } for pid=21147 comm="syz.8.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 586.240966][T21151] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 587.165293][T21163] netlink: 'syz.6.5642': attribute type 1 has an invalid length. [ 587.304645][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5642'. [ 587.415757][T21164] gre2: entered promiscuous mode [ 587.450799][T21164] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 587.503632][T21164] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 587.602472][T21164] bond6: (slave gre2): making interface the new active one [ 587.613146][T21164] bond6: (slave gre2): Enslaving as an active interface with an up link [ 588.090588][T21167] bond6 (unregistering): (slave gre2): Releasing backup interface [ 588.194810][T21167] bond6 (unregistering): Released all slaves [ 590.334997][ T30] audit: type=1326 audit(1771647186.472:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21207 comm="syz.6.5655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x0 [ 591.256446][T21223] xt_ecn: cannot match TCP bits for non-tcp packets [ 591.324042][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5659'. [ 592.162147][T21228] bridge4: port 1(veth17) entered blocking state [ 592.220391][T21228] bridge4: port 1(veth17) entered disabled state [ 592.245979][T21228] veth17: entered allmulticast mode [ 592.276999][T21228] veth17: entered promiscuous mode [ 592.354722][T21230] bridge4: port 2(veth19) entered blocking state [ 592.368448][T21230] bridge4: port 2(veth19) entered disabled state [ 592.375144][T21230] veth19: entered allmulticast mode [ 592.408857][T21230] veth19: entered promiscuous mode [ 594.529414][ T30] audit: type=1400 audit(1771647190.634:1097): avc: denied { getopt } for pid=21239 comm="syz.5.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 597.237524][T21295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 597.247814][T21295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 597.615181][T12549] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 597.865484][T12549] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 598.301746][T12549] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.310152][T12549] usb 9-1: Product: syz [ 598.314327][T12549] usb 9-1: Manufacturer: syz [ 598.318987][T12549] usb 9-1: SerialNumber: syz [ 599.909237][T12549] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 599.933993][T12549] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 600.761633][T21346] ptrace attach of "./syz-executor exec"[6274] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ [ 601.175791][ T30] audit: type=1326 audit(1771647197.258:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.9.5694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132839c629 code=0x0 [ 602.036175][T12549] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 602.344038][T12549] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 602.405688][T12549] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 602.453470][T12549] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 602.507592][T12549] usb 9-1: USB disconnect, device number 15 [ 602.842753][T12549] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 603.142459][T12549] usb 9-1: Using ep0 maxpacket: 32 [ 603.398610][T12549] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 603.412843][T12549] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 603.429254][T12549] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 603.449213][T12549] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 603.502748][T12549] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 603.976498][T12549] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.008621][T12549] usb 9-1: Product: syz [ 604.014558][T12549] usb 9-1: Manufacturer: syz [ 604.064008][T12549] usb 9-1: SerialNumber: syz [ 604.093659][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 604.112224][T12549] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input53 [ 605.607194][T12549] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 605.617494][T12549] (id 0x00) [ 605.815459][T12549] rc_core: IR keymap rc-imon-pad not found [ 605.888140][ T30] audit: type=1400 audit(1771647202.040:1099): avc: denied { override_creds } for pid=21388 comm="syz.9.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 605.961501][T12549] Registered IR keymap rc-empty [ 606.185795][T12549] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 606.206489][T12549] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 606.275996][T12549] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 606.326628][T12549] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input54 [ 606.435446][T12549] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:16> initialized [ 607.486436][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5717'. [ 607.490632][T21418] blkio.reset_stats is deprecated [ 607.502832][T21412] imon:send_packet: task interrupted [ 607.508306][T21412] imon:send_packet: packet tx failed (-512) [ 607.519192][T21412] imon:vfd_write: send packet #4 failed [ 607.563441][ T10] usb 9-1: USB disconnect, device number 16 [ 609.522753][T21423] bond6: (slave vcan1): refused to change device type [ 609.738370][T21438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5722'. [ 609.886756][T21440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21440 comm=syz.4.5722 [ 612.145455][ T30] audit: type=1326 audit(1771647208.293:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 612.323051][ T30] audit: type=1326 audit(1771647208.293:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 612.347390][ T30] audit: type=1326 audit(1771647208.293:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 612.397623][ T30] audit: type=1326 audit(1771647208.293:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 612.914416][ T30] audit: type=1326 audit(1771647208.323:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 612.958299][ T30] audit: type=1326 audit(1771647208.323:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 612.991303][T21495] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 613.004646][T21495] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 613.025587][ T30] audit: type=1326 audit(1771647208.323:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 613.280998][ T30] audit: type=1326 audit(1771647208.323:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 613.458033][ T30] audit: type=1326 audit(1771647208.323:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 613.537038][ T30] audit: type=1326 audit(1771647208.323:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21486 comm="syz.6.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb59019c629 code=0x7ffc0000 [ 616.217092][T21540] bridge_slave_1: default FDB implementation only supports local addresses [ 617.689657][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5759'. [ 617.733263][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5759'. [ 617.959706][T21568] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5764'. [ 618.460319][T21568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21568 comm=syz.5.5764 [ 620.799535][T21589] Bluetooth: hci1: command 0x0406 tx timeout [ 620.799827][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 623.952803][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.959113][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.241576][T21649] openvswitch: netlink: Flow key attr not present in new flow. [ 626.141492][T15624] team0: left allmulticast mode [ 626.228700][T15624] team_slave_0: left allmulticast mode [ 626.236961][T15624] team_slave_1: left allmulticast mode [ 626.285375][T15624] bridge1: left allmulticast mode [ 626.416490][T15624] team0: left promiscuous mode [ 626.449932][T15624] team_slave_0: left promiscuous mode [ 626.858936][T15624] team_slave_1: left promiscuous mode [ 626.880815][T15624] bridge1: left promiscuous mode [ 626.907914][T15624] bridge0: port 3(team0) entered disabled state [ 626.954788][T15624] bridge_slave_1: left allmulticast mode [ 626.985173][T15624] bridge_slave_1: left promiscuous mode [ 627.024889][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.001250][T15624] team0: Port device bridge1 removed [ 629.183979][T21727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 629.252509][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 629.252525][ T30] audit: type=1400 audit(1771647225.412:1173): avc: denied { sys_admin } for pid=21726 comm="syz.4.5804" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 629.504583][T15624] bond1 (unregistering): Released all slaves [ 629.532542][T15624] bond2 (unregistering): Released all slaves [ 629.564198][T15624] bond3 (unregistering): Released all slaves [ 629.574717][T21732] netlink: 'syz.5.5806': attribute type 39 has an invalid length. [ 629.643487][T21727] ip6_vti0 speed is unknown, defaulting to 1000 [ 629.864509][T15624] tipc: Left network mode [ 632.861780][T21780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5817'. [ 632.897583][T21780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5817'. [ 633.031094][T15624] hsr_slave_0: left promiscuous mode [ 633.071797][T15624] hsr_slave_1: left promiscuous mode [ 633.102002][T15624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.148547][T15624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.221847][T15624] batman_adv: batadv0: Interface deactivated: dummy0 [ 633.234113][T15624] batman_adv: batadv0: Removing interface: dummy0 [ 634.357231][ T5922] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 634.996465][ T5922] usb 9-1: Using ep0 maxpacket: 16 [ 635.013350][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.057304][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.092031][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 635.135442][ T5922] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 635.159347][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.273340][ T5922] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 635.304794][ T5922] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 635.323662][T15624] team0 (unregistering): Port device team_slave_1 removed [ 635.326463][ T5922] usb 9-1: Manufacturer: syz [ 635.359249][T15624] team0 (unregistering): Port device team_slave_0 removed [ 635.362831][ T5922] usb 9-1: config 0 descriptor?? [ 635.675403][T21820] netlink: 'syz.4.5828': attribute type 1 has an invalid length. [ 635.683962][T21811] lo: entered promiscuous mode [ 635.696087][ T5922] rc_core: IR keymap rc-hauppauge not found [ 635.702057][ T5922] Registered IR keymap rc-empty [ 635.778105][T21811] tunl0: entered promiscuous mode [ 635.854609][T21811] gre0: entered promiscuous mode [ 636.049548][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.087913][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.118582][T21811] gretap0: entered promiscuous mode [ 636.127251][T21811] erspan0: entered promiscuous mode [ 636.134253][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 636.135429][T21811] ip_vti0: entered promiscuous mode [ 636.153573][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input55 [ 636.155341][T21811] ip6_vti0: entered promiscuous mode [ 636.174656][T21811] sit0: entered promiscuous mode [ 636.181813][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.228181][T21811] ip6tnl0: entered promiscuous mode [ 636.233763][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.836013][T21811] ip6gre0: entered promiscuous mode [ 636.865976][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.874420][T21811] syz_tun: entered promiscuous mode [ 636.910532][T21811] ip6gretap0: entered promiscuous mode [ 636.918961][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.938083][T21811] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.945623][T21811] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.985277][T21811] bridge0: entered promiscuous mode [ 636.992005][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 637.010168][T21811] vcan0: entered promiscuous mode [ 637.024922][T21811] bond0: entered promiscuous mode [ 637.032015][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 637.059889][T21811] bond_slave_0: entered promiscuous mode [ 637.066033][T21811] bond_slave_1: entered promiscuous mode [ 637.076445][T21811] team0: entered promiscuous mode [ 637.081508][T21811] team_slave_0: entered promiscuous mode [ 637.087858][T21811] team_slave_1: entered promiscuous mode [ 637.095058][T21811] dummy0: entered promiscuous mode [ 637.102974][T21811] nlmon0: entered promiscuous mode [ 637.103217][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 637.114367][T21811] caif0: entered promiscuous mode [ 637.121290][T21811] batadv0: entered promiscuous mode [ 637.139649][T21811] vxcan0: entered promiscuous mode [ 637.150314][T21811] vxcan1: entered promiscuous mode [ 637.161560][T21811] veth0: entered promiscuous mode [ 637.207875][T21811] veth1: entered promiscuous mode [ 637.237344][T21811] wg0: entered promiscuous mode [ 637.253164][T21811] wg1: entered promiscuous mode [ 637.272223][T21811] wg2: entered promiscuous mode [ 637.283897][T21811] veth0_to_bridge: entered promiscuous mode [ 637.321355][T21811] veth1_to_bridge: entered promiscuous mode [ 637.348519][T21811] veth0_to_bond: entered promiscuous mode [ 637.370058][T21811] veth1_to_bond: entered promiscuous mode [ 637.389265][T21811] veth0_to_team: entered promiscuous mode [ 637.419382][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 637.421752][T21811] veth1_to_team: entered promiscuous mode [ 637.439702][T21811] veth0_to_batadv: entered promiscuous mode [ 637.448663][T21811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.456616][T21811] batadv_slave_0: entered promiscuous mode [ 637.463987][T21811] veth1_to_batadv: entered promiscuous mode [ 637.472048][T21811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.475326][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 637.479993][T21811] batadv_slave_1: entered promiscuous mode [ 637.495963][T21811] xfrm0: entered promiscuous mode [ 637.502940][T21811] veth0_to_hsr: entered promiscuous mode [ 637.515784][ T5922] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 637.520612][T21811] veth1_to_hsr: entered promiscuous mode [ 637.549809][ T5922] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 637.561752][T21811] hsr0: entered promiscuous mode [ 637.569696][T21811] veth1_virt_wifi: entered promiscuous mode [ 637.576355][ T5922] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 637.582176][T21811] veth0_virt_wifi: entered promiscuous mode [ 637.592298][ T5922] usb 9-1: USB disconnect, device number 17 [ 637.593272][T21811] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 637.617790][T21811] vlan0: entered promiscuous mode [ 637.623158][T21811] vlan1: entered promiscuous mode [ 637.634772][T21811] macvlan0: entered promiscuous mode [ 637.655406][T21811] macvlan1: entered promiscuous mode [ 637.662971][T21811] ipvlan0: entered promiscuous mode [ 637.669566][T21811] ipvlan1: entered promiscuous mode [ 637.681614][T21811] macvtap0: entered promiscuous mode [ 637.689342][T21811] macsec0: entered promiscuous mode [ 637.700542][T21811] geneve0: entered promiscuous mode [ 637.714588][T21811] geneve1: entered promiscuous mode [ 637.827358][T21811] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 637.849728][T21811] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 637.867039][T21843] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5834'. [ 637.889496][T21811] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 637.908237][T21811] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 637.931424][T21811] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 637.947416][T21845] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 637.987402][T21811] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 638.116126][T21811] veth2: entered promiscuous mode [ 638.124715][T21811] veth3: entered promiscuous mode [ 638.143097][T21820] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 638.147497][T21845] CIFS mount error: No usable UNC path provided in device string! [ 638.147497][T21845] [ 638.653067][T18151] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.656698][T21845] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 638.682684][T18151] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.729730][T18151] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.759079][T18151] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.954105][T15624] IPVS: stop unused estimator thread 0... [ 639.076012][T21865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5838'. [ 639.165971][T21863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5838'. [ 639.618775][T15624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.129052][T15624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.150828][T21886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21886 comm=syz.6.5843 [ 640.166110][T21886] netlink: 'syz.6.5843': attribute type 1 has an invalid length. [ 640.743871][T21887] bond6: (slave gretap1): making interface the new active one [ 640.790984][T21887] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 640.875657][T21890] vlan4: entered allmulticast mode [ 640.894143][T21890] bond6: entered allmulticast mode [ 640.951184][T21890] gretap1: entered allmulticast mode [ 641.009948][T21890] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 641.347576][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5847'. [ 641.757156][T15624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.922788][T15624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.996715][T15624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.044904][T15624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.634861][T15624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.652785][T15624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.802428][T15624] bridge_slave_1: left promiscuous mode [ 644.826310][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.906440][T15624] bridge_slave_0: left allmulticast mode [ 644.946994][T15624] bridge_slave_0: left promiscuous mode [ 645.043831][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.623800][T15624] gretap0 (unregistering): left promiscuous mode [ 646.693648][T15624] bond1 (unregistering): (slave geneve2): Releasing active interface [ 647.409218][T15624] bond0 (unregistering): left promiscuous mode [ 647.630315][T15624] bond_slave_0: left promiscuous mode [ 647.984767][T15624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.033149][T15624] bond0 (unregistering): Released all slaves [ 648.079011][T15624] bond1 (unregistering): Released all slaves [ 648.230585][T18288] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 648.441700][T18288] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 648.460412][T18288] usb 9-1: config 0 interface 0 has no altsetting 0 [ 648.470564][T18288] usb 9-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 648.488571][T18288] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.958209][T18288] usb 9-1: config 0 descriptor?? [ 649.000875][T22000] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 649.060693][T22015] fuse: Bad value for 'fd' [ 649.264729][T22000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.390177][T22000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.405492][T22000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.423745][T22000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.002331][T18288] kye 0003:0458:4018.002F: bogus close delimiter [ 650.008781][T18288] kye 0003:0458:4018.002F: item 0 0 2 10 parsing failed [ 650.018532][T18288] kye 0003:0458:4018.002F: parse failed [ 650.037422][T18288] kye 0003:0458:4018.002F: probe with driver kye failed with error -22 [ 650.586144][T18288] usb 9-1: USB disconnect, device number 18 [ 650.794760][T15624] hsr_slave_0: left promiscuous mode [ 650.815614][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.843625][T15624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.873341][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.889212][T22050] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 650.992282][T15624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.524954][T15624] veth1_macvtap: left promiscuous mode [ 651.530583][T15624] veth0_macvtap: left promiscuous mode [ 652.794302][T15624] pimreg (unregistering): left allmulticast mode [ 652.987144][ T30] audit: type=1804 audit(1771647249.154:1174): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.5884" name="bus" dev="ramfs" ino=78160 res=1 errno=0 [ 653.074737][ T30] audit: type=1804 audit(1771647249.184:1175): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.5884" name="bus" dev="ramfs" ino=78160 res=1 errno=0 [ 653.126479][T15624] team0 (unregistering): Port device team_slave_1 removed [ 653.182536][T15624] team0 (unregistering): Port device team_slave_0 removed [ 654.510303][T22082] tipc: Failed to obtain node identity [ 654.532072][T22082] tipc: Enabling of bearer rejected, failed to enable media [ 654.769467][T15624] IPVS: stop unused estimator thread 0... [ 657.236190][T22104] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5891'. [ 657.283851][T22104] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5891'. [ 657.349269][T22104] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5891'. [ 663.794504][T22196] netlink: 'syz.4.5907': attribute type 1 has an invalid length. [ 664.001362][T22200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5907'. [ 664.550850][T22200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.247080][T22309] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5933'. [ 672.282763][T22358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5944'. [ 672.522264][T22358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22358 comm=syz.6.5944 [ 672.828001][T22375] netlink: 'syz.6.5948': attribute type 12 has an invalid length. [ 674.253547][T22394] tipc: Started in network mode [ 674.262184][ T30] audit: type=1400 audit(1771647270.444:1176): avc: denied { getopt } for pid=22391 comm="syz.8.5953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 674.284326][T22394] tipc: Node identity 2, cluster identity 4711 [ 674.295332][T22394] tipc: Node number set to 2 [ 674.310267][T22392] ip6_vti0 speed is unknown, defaulting to 1000 [ 675.349786][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5961'. [ 682.106699][T22498] 8021q: VLANs not supported on ip6tnl0 [ 682.622248][ T30] audit: type=1400 audit(1771647278.788:1177): avc: denied { setopt } for pid=22531 comm="syz.6.5986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 684.760395][T22539] netlink: 'syz.5.5988': attribute type 1 has an invalid length. [ 685.344242][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.350559][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.646525][T22539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 685.813921][ T30] audit: type=1400 audit(1771647282.010:1178): avc: denied { accept } for pid=22538 comm="syz.5.5988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 686.825830][T22567] bond7: (slave geneve3): making interface the new active one [ 687.161619][T22567] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 687.255740][ T49] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 687.277022][ T49] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 687.307008][ T49] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 687.326683][ T49] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 687.409005][T22594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.416817][T22594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.477751][T22594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.485373][T22594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.763208][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.802997][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.831500][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 691.854022][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.367841][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.400507][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 692.475668][T22653] ip6_vti0 speed is unknown, defaulting to 1000 [ 692.623652][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.650325][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.694084][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 693.004124][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.057419][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.096296][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.179559][ T49] team0: left allmulticast mode [ 694.380620][ T49] team_slave_0: left allmulticast mode [ 694.404046][ T49] team_slave_1: left allmulticast mode [ 694.819071][ T49] team0: left promiscuous mode [ 694.823876][ T49] team_slave_0: left promiscuous mode [ 694.829802][ T49] team_slave_1: left promiscuous mode [ 694.835567][ T49] bridge0: port 3(team0) entered disabled state [ 695.677119][ T49] bridge_slave_1: left allmulticast mode [ 695.715252][ T49] bridge_slave_1: left promiscuous mode [ 695.734142][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.946262][ T49] bridge_slave_0: left allmulticast mode [ 695.951981][ T49] bridge_slave_0: left promiscuous mode [ 696.412788][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.831218][ T49] bond2 (unregistering): (slave erspan1): Releasing active interface [ 698.883456][ T49] erspan1 (unregistering): left promiscuous mode [ 699.058226][ T49] bond3 (unregistering): (slave geneve4): Releasing active interface [ 699.099289][ T49] bond1 (unregistering): (slave geneve2): Releasing active interface [ 699.107510][T22773] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6036'. [ 699.231940][ T49] team0: Port device bridge2 removed [ 699.343284][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.356114][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.367402][ T49] bond0 (unregistering): Released all slaves [ 699.379548][ T49] bond1 (unregistering): Released all slaves [ 699.401380][ T49] bond2 (unregistering): Released all slaves [ 699.423424][ T49] bond3 (unregistering): Released all slaves [ 700.378303][ T49] IPVS: stopping master sync thread 16720 ... [ 701.336957][T22822] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 701.943879][T22806] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 702.071968][T22814] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 702.137310][T22814] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 704.605578][T22814] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 704.633223][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6047'. [ 704.655004][T22814] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 704.682623][T22814] netlink: 'syz.8.6041': attribute type 29 has an invalid length. [ 704.906185][T22861] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 704.915290][T22861] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 704.924429][T22861] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 704.932313][T22861] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 705.697830][ T49] hsr_slave_0: left promiscuous mode [ 705.708899][ T49] hsr_slave_1: left promiscuous mode [ 705.736130][ T49] veth1_macvtap: left promiscuous mode [ 705.749258][ T49] veth0_macvtap: left promiscuous mode [ 705.760773][ T49] veth1_vlan: left promiscuous mode [ 705.777357][ T49] veth0_vlan: left promiscuous mode [ 705.810325][ T5817] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 706.568948][T22890] vxfs: WRONG superblock magic 00000000 at 1 [ 706.575721][T22890] vxfs: WRONG superblock magic 00000000 at 8 [ 706.581744][T22890] vxfs: can't find superblock. [ 706.814886][T22900] overlayfs: failed to clone upperpath [ 707.709907][ T49] team0 (unregistering): Port device team_slave_1 removed [ 707.804072][ T49] team0 (unregistering): Port device team_slave_0 removed [ 708.685882][T22914] netlink: 277 bytes leftover after parsing attributes in process `syz.9.6064'. [ 709.938996][ T5817] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 709.949482][ T5817] Bluetooth: hci2: Injecting HCI hardware error event [ 709.959980][ T5814] Bluetooth: hci2: hardware error 0x00 [ 713.147813][ T5814] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 714.377543][T22993] lo: entered allmulticast mode [ 714.446900][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6077'. [ 714.487524][T22995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6083'. [ 714.515332][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6077'. [ 714.735826][T22991] lo: left allmulticast mode [ 716.449155][ T30] audit: type=1326 audit(1771647312.655:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 716.593331][ T30] audit: type=1326 audit(1771647312.655:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 716.806151][ T30] audit: type=1326 audit(1771647312.655:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 717.071530][ T30] audit: type=1326 audit(1771647312.655:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 717.105976][ T30] audit: type=1326 audit(1771647312.655:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 717.603023][ T30] audit: type=1326 audit(1771647312.685:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 717.820000][ T30] audit: type=1326 audit(1771647312.685:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 717.965496][ T30] audit: type=1326 audit(1771647312.685:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 718.032041][ T30] audit: type=1326 audit(1771647312.685:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 718.486980][ T30] audit: type=1326 audit(1771647312.685:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.5.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7ffc0000 [ 718.569525][ T5854] IPVS: starting estimator thread 0... [ 718.579010][T23055] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.637333][T23055] tipc: Enabled bearer , priority 10 [ 718.695169][T23060] IPVS: using max 48 ests per chain, 115200 per kthread [ 718.714731][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.777668][T23063] fuse: Bad value for 'fd' [ 718.831547][T23062] Set syz0 is full, maxelem 0 reached [ 718.869797][T23062] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 718.984449][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.514230][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.583625][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.687503][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6102'. [ 721.190337][T23116] netlink: 'syz.5.6107': attribute type 1 has an invalid length. [ 721.309220][T23122] macvlan2: entered promiscuous mode [ 721.337151][T23122] macvlan2: entered allmulticast mode [ 721.347280][T23122] bond8: entered promiscuous mode [ 721.352915][T23122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 721.464519][T23122] bond8: left promiscuous mode [ 721.580622][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6109'. [ 721.623180][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.099773][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 722.099791][ T30] audit: type=1400 audit(1771647317.868:1248): avc: denied { remount } for pid=23127 comm="syz.6.6110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 722.609292][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6116'. [ 722.618523][ T5854] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 722.658549][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6116'. [ 722.667489][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.887259][ T5854] usb 9-1: Using ep0 maxpacket: 32 [ 722.896153][ T5854] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 722.917113][ T5854] usb 9-1: config 0 has no interface number 0 [ 722.948811][ T5854] usb 9-1: config 0 interface 184 has no altsetting 0 [ 722.982543][ T5854] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 723.032375][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.088683][ T5854] usb 9-1: Product: syz [ 723.125365][ T5854] usb 9-1: Manufacturer: syz [ 723.166774][ T5854] usb 9-1: SerialNumber: syz [ 723.227717][ T5854] usb 9-1: config 0 descriptor?? [ 723.264578][ T5854] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 723.298369][ T5854] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 723.712091][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.752787][ T5966] usb 9-1: USB disconnect, device number 19 [ 723.763861][T23183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6122'. [ 723.861040][T23185] Cannot find add_set index 128 as target [ 724.004292][T23188] bridge_slave_0: left allmulticast mode [ 724.021782][T23188] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.071707][T23188] bridge_slave_1: left allmulticast mode [ 724.083477][T23188] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.115933][T23188] bond0: (slave bond_slave_0): Releasing backup interface [ 724.146609][T23188] bond0: (slave bond_slave_1): Releasing backup interface [ 724.157841][T23202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6134'. [ 724.301280][T23188] team0: Port device team_slave_0 removed [ 724.321257][T23188] team0: Port device team_slave_1 removed [ 724.741652][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 724.802852][T23188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.947539][T23188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.364523][T23188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 725.398016][T23195] team0: Mode changed to "loadbalance" [ 725.781109][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.820504][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.859985][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.899453][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 729.938938][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.978450][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.017897][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 733.067371][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.096861][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 735.064480][ T5814] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 735.136452][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.185818][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.804243][ T30] audit: type=1400 audit(1771647333.016:1249): avc: denied { module_load } for pid=23333 comm="syz.5.6157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 737.215377][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 737.659733][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6161'. [ 737.682733][T23350] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 737.736975][ T30] audit: type=1400 audit(1771647333.946:1250): avc: denied { connect } for pid=23347 comm="syz.6.6161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.254824][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 738.949264][T23378] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 739.304242][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.333728][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 741.373265][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.295259][ T30] audit: type=1326 audit(1771647338.428:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.9.6175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132839c629 code=0x0 [ 742.412686][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.729976][T23418] netlink: 'syz.5.6174': attribute type 11 has an invalid length. [ 743.452168][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.501641][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.961859][T23465] netlink: 'syz.5.6182': attribute type 9 has an invalid length. [ 744.969654][T23465] netlink: 'syz.5.6182': attribute type 7 has an invalid length. [ 744.977998][T23465] netlink: 'syz.5.6182': attribute type 8 has an invalid length. [ 745.531143][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.580616][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.665001][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.671514][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.766234][T23480] netlink: 'syz.9.6187': attribute type 12 has an invalid length. [ 747.366566][T23494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6189'. [ 747.610127][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.649581][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.709598][ T30] audit: type=1326 audit(1771647344.932:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.5.6193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x0 [ 749.689053][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 749.793669][ T30] audit: type=1326 audit(1771647346.012:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23525 comm="syz.4.6196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54cc39c629 code=0x0 [ 750.665938][T23551] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.6200'. [ 750.728533][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 750.731631][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6200'. [ 751.098226][T23559] netlink: 34 bytes leftover after parsing attributes in process `syz.4.6201'. [ 751.768538][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.817804][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.849279][T23590] netlink: 'syz.6.6208': attribute type 178 has an invalid length. [ 753.846985][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 754.138366][ T30] audit: type=1400 audit(1771647350.344:1254): avc: denied { accept } for pid=23602 comm="syz.5.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 754.896459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 755.925926][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.965431][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 757.450681][T23653] autofs: Bad value for 'fd' [ 758.005209][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 759.044372][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 760.002355][T23694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.083844][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 761.123344][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 762.162812][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 762.760818][T23734] netem: change failed [ 763.202314][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 764.241968][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 765.291244][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 766.029496][T23773] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6250'. [ 766.112700][T23773] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6250'. [ 766.155658][T23773] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6250'. [ 766.194808][T23773] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6250'. [ 766.330718][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 766.700114][T23761] netlink: 'syz.6.6249': attribute type 2 has an invalid length. [ 766.834338][T23761] netlink: 'syz.6.6249': attribute type 1 has an invalid length. [ 767.360228][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 768.399685][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 769.449159][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 770.478662][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 770.856225][ T30] audit: type=1400 audit(1771647367.083:1255): avc: denied { ioctl } for pid=23831 comm="syz.8.6268" path="socket:[81847]" dev="sockfs" ino=81847 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 771.518163][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 771.593699][T23834] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6269'. [ 771.719248][ T30] audit: type=1400 audit(1771647367.953:1256): avc: denied { setopt } for pid=23846 comm="syz.9.6274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 772.557657][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 773.030245][T23860] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.6278'. [ 773.597117][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 773.986356][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6280'. [ 774.161930][T23868] dummy0: entered promiscuous mode [ 774.168200][T23868] macvtap1: entered promiscuous mode [ 774.174313][T23868] macvtap1: entered allmulticast mode [ 774.180340][T23868] dummy0: entered allmulticast mode [ 774.636577][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 774.750573][T23880] netlink: 'syz.4.6282': attribute type 1 has an invalid length. [ 774.910913][T12548] page_pool_release_retry() stalled pool shutdown: id 125, 1 inflight 60 sec [ 775.676041][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 776.390849][T23886] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 776.409861][T23886] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 776.458136][T23880] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 776.659345][T23893] macvlan2: entered promiscuous mode [ 776.669240][T23893] macvlan2: entered allmulticast mode [ 776.708585][T23893] bond2: entered promiscuous mode [ 776.715533][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 776.721865][T23893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 777.028120][T23893] bond2: left promiscuous mode [ 777.764993][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 778.794524][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 778.827878][T23916] : entered promiscuous mode [ 778.981535][T23919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6292'. [ 779.004735][T12548] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 779.286760][T12548] usb 9-1: Using ep0 maxpacket: 16 [ 779.292612][T12548] usb 9-1: no configurations [ 779.297626][T12548] usb 9-1: can't read configurations, error -22 [ 779.735830][T12548] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 779.843955][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 780.316462][T12548] usb 9-1: Using ep0 maxpacket: 16 [ 780.337264][T12548] usb 9-1: no configurations [ 780.345322][T12548] usb 9-1: can't read configurations, error -22 [ 780.362902][T12548] usb usb9-port1: attempt power cycle [ 780.883467][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 781.633714][T12548] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 781.922941][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 781.932930][T12548] usb 9-1: device not accepting address 22, error -71 [ 782.962394][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 783.991887][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 785.041430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 786.071130][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 786.191733][T23996] netlink: 'syz.8.6310': attribute type 1 has an invalid length. [ 787.120313][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.211139][T12548] libceph: connect (1)[c::]:6789 error -101 [ 787.227689][T24011] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6314'. [ 787.237530][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6314'. [ 787.394177][T24010] ceph: No mds server is up or the cluster is laggy [ 787.426481][T12548] libceph: mon0 (1)[c::]:6789 connect error [ 788.149801][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 789.157106][ T30] audit: type=1800 audit(1771647385.392:1257): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6309" name="bus" dev="ramfs" ino=82595 res=0 errno=0 [ 789.189283][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 789.583140][T24039] netlink: 'syz.4.6322': attribute type 10 has an invalid length. [ 789.635832][T24039] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.667469][T24039] bond0: (slave team0): Enslaving as an active interface with an up link [ 790.238789][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 791.268250][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 791.919387][T24054] ip6_vti0 speed is unknown, defaulting to 1000 [ 792.317716][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 793.347207][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 794.386689][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 794.552756][T24078] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6332'. [ 795.436310][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 795.508416][T24088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6335'. [ 795.785808][T24093] trusted_key: encrypted_key: key user:syz not found [ 796.475637][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 797.505125][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 797.624208][T24121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6344'. [ 798.322047][ T30] audit: type=1804 audit(1771647394.566:1258): pid=24129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.6347" name="/newroot/455/file1" dev="fuse" ino=1 res=1 errno=0 [ 798.544611][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 798.736831][ T30] audit: type=1326 audit(1771647394.977:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.5.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdd59c629 code=0x7fc00000 [ 799.584341][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 799.766449][ T30] audit: type=1326 audit(1771647396.017:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.5.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbdd596417 code=0x7fc00000 [ 800.633576][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 801.673042][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 802.712602][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 803.751998][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 804.781487][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 805.789735][T24219] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6368'. [ 805.830949][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 806.870437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 807.899940][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.063208][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.069502][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.352571][T24231] ptrace attach of "./syz-executor exec"[19715] was attempted by " [ 808.939416][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.465083][T24240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.554089][T24239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.868438][T24251] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 809.978885][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 811.018372][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 811.682368][ T30] audit: type=1400 audit(1771647407.783:1261): avc: denied { connect } for pid=24265 comm="syz.4.6382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 811.980580][ T30] audit: type=1400 audit(1771647407.783:1262): avc: denied { bind } for pid=24265 comm="syz.4.6382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 812.036276][ T30] audit: type=1400 audit(1771647408.013:1263): avc: denied { read } for pid=24263 comm="syz.8.6381" path="socket:[83572]" dev="sockfs" ino=83572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 812.059933][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 813.097331][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 814.136817][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 815.176286][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.215802][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 817.265233][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 818.083024][T24348] ip6_vti0 speed is unknown, defaulting to 1000 [ 818.294771][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 819.334211][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 819.348034][ T30] audit: type=1400 audit(1771647415.607:1264): avc: denied { append } for pid=24360 comm="syz.8.6404" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 820.373693][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 821.413253][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 822.452679][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 823.492151][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 823.992777][T24394] syzkaller0: entered promiscuous mode [ 824.011840][T24394] syzkaller0: entered allmulticast mode [ 824.144194][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 824.155305][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 824.168233][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 824.176756][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 824.186814][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 824.531614][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 824.757723][T24406] netlink: 'syz.9.6415': attribute type 1 has an invalid length. [ 825.389094][T24398] ip6_vti0 speed is unknown, defaulting to 1000 [ 825.571132][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 826.229902][ T5814] Bluetooth: hci4: command tx timeout [ 826.610602][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 827.650091][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.013770][T24438] kAFS: unable to lookup cell 'ÿ' [ 828.297057][ T5814] Bluetooth: hci4: command tx timeout [ 828.689640][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.811875][T24444] random: crng reseeded on system resumption [ 828.819622][ T30] audit: type=1400 audit(1771647681.077:1265): avc: denied { read } for pid=24440 comm="syz.8.6425" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 828.844012][T24398] chnl_net:caif_netlink_parms(): no params data found [ 829.110152][ T30] audit: type=1400 audit(1771647681.077:1266): avc: denied { ioctl } for pid=24440 comm="syz.8.6425" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 829.330797][T24398] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.370125][T24398] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.421551][T24398] bridge_slave_0: entered allmulticast mode [ 829.445582][T24398] bridge_slave_0: entered promiscuous mode [ 829.493740][T24398] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.522852][T24398] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.551118][T24398] bridge_slave_1: entered allmulticast mode [ 829.577351][T24398] bridge_slave_1: entered promiscuous mode [ 829.677103][T24398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.734943][T24398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.739003][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 829.972459][T24398] team0: Port device team_slave_0 added [ 830.029824][T24398] team0: Port device team_slave_1 added [ 830.167111][T24398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.696672][ T5814] Bluetooth: hci4: command tx timeout [ 830.735660][T24398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.778488][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 830.833108][T24398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.904564][T24398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.992357][T24398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.174698][T24398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.346024][T24398] hsr_slave_0: entered promiscuous mode [ 831.352176][T24398] hsr_slave_1: entered promiscuous mode [ 831.807971][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 832.345658][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6435'. [ 832.498061][ T5814] Bluetooth: hci5: unexpected event 0x04 length: 245 > 10 [ 832.499735][ T5814] Bluetooth: hci5: connection err: -111 [ 832.767482][ T5814] Bluetooth: hci4: command tx timeout [ 832.857431][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 833.896929][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 834.528555][T24508] overlayfs: failed to clone upperpath [ 834.548785][T24508] overlayfs: failed to clone upperpath [ 834.926452][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 835.965916][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 837.006675][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 837.128313][T24529] tipc: Enabling of bearer rejected, already enabled [ 837.343115][T24398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 837.434544][T24398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 837.643381][T24540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 837.660787][T24398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 837.698453][T24398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 838.006280][ T30] audit: type=1804 audit(1771647690.271:1267): pid=24555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.6444" name="bus" dev="ramfs" ino=84232 res=1 errno=0 [ 838.044852][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 839.084399][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 839.695873][T24398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.898819][T24398] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.943556][T22801] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.950785][T22801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.123806][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 840.563312][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.570516][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.163344][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 841.184608][T24241] ================================================================== [ 841.192697][T24241] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 841.201883][T24241] Read of size 8 at addr ffff88807d533af8 by task syz.6.6371/24241 [ 841.209758][T24241] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 841.212068][T24241] CPU: 1 UID: 0 PID: 24241 Comm: syz.6.6371 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.212084][T24241] Tainted: [L]=SOFTLOCKUP [ 841.212088][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.212096][T24241] Call Trace: [ 841.212101][T24241] [ 841.212105][T24241] dump_stack_lvl+0x100/0x190 [ 841.212127][T24241] print_report+0x156/0x4c9 [ 841.212143][T24241] ? __virt_addr_valid+0x81/0x620 [ 841.212159][T24241] ? __phys_addr+0xe8/0x180 [ 841.212175][T24241] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 841.212189][T24241] kasan_report+0xdf/0x1e0 [ 841.212206][T24241] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 841.212220][T24241] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 841.212234][T24241] bulk_make_private+0xd8/0x720 [ 841.212252][T24241] umount_tree+0x3fb/0xec0 [ 841.212268][T24241] ? lock_acquire+0x1cf/0x380 [ 841.212285][T24241] ? __pfx_umount_tree+0x10/0x10 [ 841.212301][T24241] ? switch_task_namespaces+0x89/0x2c0 [ 841.212318][T24241] put_mnt_ns+0x267/0x300 [ 841.212331][T24241] switch_task_namespaces+0x133/0x2c0 [ 841.212347][T24241] do_exit+0x824/0x2aa0 [ 841.212365][T24241] ? __pfx_do_exit+0x10/0x10 [ 841.212380][T24241] ? do_raw_spin_lock+0x128/0x260 [ 841.212392][T24241] ? find_held_lock+0x2b/0x80 [ 841.212405][T24241] ? get_signal+0x7e0/0x21e0 [ 841.212419][T24241] do_group_exit+0xd5/0x2a0 [ 841.212436][T24241] get_signal+0x1ec7/0x21e0 [ 841.212451][T24241] ? __pfx_do_recvmmsg+0x10/0x10 [ 841.212466][T24241] ? __pfx_get_signal+0x10/0x10 [ 841.212480][T24241] ? do_futex+0x192/0x350 [ 841.212492][T24241] arch_do_signal_or_restart+0x91/0x7a0 [ 841.212508][T24241] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 841.212524][T24241] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 841.212537][T24241] exit_to_user_mode_loop+0x86/0x4a0 [ 841.212555][T24241] do_syscall_64+0x67c/0xf80 [ 841.212566][T24241] ? clear_bhb_loop+0x40/0x90 [ 841.212579][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.212591][T24241] RIP: 0033:0x7fb59019c629 [ 841.212600][T24241] Code: Unable to access opcode bytes at 0x7fb59019c5ff. [ 841.212605][T24241] RSP: 002b:00007fb58e3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 841.212616][T24241] RAX: 000000000003ffff RBX: 00007fb590416090 RCX: 00007fb59019c629 [ 841.212624][T24241] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 841.212631][T24241] RBP: 00007fb590232b39 R08: 0000000000000000 R09: 0000000000000000 [ 841.212637][T24241] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 841.212644][T24241] R13: 00007fb590416128 R14: 00007fb590416090 R15: 00007fffb7232398 [ 841.212654][T24241] [ 841.212658][T24241] [ 841.467737][T24241] Allocated by task 23694: [ 841.472137][T24241] kasan_save_stack+0x30/0x50 [ 841.476806][T24241] kasan_save_track+0x14/0x30 [ 841.481470][T24241] __kasan_slab_alloc+0x89/0x90 [ 841.486309][T24241] kmem_cache_alloc_noprof+0x241/0x6e0 [ 841.491753][T24241] alloc_vfsmnt+0x23/0x6a0 [ 841.496153][T24241] clone_mnt+0x4b/0x930 [ 841.500290][T24241] vfs_open_tree+0xb02/0x1500 [ 841.504943][T24241] __x64_sys_open_tree+0xa3/0x150 [ 841.509946][T24241] do_syscall_64+0x106/0xf80 [ 841.514515][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.520386][T24241] [ 841.522687][T24241] Freed by task 0: [ 841.526379][T24241] kasan_save_stack+0x30/0x50 [ 841.531038][T24241] kasan_save_track+0x14/0x30 [ 841.535698][T24241] kasan_save_free_info+0x3b/0x70 [ 841.540703][T24241] __kasan_slab_free+0x5f/0x80 [ 841.545448][T24241] kmem_cache_free+0x124/0x6a0 [ 841.550191][T24241] rcu_core+0x5a2/0x10d0 [ 841.554410][T24241] handle_softirqs+0x1eb/0x9e0 [ 841.559155][T24241] __irq_exit_rcu+0xef/0x150 [ 841.563725][T24241] irq_exit_rcu+0x9/0x30 [ 841.567955][T24241] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 841.573573][T24241] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 841.579533][T24241] [ 841.581834][T24241] Last potentially related work creation: [ 841.587523][T24241] kasan_save_stack+0x30/0x50 [ 841.592183][T24241] kasan_record_aux_stack+0xa7/0xc0 [ 841.597360][T24241] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 841.603245][T24241] task_work_run+0x150/0x240 [ 841.607817][T24241] exit_to_user_mode_loop+0x100/0x4a0 [ 841.613174][T24241] do_syscall_64+0x67c/0xf80 [ 841.617749][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.623634][T24241] [ 841.625955][T24241] Second to last potentially related work creation: [ 841.632512][T24241] kasan_save_stack+0x30/0x50 [ 841.637175][T24241] kasan_record_aux_stack+0xa7/0xc0 [ 841.642353][T24241] task_work_add+0x28b/0x3b0 [ 841.646929][T24241] mntput_no_expire_slowpath+0x3da/0xb00 [ 841.652563][T24241] mntput_no_expire+0x1fd/0x220 [ 841.657418][T24241] mntput+0x6b/0xa0 [ 841.661220][T24241] vfs_open_tree+0x1235/0x1500 [ 841.665969][T24241] __x64_sys_open_tree+0xa3/0x150 [ 841.670983][T24241] do_syscall_64+0x106/0xf80 [ 841.675555][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.681427][T24241] [ 841.683730][T24241] The buggy address belongs to the object at ffff88807d533a40 [ 841.683730][T24241] which belongs to the cache mnt_cache of size 352 [ 841.697599][T24241] The buggy address is located 184 bytes inside of [ 841.697599][T24241] freed 352-byte region [ffff88807d533a40, ffff88807d533ba0) [ 841.711391][T24241] [ 841.713703][T24241] The buggy address belongs to the physical page: [ 841.720098][T24241] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d532fc0 pfn:0x7d532 [ 841.730144][T24241] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 841.738620][T24241] memcg:ffff88807d532171 [ 841.742841][T24241] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 841.751320][T24241] page_type: f5(slab) [ 841.755282][T24241] raw: 00fff00000000240 ffff888140416140 ffffea0000961010 ffffea0001e52990 [ 841.763847][T24241] raw: ffff88807d532fc0 000001c000120005 00000000f5000000 ffff88807d532171 [ 841.772412][T24241] head: 00fff00000000240 ffff888140416140 ffffea0000961010 ffffea0001e52990 [ 841.781064][T24241] head: ffff88807d532fc0 000001c000120005 00000000f5000000 ffff88807d532171 [ 841.789713][T24241] head: 00fff00000000001 ffffea0001f54c81 00000000ffffffff 00000000ffffffff [ 841.798361][T24241] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 841.807021][T24241] page dumped because: kasan: bad access detected [ 841.813411][T24241] page_owner tracks the page as allocated [ 841.819101][T24241] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5956, tgid 5955 (syz.4.15), ts 66014645699, free_ts 65711879813 [ 841.840095][T24241] post_alloc_hook+0x153/0x170 [ 841.844848][T24241] get_page_from_freelist+0x111d/0x3140 [ 841.850380][T24241] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 841.856255][T24241] new_slab+0xa6/0x6d0 [ 841.860316][T24241] refill_objects+0x26b/0x400 [ 841.864972][T24241] __pcs_replace_empty_main+0x19f/0x600 [ 841.870506][T24241] kmem_cache_alloc_noprof+0x480/0x6e0 [ 841.875947][T24241] alloc_vfsmnt+0x23/0x6a0 [ 841.880344][T24241] clone_mnt+0x4b/0x930 [ 841.884483][T24241] copy_tree+0x329/0xbf0 [ 841.888704][T24241] copy_mnt_ns+0x2bd/0xc30 [ 841.893102][T24241] create_new_namespaces+0xd3/0xac0 [ 841.898288][T24241] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 841.903905][T24241] ksys_unshare+0x455/0xab0 [ 841.908410][T24241] __x64_sys_unshare+0x31/0x40 [ 841.913159][T24241] do_syscall_64+0x106/0xf80 [ 841.917732][T24241] page last free pid 1219 tgid 1219 stack trace: [ 841.924037][T24241] __free_frozen_pages+0x7e1/0x10d0 [ 841.929215][T24241] qlist_free_all+0x47/0xe0 [ 841.933702][T24241] kasan_quarantine_reduce+0x1a0/0x1f0 [ 841.939144][T24241] __kasan_slab_alloc+0x69/0x90 [ 841.943980][T24241] __kmalloc_cache_noprof+0x243/0x6f0 [ 841.949339][T24241] nsim_fib_event_work+0x157b/0x63b0 [ 841.954606][T24241] process_one_work+0x9d7/0x1920 [ 841.959523][T24241] worker_thread+0x5da/0xe40 [ 841.964090][T24241] kthread+0x370/0x450 [ 841.968136][T24241] ret_from_fork+0x754/0xd80 [ 841.972706][T24241] ret_from_fork_asm+0x1a/0x30 [ 841.977451][T24241] [ 841.979753][T24241] Memory state around the buggy address: [ 841.985360][T24241] ffff88807d533980: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 841.993397][T24241] ffff88807d533a00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 842.001435][T24241] >ffff88807d533a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.009472][T24241] ^ [ 842.017428][T24241] ffff88807d533b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.025466][T24241] ffff88807d533b80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 842.033521][T24241] ================================================================== [ 842.041608][ T30] audit: type=1400 audit(1771647693.493:1268): avc: denied { write } for pid=5794 comm="syz-executor" path="pipe:[4431]" dev="pipefs" ino=4431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 842.043006][T24241] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 842.043023][T24241] CPU: 1 UID: 0 PID: 24241 Comm: syz.6.6371 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.043045][T24241] Tainted: [L]=SOFTLOCKUP [ 842.043051][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.043061][T24241] Call Trace: [ 842.043067][T24241] [ 842.043073][T24241] dump_stack_lvl+0x100/0x190 [ 842.043101][T24241] vpanic+0x552/0x970 [ 842.043118][T24241] ? __pfx_vpanic+0x10/0x10 [ 842.043133][T24241] ? mark_held_locks+0x40/0x70 [ 842.043158][T24241] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 842.043176][T24241] panic+0xd1/0xe0 [ 842.043190][T24241] ? __pfx_panic+0x10/0x10 [ 842.043208][T24241] ? check_panic_on_warn+0x1f/0x90 [ 842.043232][T24241] check_panic_on_warn.cold+0x19/0x34 [ 842.043249][T24241] end_report.part.0+0x3a/0x90 [ 842.043271][T24241] kasan_report.cold+0xe/0x18 [ 842.043292][T24241] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 842.043312][T24241] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 842.043330][T24241] bulk_make_private+0xd8/0x720 [ 842.043355][T24241] umount_tree+0x3fb/0xec0 [ 842.043376][T24241] ? lock_acquire+0x1cf/0x380 [ 842.043398][T24241] ? __pfx_umount_tree+0x10/0x10 [ 842.043419][T24241] ? switch_task_namespaces+0x89/0x2c0 [ 842.043442][T24241] put_mnt_ns+0x267/0x300 [ 842.043460][T24241] switch_task_namespaces+0x133/0x2c0 [ 842.043481][T24241] do_exit+0x824/0x2aa0 [ 842.043503][T24241] ? __pfx_do_exit+0x10/0x10 [ 842.043524][T24241] ? do_raw_spin_lock+0x128/0x260 [ 842.043539][T24241] ? find_held_lock+0x2b/0x80 [ 842.043557][T24241] ? get_signal+0x7e0/0x21e0 [ 842.043576][T24241] do_group_exit+0xd5/0x2a0 [ 842.043598][T24241] get_signal+0x1ec7/0x21e0 [ 842.043617][T24241] ? __pfx_do_recvmmsg+0x10/0x10 [ 842.043652][T24241] ? __pfx_get_signal+0x10/0x10 [ 842.043670][T24241] ? do_futex+0x192/0x350 [ 842.043687][T24241] arch_do_signal_or_restart+0x91/0x7a0 [ 842.043708][T24241] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 842.043730][T24241] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 842.043747][T24241] exit_to_user_mode_loop+0x86/0x4a0 [ 842.043772][T24241] do_syscall_64+0x67c/0xf80 [ 842.043787][T24241] ? clear_bhb_loop+0x40/0x90 [ 842.043805][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.043821][T24241] RIP: 0033:0x7fb59019c629 [ 842.043834][T24241] Code: Unable to access opcode bytes at 0x7fb59019c5ff. [ 842.043841][T24241] RSP: 002b:00007fb58e3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 842.043857][T24241] RAX: 000000000003ffff RBX: 00007fb590416090 RCX: 00007fb59019c629 [ 842.043868][T24241] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 842.043878][T24241] RBP: 00007fb590232b39 R08: 0000000000000000 R09: 0000000000000000 [ 842.043888][T24241] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 842.043898][T24241] R13: 00007fb590416128 R14: 00007fb590416090 R15: 00007fffb7232398 [ 842.043913][T24241] [ 842.064969][T24241] Kernel Offset: disabled