last executing test programs: 30m5.067973133s ago: executing program 3 (id=778): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x20000800) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 30m4.880594028s ago: executing program 3 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ptrace$cont(0x21, r1, 0x80000001, 0x4) 30m4.794306167s ago: executing program 3 (id=783): setfsgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/pid_for_children\x00') 30m3.31066792s ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x273) 30m3.249339911s ago: executing program 3 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 30m2.98037903s ago: executing program 3 (id=791): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x101c00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000580)=ANY=[]) unshare(0x64000600) 30m2.780243221s ago: executing program 32 (id=791): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x101c00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000580)=ANY=[]) unshare(0x64000600) 29m30.197638604s ago: executing program 5 (id=1062): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c3634234a03259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e500009d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29m29.209167788s ago: executing program 5 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xa}, {0xffff, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 29m28.980918107s ago: executing program 5 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r3, r3, r2}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) 29m26.671946595s ago: executing program 5 (id=1092): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 29m25.549011819s ago: executing program 5 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 29m25.283240326s ago: executing program 5 (id=1101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc9, 0x7}}]}, 0x8c}}, 0x2) 29m9.973773837s ago: executing program 33 (id=1101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc9, 0x7}}]}, 0x8c}}, 0x2) 19m55.889814879s ago: executing program 0 (id=3133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x2}, {}, {}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 19m54.600937836s ago: executing program 0 (id=3138): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 19m52.445214352s ago: executing program 0 (id=3142): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) umount2(&(0x7f0000000000)='./file0\x00', 0x9) setpgid(r2, r2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@verity_on}, {@redirect_dir_follow}, {@xino_on}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x6}, 0x16, 0x0) r5 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r5, 0xff7f0000, 0x10, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 19m48.692178202s ago: executing program 0 (id=3149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r4, 0x80) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) accept4$netrom(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 19m47.27873144s ago: executing program 0 (id=3151): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 19m44.569797452s ago: executing program 0 (id=3158): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) creat(&(0x7f0000000000)='./file0\x00', 0x168) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x71, 0x40000009, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 19m30.056601809s ago: executing program 34 (id=3158): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) creat(&(0x7f0000000000)='./file0\x00', 0x168) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x71, 0x40000009, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 19m23.811707412s ago: executing program 6 (id=3207): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000140)={0x6, 0x47}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) write$uinput_user_dev(r0, 0x0, 0x0) 19m20.472034276s ago: executing program 6 (id=3210): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/ipc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000300)=""/191, 0xbf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000061, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{}, "34e4aa6b18d7d7ec", "d7e675cb8415c0f80bb878d457f20d8f", "bd2be86f", "8832df649e4a4f32"}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r5, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0xca, 0xffffffffffffffff}}, 0x1c7041) read$msr(r5, &(0x7f0000000900)=""/66, 0x42) 19m19.454448299s ago: executing program 6 (id=3213): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) syz_open_dev$dri(0x0, 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19m17.572027826s ago: executing program 6 (id=3216): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) pipe(0x0) mount$9p_unix(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tr]ns=unix,']) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 19m16.015407725s ago: executing program 6 (id=3220): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x20801, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x84, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe0d5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x17f10ce3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1800000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0xdfd619a0e8aca36) r5 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x6, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) landlock_restrict_self(r8, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 19m13.728906916s ago: executing program 6 (id=3225): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000a196c98d000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 18m59.29272808s ago: executing program 35 (id=3225): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000a196c98d000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 18.84658615s ago: executing program 8 (id=5762): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') tkill(r3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 15.446061781s ago: executing program 8 (id=5775): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65784eb45412", 0x65, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 12.869301098s ago: executing program 8 (id=5781): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) tkill(r4, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 11.385011601s ago: executing program 7 (id=5782): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109881, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a00)=@abs, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x7, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002a80)={0x0, 0x0, "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", "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"}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.78316438s ago: executing program 1 (id=5785): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') tkill(r3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 10.272556985s ago: executing program 7 (id=5786): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109881, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a00)=@abs, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x7, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002a80)={0x0, 0x0, "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", "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"}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ffd3bf79a1f5c5dc34cf2645cbc11c4562d22db8780edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b000000fb354673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0100f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce78754182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f26df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132155fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.241456818s ago: executing program 1 (id=5789): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0x29, 0x3, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r4, r5, 0x3, 0x500, 0xfa, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0xfffffd, 0x6, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 9.156145889s ago: executing program 8 (id=5791): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0x29, 0x3, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r3, r4, 0x3, 0x500, 0xfa, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0xfffffd, 0x6, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 8.022784035s ago: executing program 8 (id=5793): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002e00090067bd7000000000000400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 8.021777363s ago: executing program 7 (id=5803): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5c}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc891) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x140, 0x0, 0x0, 0xfffffffb, 0x10000, @value=r0}, 0x28) 8.021083369s ago: executing program 1 (id=5794): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7.343343479s ago: executing program 1 (id=5795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = getpid() sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000003c0)={&(0x7f0000000380), 0x7, 0x0, 0x4}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r7]) 7.224683642s ago: executing program 4 (id=5796): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 5.235816618s ago: executing program 4 (id=5798): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x40}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x30000000, 0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(r1) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 4.27984007s ago: executing program 4 (id=5799): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') tkill(r3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 4.011695227s ago: executing program 7 (id=5801): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.831860369s ago: executing program 2 (id=5802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000380)=0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x20000, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r2 = socket(0xa, 0x3, 0xff) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xa052) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}], 0x1) 3.79727851s ago: executing program 1 (id=5804): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0x29, 0x3, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r4, r5, 0x3, 0x500, 0xfa, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0xfffffd, 0x6, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 3.623115082s ago: executing program 2 (id=5805): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xc076) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8101}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0xa8}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000140), 0x400) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') pread64(r2, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) 3.532296503s ago: executing program 7 (id=5806): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x68642, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2.882469385s ago: executing program 4 (id=5807): set_mempolicy(0x1, &(0x7f0000000200)=0x137, 0x22) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) write$FUSE_INTERRUPT(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc8, &(0x7f0000000840)=""/200, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000400)={0x1, @win={{0x7fff, 0x3, 0x2, 0x800009}, 0x2, 0x2, 0x0, 0x7ff, 0x0, 0x5}}) r6 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 2.687787489s ago: executing program 2 (id=5808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000380)=0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x20000, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r2 = socket(0xa, 0x3, 0xff) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xa052) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}], 0x1) 2.164870596s ago: executing program 7 (id=5809): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00890600000000000000000000000088a8140081002b0086dd6900040000082c"], 0x4a) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 1.704955693s ago: executing program 4 (id=5810): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x1ff, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2866e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f000061ac00000000000000f500", "90be8b1c55f96400", [0x8a2]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r4, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.068788487s ago: executing program 8 (id=5811): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xff7ffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x1b) r2 = socket(0x28, 0x5, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000c00)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x8000}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r3, 0x5411, 0xffefff1f00000000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) 1.064212377s ago: executing program 2 (id=5812): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0x2d, 0x806, 0x0) socket(0x29, 0x3, 0x3d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r2, r3, 0x3, 0x500, 0xfa, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0xfffffd, 0x6, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 732.398538ms ago: executing program 2 (id=5813): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') tkill(r4, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 683.081103ms ago: executing program 4 (id=5814): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) ioctl$BLKBSZSET(r2, 0x40041271, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) init_module(0x0, 0xa10, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) 313.404705ms ago: executing program 2 (id=5815): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65784eb45412", 0x65, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 1 (id=5816): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r1}, &(0x7f0000000340)=0x8) kernel console output (not intermixed with test programs): IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1546.781006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1546.936321][ T30] audit: type=1400 audit(3916643789.370:2058): avc: denied { write } for pid=24715 comm="syz.1.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1547.892907][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1547.999161][ T30] audit: type=1326 audit(3916643790.361:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24737 comm="syz.2.4808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464f9acb9 code=0x0 [ 1549.004661][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1549.497347][T24761] tipc: Started in network mode [ 1549.502328][T24761] tipc: Node identity ac14140f, cluster identity 4711 [ 1549.512320][T24761] tipc: New replicast peer: 255.255.255.255 [ 1549.519980][T24761] tipc: Enabled bearer , priority 10 [ 1550.116487][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1550.695998][ T30] audit: type=1326 audit(3916643792.868:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24759 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7fc00000 [ 1550.720568][T17767] tipc: Node number set to 2886997007 [ 1550.826910][ T30] audit: type=1326 audit(3916643792.971:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24759 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc44f9acb9 code=0x7fc00000 [ 1551.228319][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1551.510493][ T30] audit: type=1400 audit(3916643793.617:2062): avc: denied { override_creds } for pid=24762 comm="syz.7.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1551.935591][ T30] audit: type=1400 audit(3916643793.729:2063): avc: denied { rename } for pid=24774 comm="syz.1.4815" name="file0" dev="tmpfs" ino=4985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1552.340133][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1552.867589][T24791] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1553.144350][T21043] IPVS: starting estimator thread 0... [ 1553.334275][T24793] IPVS: using max 80 ests per chain, 192000 per kthread [ 1553.451947][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1554.205474][ T30] audit: type=1326 audit(3916643796.170:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.4.4816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc44f9acb9 code=0x0 [ 1554.563765][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1554.620939][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4823'. [ 1555.675680][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1555.786421][ T30] audit: type=1326 audit(3916643797.648:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24817 comm="syz.1.4825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1556.046448][T24824] bond0: (slave bond_slave_0): Releasing backup interface [ 1556.060160][T24824] bond0: (slave bond_slave_1): Releasing backup interface [ 1556.082811][T24824] team0: Port device team_slave_0 removed [ 1556.150118][T24824] team0: Port device team_slave_1 removed [ 1556.170673][T24824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.179792][T24824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.191072][T24824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.198867][T24824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.271312][T24824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1556.300958][T24825] team0: Mode changed to "loadbalance" [ 1556.384378][T24831] vlan0: entered promiscuous mode [ 1556.405126][T24831] team0: Port device vlan0 added [ 1556.798472][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1557.762453][T24850] ./file0: Can't lookup blockdev [ 1557.899222][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1558.836177][T24859] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1559.011098][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1559.192987][ T30] audit: type=1400 audit(3916643800.529:2066): avc: denied { add_name } for pid=24853 comm="syz.4.4833" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1559.604609][T17855] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1559.675580][ T30] audit: type=1400 audit(3916643800.539:2067): avc: denied { create } for pid=24853 comm="syz.4.4833" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1559.953422][ T30] audit: type=1326 audit(3916643801.511:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1560.122878][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1560.377203][ T30] audit: type=1326 audit(3916643801.511:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1560.470265][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1561.102431][T24881] virt_wifi0 speed is unknown, defaulting to 1000 [ 1561.115629][T24881] lo speed is unknown, defaulting to 1000 [ 1561.234685][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1561.566818][ T30] audit: type=1326 audit(3916643801.511:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1561.619537][ T30] audit: type=1326 audit(3916643801.511:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1561.886736][ T30] audit: type=1326 audit(3916643801.521:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1562.074726][ T30] audit: type=1400 audit(3916643801.521:2073): avc: denied { mount } for pid=24855 comm="syz.8.4834" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1562.346513][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1562.633446][ T30] audit: type=1326 audit(3916643801.521:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1562.759195][ T30] audit: type=1326 audit(3916643801.521:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1562.904848][T24902] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 1562.953849][ T30] audit: type=1326 audit(3916643801.521:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24855 comm="syz.8.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1563.458346][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1564.570157][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1565.570627][T24921] virt_wifi0 speed is unknown, defaulting to 1000 [ 1565.645705][T24921] lo speed is unknown, defaulting to 1000 [ 1565.682040][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1566.485166][T24932] ceph: No mds server is up or the cluster is laggy [ 1566.642428][T17767] libceph: connect (1)[c::]:6789 error -101 [ 1566.655220][T17767] libceph: mon0 (1)[c::]:6789 connect error [ 1566.804529][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1567.435222][T24946] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 1567.906000][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1568.488058][T24954] xt_socket: unknown flags 0x4c [ 1569.017519][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1569.095061][T24956] block nbd0: server does not support multiple connections per device. [ 1569.215839][T24956] block nbd0: shutting down sockets [ 1569.893014][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1570.129507][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1570.155693][T24977] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4858'. [ 1570.285291][T24982] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4857'. [ 1570.786298][T24985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4860'. [ 1571.241224][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1571.312625][T24990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.494140][T24990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.024974][T24990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.035694][T24995] ceph: No mds server is up or the cluster is laggy [ 1572.043682][T17767] libceph: connect (1)[c::]:6789 error -1 [ 1572.062754][T17767] libceph: mon0 (1)[c::]:6789 connect error [ 1572.352964][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1572.414249][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1572.414261][ T30] audit: type=1400 audit(3916643813.204:2096): avc: denied { append } for pid=25001 comm="syz.7.4863" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1573.465304][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1573.936032][T25017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4866'. [ 1574.576939][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1575.145041][T25027] virt_wifi0 speed is unknown, defaulting to 1000 [ 1575.152858][T25027] lo speed is unknown, defaulting to 1000 [ 1575.209117][T25028] virt_wifi0 speed is unknown, defaulting to 1000 [ 1575.216944][T25028] lo speed is unknown, defaulting to 1000 [ 1575.688565][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1576.058207][T25031] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1576.126836][T25031] Error validating options; rc = [-22] [ 1576.782279][T25048] tipc: Enabling of bearer rejected, already enabled [ 1576.800403][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1576.821826][T22345] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 1577.078103][T22345] usb 8-1: config 168 has an invalid descriptor of length 12, skipping remainder of the config [ 1577.164884][T22345] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1577.179989][T22345] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1577.220496][T22345] usb 8-1: config 168 has an invalid descriptor of length 12, skipping remainder of the config [ 1577.259879][T22345] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1577.291889][T22345] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1577.474825][T22345] usb 8-1: config 168 has an invalid descriptor of length 12, skipping remainder of the config [ 1577.499187][T22345] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1577.539206][T22345] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1577.587577][T25060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4875'. [ 1577.604903][T25060] netlink: 'syz.1.4875': attribute type 24 has an invalid length. [ 1577.620683][T22345] usb 8-1: string descriptor 0 read error: -22 [ 1577.628580][T22345] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1577.639284][T22345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.750964][T22345] adutux 8-1:168.0: interrupt endpoints not found [ 1577.912208][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1578.506768][T25071] openvswitch: netlink: IP tunnel dst address not specified [ 1578.519732][T25066] ceph: No mds server is up or the cluster is laggy [ 1578.527256][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1578.541394][T25068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1578.569103][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1578.654408][T25071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25071 comm=syz.1.4886 [ 1578.851208][T25071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1578.865349][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1579.023925][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1579.072793][T25081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.126550][T25083] 9p: Bad value for 'rfdno' [ 1579.633026][T25077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1580.146370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1580.213387][T25085] netlink: 'syz.2.4874': attribute type 9 has an invalid length. [ 1580.386306][T21043] usb 8-1: USB disconnect, device number 17 [ 1580.414533][ T30] audit: type=1326 audit(3916643820.687:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25088 comm="syz.4.4879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc44f9acb9 code=0x0 [ 1580.454573][T25079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1581.247564][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1581.272110][ T30] audit: type=1400 audit(3916643821.445:2098): avc: denied { shutdown } for pid=25095 comm="syz.1.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1582.370081][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1582.522535][ T30] audit: type=1326 audit(3916643822.287:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1582.555729][ T30] audit: type=1326 audit(3916643822.296:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1582.580192][ T30] audit: type=1326 audit(3916643822.296:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1582.605518][T25103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1582.740133][ T30] audit: type=1326 audit(3916643822.296:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1582.764218][ T30] audit: type=1326 audit(3916643822.296:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1582.903700][T25113] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4884'. [ 1582.916516][T25113] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4884'. [ 1583.324427][ T30] audit: type=1326 audit(3916643822.296:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1583.471262][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1584.156925][T25131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1584.583013][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1584.808478][T21043] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1584.827486][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1585.236617][T21043] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1585.264989][T21043] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1585.286765][T21043] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1585.382108][T21043] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.417386][T25124] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1585.694810][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1585.863952][T21043] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1586.016071][T21043] usb 9-1: USB disconnect, device number 23 [ 1586.089671][T25057] udevd[25057]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1586.318508][T25158] overlayfs: missing 'lowerdir' [ 1586.324057][T25158] overlay: Unknown parameter '/' [ 1586.539039][T25165] tipc: Enabling of bearer rejected, already enabled [ 1586.806652][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1587.232478][T25169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1587.409033][T25169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1587.514019][T25169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1587.527745][T25174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1587.918495][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1588.191959][T22345] Process accounting resumed [ 1588.842048][T25192] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4900'. [ 1589.040957][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1589.363791][T25200] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4901'. [ 1589.373299][T25200] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4901'. [ 1589.385421][T25200] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4901'. [ 1589.395036][T25200] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4901'. [ 1589.404146][T25200] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4901'. [ 1589.519132][ T30] audit: type=1400 audit(3916643828.909:2105): avc: denied { watch_sb } for pid=25193 comm="syz.4.4902" path="/1223/file0" dev="tmpfs" ino=6517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1589.589984][T25202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1589.762381][T25202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1590.142119][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1591.264592][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1591.698036][ T30] audit: type=1326 audit(3916643831.248:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25223 comm="syz.2.4909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464f9acb9 code=0x0 [ 1592.365783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1592.701806][T25238] tipc: Started in network mode [ 1592.706705][T25238] tipc: Node identity ac14140f, cluster identity 4711 [ 1592.713804][T25238] tipc: New replicast peer: 255.255.255.255 [ 1592.720720][T25238] tipc: Enabled bearer , priority 10 [ 1593.477607][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1593.933579][T22345] tipc: Node number set to 2886997007 [ 1594.140919][ T5831] Bluetooth: Unexpected start frame (len 18) [ 1594.558774][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4917'. [ 1594.589400][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1594.995338][T25266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4913'. [ 1595.701227][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1595.808384][T17855] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1596.162576][T17710] libceph: connect (1)[c::]:6789 error -101 [ 1596.168630][T17710] libceph: mon0 (1)[c::]:6789 connect error [ 1596.208294][T25270] ceph: No mds server is up or the cluster is laggy [ 1596.813073][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1596.979922][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4924'. [ 1597.924891][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1598.406936][T25300] orangefs_mount: mount request failed with -4 [ 1598.928582][T25310] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4927'. [ 1599.047401][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1599.461555][ T30] audit: type=1326 audit(3916643838.497:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25311 comm="syz.1.4928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1599.940039][T25323] virt_wifi0 speed is unknown, defaulting to 1000 [ 1599.954623][T25323] lo speed is unknown, defaulting to 1000 [ 1600.148553][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1600.346389][T25322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1601.271440][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1602.372174][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1602.497412][ T30] audit: type=1326 audit(3916643841.256:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm="syz.4.4936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc44f9acb9 code=0x0 [ 1603.484116][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1604.266601][ T30] audit: type=1400 audit(3916643843.006:2109): avc: denied { read } for pid=25356 comm="syz.8.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1604.314335][ T30] audit: type=1400 audit(3916643843.024:2110): avc: denied { read write } for pid=25356 comm="syz.8.4939" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1604.465249][ T30] audit: type=1400 audit(3916643843.024:2111): avc: denied { open } for pid=25356 comm="syz.8.4939" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1604.595854][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1604.927641][ T30] audit: type=1400 audit(3916643843.024:2112): avc: denied { ioctl } for pid=25356 comm="syz.8.4939" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1605.446684][T25375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4942'. [ 1605.588088][T25377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1605.707684][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1606.819467][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1607.942008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1608.413512][T25406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1608.452162][T25410] netlink: 'syz.1.4949': attribute type 21 has an invalid length. [ 1609.005325][T25406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.043136][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1609.093841][T25406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.432444][T25419] batadv_slave_1: entered promiscuous mode [ 1610.098076][T25416] batadv_slave_1: left promiscuous mode [ 1610.154985][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1610.996952][T25431] 9pnet_virtio: no channels available for device syz [ 1611.266796][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1611.816661][ T30] audit: type=1326 audit(3916643850.059:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.1.4961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1611.951698][T25453] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4959'. [ 1612.017858][T25454] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4960'. [ 1612.378596][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1613.490430][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1613.788440][T25474] overlayfs: failed to clone upperpath [ 1614.192174][T25481] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1614.244151][T25481] batadv1: entered allmulticast mode [ 1614.251615][T25481] team0: Port device batadv1 added [ 1614.602232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1615.188645][T25498] bridge0: left allmulticast mode [ 1615.724779][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1616.097840][T25505] netlink: 'syz.4.4973': attribute type 4 has an invalid length. [ 1616.242925][T25510] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4974'. [ 1616.257429][T25511] delete_channel: no stack [ 1616.264446][T25505] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1616.825929][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1616.896140][ T30] audit: type=1326 audit(3916643854.810:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.1.4977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1617.114577][T17710] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1617.693554][T17710] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1617.708796][T17710] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1617.736362][T17710] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1617.757691][T17710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.791574][T25516] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1617.820540][T17710] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1617.948428][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1618.104497][ T30] audit: type=1326 audit(3916643855.942:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25514 comm="syz.8.4976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d2079acb9 code=0x0 [ 1618.167377][T22345] usb 9-1: USB disconnect, device number 24 [ 1618.241507][T25536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1618.252876][T25536] block device autoloading is deprecated and will be removed. [ 1619.049868][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1619.150331][ T30] audit: type=1326 audit(3916643856.924:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25539 comm="syz.2.4981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464f9acb9 code=0x0 [ 1620.161399][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1621.283964][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1621.573521][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4986'. [ 1622.385031][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1622.761390][ T5831] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1622.779021][T25592] sctp: [Deprecated]: syz.2.4989 (pid 25592) Use of int in maxseg socket option. [ 1622.779021][T25592] Use struct sctp_assoc_value instead [ 1623.472401][T25600] ceph: No mds server is up or the cluster is laggy [ 1623.479604][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1623.494588][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1623.507546][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1623.755684][T25609] 9p: Bad value for 'rfdno' [ 1624.321570][ T30] audit: type=1326 audit(3916643861.760:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25607 comm="syz.4.4994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc44f9acb9 code=0x0 [ 1624.554842][ T30] audit: type=1400 audit(3916643861.976:2118): avc: denied { getopt } for pid=25617 comm="syz.2.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1624.608758][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1625.720490][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1625.946923][T25634] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1626.832329][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1627.955289][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1629.055959][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1629.361862][T25666] 9p: Bad value for 'rfdno' [ 1629.996762][ T3002] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1630.178506][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1630.609282][T25684] netlink: 182 bytes leftover after parsing attributes in process `syz.8.5010'. [ 1630.906380][ T30] audit: type=1326 audit(3916643867.915:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1630.940846][ T30] audit: type=1326 audit(3916643867.943:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1631.222466][ T30] audit: type=1326 audit(3916643867.943:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1631.272380][ T30] audit: type=1326 audit(3916643867.943:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1631.296110][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1631.439925][ T30] audit: type=1326 audit(3916643867.943:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1631.915921][ T30] audit: type=1326 audit(3916643868.018:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25686 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f878f95b58e code=0x7ffc0000 [ 1631.943105][ T5831] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1631.985660][ T30] audit: type=1326 audit(3916643868.018:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1632.030893][ T30] audit: type=1326 audit(3916643868.018:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1632.054854][ T30] audit: type=1326 audit(3916643868.159:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25686 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1632.109708][ T30] audit: type=1326 audit(3916643868.187:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25668 comm="syz.1.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f878f99acb9 code=0x7ffc0000 [ 1632.391369][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1633.503272][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1634.011712][T25716] lo: left allmulticast mode [ 1634.067615][T25716] tunl0: left allmulticast mode [ 1634.182865][T25716] gre0: left allmulticast mode [ 1634.198026][T25716] gretap0: left allmulticast mode [ 1634.216791][T25716] ip_vti0: left allmulticast mode [ 1634.226740][T25716] ip6_vti0: left allmulticast mode [ 1634.238049][T25716] sit0: left allmulticast mode [ 1634.250547][T25716] ip6tnl0: left allmulticast mode [ 1634.258687][T25716] ip6gre0: left allmulticast mode [ 1634.266536][T25716] ip6gretap0: left allmulticast mode [ 1634.275280][T25716] bridge0: left allmulticast mode [ 1634.282275][T25716] team0: left allmulticast mode [ 1634.287391][T25716] batadv1: left allmulticast mode [ 1634.295126][T25716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.303258][T25716] dummy0: left allmulticast mode [ 1634.313360][T25716] nlmon0: left allmulticast mode [ 1634.487517][T25716] caif0: left allmulticast mode [ 1634.496712][T25716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1634.615082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1635.093947][T25732] 9p: Bad value for 'rfdno' [ 1635.737544][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1635.923803][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5021'. [ 1636.278577][T25741] Cannot find add_set index 65532 as target [ 1636.742748][T25740] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1636.838773][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1637.950535][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1638.028573][T25755] netlink: 'syz.7.5035': attribute type 83 has an invalid length. [ 1638.096715][T25755] loop7: detected capacity change from 0 to 1 [ 1638.480054][T25755] loop7: detected capacity change from 1 to 0 [ 1638.561755][T25759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1639.073058][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1639.213874][T25770] gre4: entered promiscuous mode [ 1639.702676][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1639.702691][ T30] audit: type=1326 audit(3916643876.147:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1639.773303][ T30] audit: type=1326 audit(3916643876.203:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1639.801405][ T30] audit: type=1326 audit(3916643876.212:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.032059][ T30] audit: type=1326 audit(3916643876.212:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.056377][ T30] audit: type=1326 audit(3916643876.212:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.080347][ T30] audit: type=1326 audit(3916643876.212:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.174212][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1640.311899][T25782] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1640.347509][ T30] audit: type=1326 audit(3916643876.212:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.399361][ T30] audit: type=1326 audit(3916643876.212:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.456982][ T30] audit: type=1326 audit(3916643876.212:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1640.558392][ T30] audit: type=1326 audit(3916643876.212:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.4.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1641.018645][T17710] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1641.211052][T17710] usb 8-1: Using ep0 maxpacket: 32 [ 1641.240234][T17710] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1641.267765][T17710] usb 8-1: config 0 has no interface number 0 [ 1641.292337][T17710] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1641.301640][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1641.334730][T17710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.445178][T17710] usb 8-1: Product: syz [ 1641.449814][T17710] usb 8-1: Manufacturer: syz [ 1641.454437][T17710] usb 8-1: SerialNumber: syz [ 1641.486077][T17710] usb 8-1: config 0 descriptor?? [ 1641.507638][T17710] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1642.377664][T17710] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1642.395521][T17710] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1642.404992][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1643.520357][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1643.581824][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 1644.097828][T25819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1644.632183][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1645.069973][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1645.133949][T22345] usb 8-1: USB disconnect, device number 18 [ 1645.285870][T22345] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1645.733309][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1645.844249][T22345] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1645.858624][T22345] quatech2 8-1:0.51: device disconnected [ 1646.845222][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1646.848354][T25850] use of bytesused == 0 is deprecated and will be removed in the future, [ 1646.861264][T25850] use the actual size instead. [ 1647.681364][T25859] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5047'. [ 1647.956924][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1649.079503][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1649.359567][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1649.359587][ T30] audit: type=1400 audit(3916643884.865:2159): avc: denied { bind } for pid=25863 comm="syz.1.5051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1649.455252][ T30] audit: type=1400 audit(3916643884.865:2160): avc: denied { name_bind } for pid=25863 comm="syz.1.5051" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1649.504841][ T30] audit: type=1400 audit(3916643884.865:2161): avc: denied { node_bind } for pid=25863 comm="syz.1.5051" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1649.605140][ T30] audit: type=1326 audit(3916643885.211:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25862 comm="syz.2.5049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464f9acb9 code=0x0 [ 1650.191245][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1650.336004][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1651.292418][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1652.384691][T25908] netlink: 'syz.2.5058': attribute type 2 has an invalid length. [ 1652.414929][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1653.322345][T25917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5055'. [ 1653.386884][ T30] audit: type=1326 audit(3916643888.850:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25919 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1653.447872][ T30] audit: type=1326 audit(3916643888.859:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25919 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1653.516048][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1653.527866][ T30] audit: type=1326 audit(3916643888.859:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25919 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1653.651598][ T30] audit: type=1326 audit(3916643888.859:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25919 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1653.821430][ T30] audit: type=1326 audit(3916643888.859:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25919 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1654.548258][ T30] audit: type=1326 audit(3916643888.859:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25919 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1654.572061][T25928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1654.627904][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1655.472873][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1655.472889][ T30] audit: type=1400 audit(3916643890.459:2185): avc: denied { getopt } for pid=25930 comm="syz.7.5074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1655.739712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1655.887560][T25945] CIFS mount error: No usable UNC path provided in device string! [ 1655.887560][T25945] [ 1655.949654][T25945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1655.950514][T25951] netlink: 6716 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1656.101031][T25945] overlayfs: failed to clone upperpath [ 1656.127532][T25945] overlayfs: failed to clone upperpath [ 1656.785778][T25955] gre1: entered promiscuous mode [ 1656.851592][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1657.963390][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1659.075169][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1659.239679][ T30] audit: type=1400 audit(3916643894.425:2186): avc: denied { append } for pid=25980 comm="syz.7.5075" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1659.300409][T25981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.694223][T25989] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5078'. [ 1660.187001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1661.298975][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1661.370132][T26013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1661.384487][T26013] team0: Port device batadv1 added [ 1661.602041][T26015] hub 9-0:1.0: USB hub found [ 1661.609244][T26015] hub 9-0:1.0: 1 port detected [ 1662.236204][T26012] usb usb8: usbfs: process 26012 (syz.8.5080) did not claim interface 0 before use [ 1662.410824][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1662.682842][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5085'. [ 1663.009451][T26032] virt_wifi0 speed is unknown, defaulting to 1000 [ 1663.023932][T26032] lo speed is unknown, defaulting to 1000 [ 1663.522536][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1664.207241][T17855] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1664.634316][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1664.919998][ T30] audit: type=1400 audit(3916643905.731:2187): avc: denied { read } for pid=26042 comm="syz.1.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1664.958455][ T30] audit: type=1400 audit(3916643905.759:2188): avc: denied { ioctl } for pid=26042 comm="syz.1.5090" path="socket:[98445]" dev="sockfs" ino=98445 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1665.746142][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1665.754768][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5092'. [ 1666.305262][T26063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5093'. [ 1666.857928][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1667.969750][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1668.419131][T26084] siw: device registration error -23 [ 1668.921137][ T30] audit: type=1400 audit(3916643909.472:2189): avc: denied { getopt } for pid=26072 comm="syz.2.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1669.081572][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1669.747223][T19114] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1670.193433][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1670.268140][T19114] usb 8-1: Using ep0 maxpacket: 8 [ 1670.274770][T19114] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.307917][T19114] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1670.343009][T19114] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1670.371651][T19114] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.473314][T19114] usb 8-1: config 0 descriptor?? [ 1671.305214][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1671.971721][T22345] usb 8-1: USB disconnect, device number 19 [ 1672.417084][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1673.539595][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1674.640687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1674.675863][T26143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5110'. [ 1675.454807][T26154] netlink: 'syz.2.5111': attribute type 1 has an invalid length. [ 1675.643404][T26154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1675.752623][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1676.093309][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5112'. [ 1676.110833][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5112'. [ 1676.174098][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5112'. [ 1676.227791][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5112'. [ 1676.864354][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1677.206210][T26166] ceph: No mds server is up or the cluster is laggy [ 1677.304988][T19114] libceph: connect (1)[c::]:6789 error -101 [ 1677.324140][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1677.976201][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1678.195280][T26177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1678.832926][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5112'. [ 1679.088008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1679.553341][T26194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1679.571955][T19114] libceph: connect (1)[c::]:6789 error -1 [ 1679.610759][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1679.839089][T26196] ceph: No mds server is up or the cluster is laggy [ 1680.085618][T26203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.180642][T26203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.199926][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1680.247793][T26203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.311668][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1681.723005][T26216] ceph: No mds server is up or the cluster is laggy [ 1681.730201][T19114] libceph: connect (1)[c::]:6789 error -101 [ 1681.756723][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1682.423447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1682.442766][T26223] ceph: No mds server is up or the cluster is laggy [ 1682.451926][T19114] libceph: connect (1)[c::]:6789 error -101 [ 1682.493148][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1682.722058][T26236] netlink: 'syz.1.5128': attribute type 4 has an invalid length. [ 1682.755714][T26236] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5128'. [ 1682.894804][T26236] delete_channel: no stack [ 1682.910800][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5131'. [ 1683.103368][ T30] audit: type=1326 audit(3916643922.746:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.166829][ T30] audit: type=1326 audit(3916643922.746:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.260712][ T30] audit: type=1326 audit(3916643922.746:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.337993][ T30] audit: type=1326 audit(3916643922.746:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.410654][ T30] audit: type=1326 audit(3916643922.774:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.535034][ T30] audit: type=1326 audit(3916643922.774:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.535296][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1683.701914][ T30] audit: type=1326 audit(3916643922.774:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1683.882581][ T30] audit: type=1326 audit(3916643922.774:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1684.061309][T26251] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 1684.149857][ T30] audit: type=1326 audit(3916643922.774:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1684.355462][T26253] overlay: Unknown parameter '/' [ 1684.378832][T26253] overlayfs: failed to clone lowerpath [ 1684.647158][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1684.901738][ T30] audit: type=1326 audit(3916643922.774:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26241 comm="syz.2.5132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464f9acb9 code=0x7ffc0000 [ 1685.157460][T26265] tmpfs: Bad value for 'mpol' [ 1685.164649][T26265] futex_wake_op: syz.2.5138 tries to shift op by 144; fix this program [ 1685.504782][T26271] lo: left allmulticast mode [ 1685.512533][T26271] tunl0: left allmulticast mode [ 1685.523449][T26271] gre0: left allmulticast mode [ 1685.565027][T26271] ip_vti0: left allmulticast mode [ 1685.578111][T26271] ip6_vti0: left allmulticast mode [ 1685.590357][T26271] sit0: left allmulticast mode [ 1685.614909][T26271] ip6tnl0: left allmulticast mode [ 1685.653313][T26271] ip6gre0: left allmulticast mode [ 1685.664766][T26271] ip6gretap0: left allmulticast mode [ 1685.676723][T26271] bridge0: port 3(gretap0) entered blocking state [ 1685.683271][T26271] bridge0: port 3(gretap0) entered forwarding state [ 1685.709643][T26271] vcan0: left allmulticast mode [ 1685.722185][T26271] bond0: left allmulticast mode [ 1685.733372][T26271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.744102][T26271] dummy0: left allmulticast mode [ 1685.757796][T26271] nlmon0: left allmulticast mode [ 1685.769634][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1686.881428][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1686.960880][T26271] caif0: left allmulticast mode [ 1686.966049][T26271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1687.982657][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1688.509379][T26293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5146'. [ 1689.105091][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1689.208225][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1689.208242][ T30] audit: type=1800 audit(3916643928.442:2225): pid=26282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5144" name="bus" dev="ramfs" ino=98779 res=0 errno=0 [ 1690.206410][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1690.567586][ T30] audit: type=1400 audit(3916643929.724:2226): avc: denied { map } for pid=26305 comm="syz.8.5148" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1691.329167][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1691.734235][T26322] tipc: Enabling of bearer rejected, already enabled [ 1691.742733][T26323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1691.751965][T26323] tipc: Disabling bearer [ 1692.440535][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1692.718473][ T30] audit: type=1400 audit(3916643929.724:2227): avc: denied { execute } for pid=26305 comm="syz.8.5148" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1693.311023][T26331] netlink: 'syz.1.5152': attribute type 8 has an invalid length. [ 1693.541723][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1694.545507][T26346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.653524][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1695.061310][T26356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=26356 comm=syz.7.5160 [ 1695.765346][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1696.877163][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1697.520349][T26373] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1697.988995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1699.101966][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1699.143682][ T9947] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1700.063735][ T30] audit: type=1400 audit(3916643938.610:2228): avc: denied { getopt } for pid=26396 comm="syz.8.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1700.206386][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5169'. [ 1700.215630][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1701.324490][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1701.399236][ T30] audit: type=1326 audit(3916643939.854:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1701.631533][T26414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.446983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1702.651268][ T30] audit: type=1326 audit(3916643939.854:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1702.906595][ T30] audit: type=1326 audit(3916643939.854:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1702.960162][ T30] audit: type=1326 audit(3916643939.854:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1703.187015][ T30] audit: type=1326 audit(3916643939.854:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1703.212182][ T30] audit: type=1326 audit(3916643939.854:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1703.251556][ T30] audit: type=1326 audit(3916643939.854:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2079acb9 code=0x7ffc0000 [ 1703.276697][ T30] audit: type=1326 audit(3916643939.854:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d2075b58e code=0x7ffc0000 [ 1703.562813][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1703.623026][ T30] audit: type=1326 audit(3916643939.854:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26406 comm="syz.8.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d2079bfd7 code=0x7ffc0000 [ 1704.045163][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5177'. [ 1704.659932][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1705.782454][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1706.489804][T26458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1706.894258][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1707.995442][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1708.143574][T19114] libceph: connect (1)[c::]:6789 error -101 [ 1708.155003][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1708.288895][T26467] ceph: No mds server is up or the cluster is laggy [ 1708.980688][T26477] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1709.072015][T26477] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1709.107240][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1709.672676][T26490] ceph: No mds server is up or the cluster is laggy [ 1709.681581][T19114] libceph: connect (1)[c::]:6789 error -101 [ 1709.767303][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1709.785878][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1710.219064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1711.190928][T26503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5193'. [ 1711.293315][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1711.293327][ T30] audit: type=1326 audit(3916643949.115:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26506 comm="syz.1.5194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1711.330893][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1712.453379][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1713.367775][T26540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5201'. [ 1713.565211][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1714.132133][T26543] netlink: 'syz.8.5202': attribute type 10 has an invalid length. [ 1714.425344][T26546] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1714.666341][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1715.003989][T26556] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5205'. [ 1715.525142][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1715.778186][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1716.004583][T26565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1716.890064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1717.049782][T26584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1718.001813][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1719.124370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1719.331409][ T5831] Bluetooth: hci1: command 0x0401 tx timeout [ 1719.442648][T26583] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 1720.225440][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1720.486994][T26610] ip6gretap0: entered promiscuous mode [ 1720.493328][T26610] vlan2: entered promiscuous mode [ 1721.337272][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1721.517698][T26616] ceph: No mds server is up or the cluster is laggy [ 1721.776540][T19114] libceph: connect (1)[c::]:6789 error -101 [ 1721.782765][T19114] libceph: mon0 (1)[c::]:6789 connect error [ 1722.449151][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1723.165080][ T30] audit: type=1326 audit(3916643960.208:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.2.5223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464f9acb9 code=0x0 [ 1723.560926][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1724.537767][T26653] /dev/nullb0: Can't lookup blockdev [ 1724.672759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1725.784599][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1725.882527][T26666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1726.028491][T26659] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=34978 sclass=netlink_xfrm_socket pid=26659 comm=syz.7.5229 [ 1726.182618][T26672] ceph: No mds server is up or the cluster is laggy [ 1726.528490][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1726.535132][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1726.547361][T26659] tmpfs: Unknown parameter '0xffffffffffffffff' [ 1726.896433][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1727.090109][T26680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.534149][T26680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.982559][T26689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.008256][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1728.010547][T26689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.535765][T26689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.942094][T26699] netlink: 'syz.2.5238': attribute type 10 has an invalid length. [ 1729.120082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1730.231891][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1731.357476][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1732.028117][T26728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.036437][T26728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.377457][T26728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1732.390684][T26728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1732.402711][ T30] audit: type=1326 audit(3916643968.861:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26727 comm="syz.4.5244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc44f9acb9 code=0x0 [ 1732.455542][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1732.509112][T26728] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1732.547325][T26728] sit1: left allmulticast mode [ 1732.567665][T26728] bridge1: left promiscuous mode [ 1732.572628][T26728] bridge1: left allmulticast mode [ 1732.588992][T26730] : renamed from bond_slave_0 [ 1732.602768][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.657105][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.666667][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.678316][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.002223][T26741] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1733.019369][T26741] Cannot find add_set index 65532 as target [ 1733.443478][T26743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.578271][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1733.744046][T26748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.782802][T26750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5249'. [ 1734.270279][T26760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.284590][T26760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.362741][T26760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.405541][T26762] netlink: 'syz.7.5261': attribute type 1 has an invalid length. [ 1734.538564][T26766] overlayfs: failed to clone upperpath [ 1734.679209][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1734.982401][T26762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1735.012944][T26769] bond3: (slave ip6erspan0): making interface the new active one [ 1735.060499][T26769] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1735.801670][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1735.886823][ T370] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1736.002798][T26768] MPI: mpi too large (130952 bits) [ 1736.817202][ T30] audit: type=1326 audit(3916643972.986:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26791 comm="syz.4.5259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc44f9acb9 code=0x0 [ 1736.913533][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1737.060710][T26799] netlink: 'syz.7.5260': attribute type 10 has an invalid length. [ 1738.014743][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1738.279325][T26816] macsec0: entered promiscuous mode [ 1738.429271][T26817] ceph: No mds server is up or the cluster is laggy [ 1738.755299][T26816] macsec0: left allmulticast mode [ 1738.785409][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1738.794278][T26821] macsec0: left promiscuous mode [ 1738.795183][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1738.811053][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1739.126444][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1740.238352][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1740.241551][T26837] overlayfs: failed to clone upperpath [ 1740.722338][T26836] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1740.836330][ T30] audit: type=1400 audit(3916643976.082:2258): avc: denied { mount } for pid=26828 comm="syz.2.5268" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1741.160492][T22345] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1741.350131][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1742.470608][T22345] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1742.472619][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1742.753843][T22345] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1742.771927][T22345] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1742.792303][T22345] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.390036][T22345] usb 8-1: can't set config #27, error -71 [ 1743.411025][T22345] usb 8-1: USB disconnect, device number 20 [ 1743.584445][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1744.279641][T26869] IPVS: Error connecting to the multicast addr [ 1744.517996][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.556154][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.685590][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1744.746944][T26871] netlink: 'syz.7.5276': attribute type 10 has an invalid length. [ 1745.645081][T26884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.797548][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1745.996802][T26892] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1746.359084][T26884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.622870][T26886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1746.909366][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1747.470825][T26900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5278'. [ 1748.021125][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1748.167270][T26893] virt_wifi0 speed is unknown, defaulting to 1000 [ 1748.190070][T26893] lo speed is unknown, defaulting to 1000 [ 1749.132890][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1750.244693][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1750.323550][T26930] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5289'. [ 1751.356730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1752.479027][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1753.400269][T26958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5292'. [ 1753.487798][T26963] Device name cannot be null; rc = [-22] [ 1753.590865][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1753.906830][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.934942][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.991056][T26965] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1754.017229][T26965] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1755.015579][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1755.035075][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1755.589722][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1755.596974][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1756.146152][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1756.159980][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1756.768455][T27001] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5301'. [ 1756.779129][T26999] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5301'. [ 1757.284312][T26975] ceph: No mds server is up or the cluster is laggy [ 1757.978488][T27030] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1758.124619][T27033] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1758.141981][ T30] audit: type=1326 audit(3916643992.891:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27031 comm="syz.1.5306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1758.385462][T27045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5308'. [ 1761.071979][T27073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5315'. [ 1761.614556][T27072] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1761.622429][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.643830][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.651283][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.658833][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.761471][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.781121][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.788550][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.807770][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.825237][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.834508][ T5805] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1761.904875][ T5805] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1762.913792][T27081] fido_id[27081]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1763.134327][T27097] netlink: 'syz.4.5321': attribute type 10 has an invalid length. [ 1764.092794][T27108] netlink: 'syz.2.5322': attribute type 10 has an invalid length. [ 1765.256014][T27122] virt_wifi0 speed is unknown, defaulting to 1000 [ 1765.271514][T27122] lo speed is unknown, defaulting to 1000 [ 1765.478407][T27125] overlayfs: failed to resolve './file0': -2 [ 1765.970504][T22345] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1766.195792][T22345] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1766.216509][T22345] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1766.268473][T22345] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1766.414871][T22345] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.441792][T27129] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1766.472030][T22345] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1767.009949][T27134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1767.056542][ T30] audit: type=1326 audit(3916644001.272:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27126 comm="syz.8.5327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d2079acb9 code=0x0 [ 1767.221483][T22345] usb 9-1: USB disconnect, device number 25 [ 1767.823066][T26857] udevd[26857]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1769.939408][T27172] overlayfs: missing 'lowerdir' [ 1770.385786][T18225] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1770.549395][T18225] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1770.560958][T18225] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1770.739555][T27181] netlink: 'syz.1.5338': attribute type 10 has an invalid length. [ 1770.758200][T18225] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1770.768126][T18225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.785616][T27167] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1770.805925][T18225] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1771.659143][ T30] audit: type=1326 audit(3916644005.585:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.7.5343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1edd99acb9 code=0x0 [ 1771.724145][T18225] usb 8-1: USB disconnect, device number 21 [ 1771.891911][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5340'. [ 1772.944383][T27202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5341'. [ 1772.978659][T27202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27202 comm=syz.2.5341 [ 1773.010109][T27202] netlink: 'syz.2.5341': attribute type 1 has an invalid length. [ 1773.017909][T27202] netlink: 'syz.2.5341': attribute type 2 has an invalid length. [ 1773.777381][T27213] cgroup: noprefix used incorrectly [ 1775.421373][ T5805] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1775.914553][ T5805] usb 8-1: device descriptor read/64, error -71 [ 1775.945482][T27235] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1776.184237][T27242] netdevsim netdevsim8: Direct firmware load for / [ 1776.184237][T27242] failed with error -2 [ 1776.212302][ T5805] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1776.641056][T27252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1776.655265][T27242] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 1776.655265][T27242] [ 1776.757334][ T5805] usb 8-1: device descriptor read/64, error -71 [ 1777.129088][T27258] ceph: No mds server is up or the cluster is laggy [ 1777.139327][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1777.342979][ T5805] usb usb8-port1: attempt power cycle [ 1777.361260][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1777.572585][T27267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1777.719826][ T5805] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1777.770919][T27272] overlayfs: failed to clone upperpath [ 1778.120108][ T5805] usb 8-1: device descriptor read/8, error -71 [ 1778.139996][T21043] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1778.242060][T27280] netlink: 'syz.4.5369': attribute type 10 has an invalid length. [ 1778.353234][T21043] usb 9-1: too many configurations: 39, using maximum allowed: 8 [ 1778.384630][T21043] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1778.395414][T21043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.897749][T27287] virt_wifi0 speed is unknown, defaulting to 1000 [ 1778.904891][T27287] lo speed is unknown, defaulting to 1000 [ 1779.033461][T27285] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5368'. [ 1779.059394][T21043] usb 9-1: Product: syz [ 1779.110119][T21043] usb 9-1: Manufacturer: syz [ 1779.114753][T21043] usb 9-1: SerialNumber: syz [ 1779.125444][T21043] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1779.255872][T17710] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1780.453238][T17710] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1780.460253][T17710] ath9k_htc: Failed to initialize the device [ 1780.872370][T17710] usb 9-1: ath9k_htc: USB layer deinitialized [ 1780.987691][ T30] audit: type=1400 audit(3916644014.303:2262): avc: denied { read write } for pid=27299 comm="syz.7.5372" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1781.066358][ T30] audit: type=1400 audit(3916644014.303:2263): avc: denied { open } for pid=27299 comm="syz.7.5372" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1781.157807][T18225] usb 9-1: USB disconnect, device number 26 [ 1781.219527][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1783.097029][T18225] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1783.288434][ T30] audit: type=1326 audit(3916644016.454:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27316 comm="syz.1.5377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1783.447816][T18225] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1783.457231][T18225] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.465877][T18225] usb 8-1: Product: syz [ 1783.470115][T18225] usb 8-1: Manufacturer: syz [ 1783.475467][T18225] usb 8-1: SerialNumber: syz [ 1783.485079][T18225] usb 8-1: config 0 descriptor?? [ 1783.664919][T27326] ceph: No mds server is up or the cluster is laggy [ 1783.673634][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1783.688579][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1784.063678][T18225] usb 8-1: USB disconnect, device number 26 [ 1784.186819][T26833] udevd[26833]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1784.234979][ T30] audit: type=1400 audit(3916644017.343:2265): avc: denied { read } for pid=27299 comm="syz.7.5372" dev="sockfs" ino=102365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1784.323275][T27300] netlink: 'syz.7.5372': attribute type 1 has an invalid length. [ 1784.505792][T27300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1784.604379][T27337] netlink: 'syz.2.5380': attribute type 1 has an invalid length. [ 1785.054215][T27336] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1785.152762][T27300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5372'. [ 1785.190992][T27300] bond4: (slave dummy0): making interface the new active one [ 1785.200043][T27300] dummy0: entered promiscuous mode [ 1785.205981][T27300] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1785.217707][T27341] : entered promiscuous mode [ 1785.829632][T27336] bond4 (unregistering): (slave veth3): Releasing active interface [ 1786.038981][T27336] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1786.408639][T27336] bond4 (unregistering): Released all slaves [ 1786.692128][T27357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5385'. [ 1786.777312][T27361] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 1786.786970][T27357] netlink: 'syz.2.5385': attribute type 20 has an invalid length. [ 1786.794928][T27357] netlink: 'syz.2.5385': attribute type 21 has an invalid length. [ 1786.877381][T27361] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 1787.060139][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1787.151961][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1787.327258][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1787.416336][T27365] ceph: No mds server is up or the cluster is laggy [ 1787.738127][T27379] netlink: 'syz.7.5390': attribute type 10 has an invalid length. [ 1787.918018][T27386] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 1788.194762][T27389] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1791.880180][T27412] ceph: No mds server is up or the cluster is laggy [ 1791.894203][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1791.974701][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1792.682641][T27427] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 1792.929315][T27431] IPVS: stopping backup sync thread 27427 ... [ 1795.341545][T27455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5405'. [ 1796.010639][T27461] binder: 27458:27461 ioctl c0306201 0 returned -14 [ 1796.099559][T27461] binder: BINDER_SET_CONTEXT_MGR already set [ 1796.105823][T27461] binder: 27458:27461 ioctl 4018620d 200000000040 returned -16 [ 1796.976944][T27471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1797.723068][T27479] ceph: No mds server is up or the cluster is laggy [ 1797.732179][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1797.738444][T27471] netlink: 'syz.2.5412': attribute type 20 has an invalid length. [ 1797.752520][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1797.770024][T27471] netlink: 'syz.2.5412': attribute type 21 has an invalid length. [ 1798.235096][T27489] gre2: entered promiscuous mode [ 1798.591342][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1800.729687][T27534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5424'. [ 1801.392099][ T30] audit: type=1400 audit(3916644033.394:2266): avc: denied { map } for pid=27533 comm="syz.8.5425" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1801.561659][ T30] audit: type=1400 audit(3916644033.394:2267): avc: denied { execute } for pid=27533 comm="syz.8.5425" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1802.068661][T27549] ceph: No mds server is up or the cluster is laggy [ 1802.076349][T18225] libceph: connect (1)[c::]:6789 error -1 [ 1802.082256][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1802.090061][T27546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1802.100156][T27546] netlink: 'syz.2.5428': attribute type 20 has an invalid length. [ 1802.262383][T27546] netlink: 'syz.2.5428': attribute type 21 has an invalid length. [ 1803.798946][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1803.831944][T27570] ceph: No mds server is up or the cluster is laggy [ 1804.275194][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1804.929051][T27582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5434'. [ 1806.573443][T18225] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1806.765978][T18225] usb 9-1: device descriptor read/64, error -71 [ 1806.791193][T27603] gfs2: gfs2 mount does not exist [ 1806.815694][T27603] hugetlbfs: Bad value 'm' for mount option 'size' [ 1806.815694][T27603] [ 1806.834554][ T30] audit: type=1400 audit(3916644038.464:2268): avc: denied { remount } for pid=27600 comm="syz.7.5439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1807.172279][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1807.182611][T27605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1807.268379][T18225] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1807.407442][T18225] usb 9-1: device descriptor read/64, error -71 [ 1807.443053][ T30] audit: type=1400 audit(3916644039.053:2269): avc: denied { shutdown } for pid=27611 comm="syz.2.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1807.599763][T18225] usb usb9-port1: attempt power cycle [ 1807.605998][ T30] audit: type=1400 audit(3916644039.194:2270): avc: denied { unmount } for pid=17214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1808.058978][T27614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5442'. [ 1808.373942][T18225] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1808.404422][T18225] usb 9-1: device descriptor read/8, error -71 [ 1808.915594][T18225] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1808.934344][T27626] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1809.287146][T18225] usb 9-1: device descriptor read/8, error -71 [ 1809.546713][T18225] usb usb9-port1: unable to enumerate USB device [ 1812.068675][T27661] Invalid source name [ 1812.072727][T27661] UBIFS error (pid: 27661): cannot open "ubifs", error -22 [ 1813.376639][T27671] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5455'. [ 1813.411159][T27671] tipc: Enabling of bearer rejected, already enabled [ 1814.275321][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5459'. [ 1814.716077][T27690] netlink: 'syz.4.5461': attribute type 10 has an invalid length. [ 1815.428690][T27704] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5463'. [ 1819.831325][T27745] sd 0:0:1:0: device reset [ 1821.386538][T27767] tmpfs: Unknown parameter 'grpquota4' [ 1822.217590][T27771] netlink: 'syz.1.5477': attribute type 10 has an invalid length. [ 1826.797890][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1827.195990][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1827.845407][T27819] ceph: No mds server is up or the cluster is laggy [ 1828.012824][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1828.019849][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1830.848763][T27855] netlink: 'syz.1.5493': attribute type 10 has an invalid length. [ 1831.694731][T27864] ceph: No mds server is up or the cluster is laggy [ 1831.703851][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1831.722516][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1833.108253][T27881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5499'. [ 1835.848485][T27918] ceph: No mds server is up or the cluster is laggy [ 1835.855481][T18225] libceph: connect (1)[c::]:6789 error -22 [ 1835.861448][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1836.392825][ T30] audit: type=1326 audit(3916644066.133:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27922 comm="syz.1.5509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1837.113889][T27930] lo: entered allmulticast mode [ 1837.120551][T27930] tunl0: entered allmulticast mode [ 1837.126264][T27930] gre0: entered allmulticast mode [ 1837.131594][T27930] gretap0: entered allmulticast mode [ 1837.137319][T27930] ip_vti0: entered allmulticast mode [ 1837.143016][T27930] ip6_vti0: entered allmulticast mode [ 1837.148687][T27930] sit0: entered allmulticast mode [ 1837.154232][T27930] ip6tnl0: entered allmulticast mode [ 1837.159863][T27930] ip6gre0: entered allmulticast mode [ 1837.165414][T27930] ip6gretap0: entered allmulticast mode [ 1837.171253][T27930] bridge0: entered allmulticast mode [ 1837.176812][T27930] team0: entered allmulticast mode [ 1837.182041][T27930] batadv1: entered allmulticast mode [ 1837.187809][T27930] dummy0: entered allmulticast mode [ 1837.193507][T27930] nlmon0: entered allmulticast mode [ 1837.199078][T27930] caif0: entered allmulticast mode [ 1837.205983][T27930] bridge1: left promiscuous mode [ 1837.211256][T27930] bond4: entered allmulticast mode [ 1837.216840][T27930] mac80211_hwsim hwsim43 wlan7: entered allmulticast mode [ 1837.224859][T27930] gre4: left promiscuous mode [ 1837.229619][T27930] gre4: entered allmulticast mode [ 1837.235191][T27930] bond5: entered allmulticast mode [ 1837.240756][T27930] ipip1: entered allmulticast mode [ 1837.246240][T27930] veth14: entered allmulticast mode [ 1837.251522][T27930] veth15: entered allmulticast mode [ 1837.256865][T27930] veth16: entered allmulticast mode [ 1837.262114][T27930] veth17: entered allmulticast mode [ 1837.267441][T27930] vxlan0: entered allmulticast mode [ 1837.272731][T27930] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 1838.510734][T27945] netlink: 'syz.2.5514': attribute type 10 has an invalid length. [ 1838.864714][T27953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5516'. [ 1839.180431][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5517'. [ 1839.490630][T27962] bridge3: entered allmulticast mode [ 1839.542624][T27962] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.5518'. [ 1839.564809][T27962] ksmbd: Unknown IPC event: 3, ignore. [ 1841.846107][ T30] audit: type=1400 audit(3916644070.062:2272): avc: denied { setattr } for pid=27964 comm="syz.1.5519" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1842.455737][T27990] fuse: Unknown parameter '0x0000000000000003' [ 1845.495317][ T30] audit: type=1400 audit(3916644074.636:2273): avc: denied { module_load } for pid=28012 comm="syz.7.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1846.510811][ T30] audit: type=1400 audit(3916644075.581:2274): avc: denied { read } for pid=28031 comm="syz.8.5534" dev="sockfs" ino=105515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1846.944294][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1847.088183][T28039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5535'. [ 1848.465805][T28050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1848.578214][T28051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1848.650022][T28050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1850.387184][ T30] audit: type=1326 audit(3916644079.219:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28061 comm="syz.2.5541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464f9acb9 code=0x0 [ 1850.430874][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1850.514782][T18225] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1850.558262][T28073] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1850.694027][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5545'. [ 1850.714898][T18225] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1850.731910][T18225] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1850.756316][T18225] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1850.771004][T28077] SET target dimension over the limit! [ 1850.785625][T18225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.819386][T18225] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1850.941199][T18225] usb 8-1: invalid MIDI out EP 0 [ 1851.010619][T18225] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1851.103542][ T30] audit: type=1326 audit(3916644079.893:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28058 comm="syz.7.5542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1edd99acb9 code=0x0 [ 1851.167149][T18225] usb 8-1: USB disconnect, device number 27 [ 1851.178249][T28082] udevd[28082]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.970295][T28094] netlink: 'syz.1.5548': attribute type 12 has an invalid length. [ 1852.743132][T28101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1852.758962][T28101] team0: Port device batadv1 added [ 1852.938738][T28102] hub 9-0:1.0: USB hub found [ 1852.949355][T28102] hub 9-0:1.0: 1 port detected [ 1854.906862][T28124] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1855.077818][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5554'. [ 1855.997658][T28134] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5556'. [ 1856.656583][T28139] netlink: 'syz.1.5558': attribute type 5 has an invalid length. [ 1856.669167][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5558'. [ 1856.680601][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5558'. [ 1857.071006][T28146] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1857.607653][T28147] netlink: 'syz.1.5559': attribute type 3 has an invalid length. [ 1857.621146][T28147] overlayfs: failed to clone lowerpath [ 1857.628818][T28147] overlayfs: failed to clone lowerpath [ 1858.858846][T28155] affs: No valid root block on device nullb0 [ 1859.681824][T28174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5565'. [ 1859.801536][T28175] input: syz0 as /devices/virtual/input/input35 [ 1860.443790][T17710] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1860.626552][T17710] usb 9-1: config 255 has an invalid interface number: 175 but max is 0 [ 1860.634930][T17710] usb 9-1: config 255 has no interface number 0 [ 1860.649754][T17710] usb 9-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 1860.657708][T18225] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1860.677324][T17710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.788645][T17710] usb 9-1: Product: syz [ 1860.793643][T17710] usb 9-1: Manufacturer: syz [ 1860.808113][T17710] usb 9-1: SerialNumber: syz [ 1860.830409][T18225] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.841759][T17710] asix 9-1:255.175: probe with driver asix failed with error -22 [ 1860.841929][T18225] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1861.148655][T28175] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1861.268444][T18225] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1861.281677][T18225] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1861.320296][T18225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.391993][T18225] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1861.457727][T18225] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1861.868496][ T30] audit: type=1326 audit(3916644089.967:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28185 comm="syz.7.5569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1edd99acb9 code=0x0 [ 1862.535480][T17710] usb 8-1: USB disconnect, device number 28 [ 1862.925631][T18225] usb 9-1: USB disconnect, device number 31 [ 1863.200302][T28218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.297017][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5575'. [ 1863.776775][T28218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.262724][T28231] netlink: 'syz.1.5578': attribute type 11 has an invalid length. [ 1864.270776][T28231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5578'. [ 1865.179685][T28239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1866.537107][T22345] Process accounting resumed [ 1867.898430][T28272] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5586'. [ 1869.220897][T28280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1869.394643][T28280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1869.610089][T28285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1870.443758][T28304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5595'. [ 1871.855906][T28318] virt_wifi0 speed is unknown, defaulting to 1000 [ 1871.868178][T28318] lo speed is unknown, defaulting to 1000 [ 1873.782522][T28329] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1874.407432][T28342] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5602'. [ 1874.875769][ T30] audit: type=1326 audit(3916644102.118:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28344 comm="syz.1.5604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f878f99acb9 code=0x0 [ 1874.992720][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1875.289614][T28356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1875.426536][T28354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1876.179097][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5608'. [ 1876.330562][T28362] netlink: 'syz.2.5608': attribute type 20 has an invalid length. [ 1876.351592][T28362] netlink: 'syz.2.5608': attribute type 21 has an invalid length. [ 1876.440587][T28371] overlayfs: missing 'lowerdir' [ 1876.633762][T28372] gre2: entered promiscuous mode [ 1876.906840][ T30] audit: type=1400 audit(3916644104.026:2279): avc: denied { bind } for pid=28380 comm="syz.2.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1877.317175][T28376] NFSD: Failed to start, no listeners configured. [ 1878.608346][T28392] RDS: rds_bind could not find a transport for ::ffff:172.20.20.24, load rds_tcp or rds_rdma? [ 1879.542987][T28402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5619'. [ 1879.552364][ T30] audit: type=1400 audit(3916644106.159:2280): avc: denied { search } for pid=28395 comm="syz.1.5618" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1879.600783][ T30] audit: type=1400 audit(3916644106.168:2281): avc: denied { search } for pid=28395 comm="syz.1.5618" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1879.623749][ T30] audit: type=1400 audit(3916644106.168:2282): avc: denied { search } for pid=28395 comm="syz.1.5618" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1880.536720][T28417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.114073][ T30] audit: type=1326 audit(3916644107.496:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1881.137827][ T30] audit: type=1326 audit(3916644107.496:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1881.161384][ T30] audit: type=1326 audit(3916644107.496:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1881.217562][T28417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.254789][ T30] audit: type=1326 audit(3916644107.496:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1881.505067][T28427] netlink: 'syz.8.5625': attribute type 8 has an invalid length. [ 1881.908672][ T30] audit: type=1326 audit(3916644107.496:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1881.961092][ T30] audit: type=1326 audit(3916644107.496:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1882.119564][ T30] audit: type=1326 audit(3916644107.496:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1882.276048][ T30] audit: type=1326 audit(3916644107.496:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1882.543573][ T30] audit: type=1326 audit(3916644107.496:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1882.697226][ T30] audit: type=1326 audit(3916644107.496:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28413 comm="syz.4.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1883.105611][T28446] siw: device registration error -23 [ 1885.709871][T28462] program syz.7.5634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1886.038553][T28466] netlink: 'syz.2.5637': attribute type 10 has an invalid length. [ 1886.393970][T28480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1886.474241][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5639'. [ 1886.552441][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1886.552457][ T30] audit: type=1400 audit(3916644113.034:2301): avc: denied { accept } for pid=28467 comm="syz.4.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1886.723992][T28475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1887.077333][T28488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1887.253829][T28492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1888.158495][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1888.198752][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1888.842259][ T5805] Process accounting resumed [ 1889.110589][T28515] netlink: 'syz.8.5647': attribute type 7 has an invalid length. [ 1889.118911][T28515] netlink: 'syz.8.5647': attribute type 8 has an invalid length. [ 1889.847970][T28528] netlink: 'syz.4.5648': attribute type 4 has an invalid length. [ 1889.856189][T28528] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5648'. [ 1890.114145][T28528] delete_channel: no stack [ 1891.575864][T28542] netlink: 'syz.2.5653': attribute type 1 has an invalid length. [ 1891.751610][T28544] virt_wifi0 speed is unknown, defaulting to 1000 [ 1891.765484][T28544] lo speed is unknown, defaulting to 1000 [ 1892.415560][T28542] gretap2: entered allmulticast mode [ 1892.429811][T28542] bond6: (slave gretap2): making interface the new active one [ 1892.462772][T28542] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 1892.644987][T28554] netlink: 'syz.7.5654': attribute type 12 has an invalid length. [ 1893.632900][T28565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1894.706520][T28575] ªªªªªª: renamed from vlan0 [ 1895.470320][T28585] bridge0: entered promiscuous mode [ 1895.476043][T28585] macsec2: entered promiscuous mode [ 1895.540500][T28585] bridge0: port 4(macsec2) entered blocking state [ 1895.568853][T28585] bridge0: port 4(macsec2) entered disabled state [ 1895.591840][T28585] macsec2: entered allmulticast mode [ 1895.615683][T28585] bridge0: entered allmulticast mode [ 1895.628908][T28585] macsec2: left allmulticast mode [ 1895.634161][T28585] bridge0: left allmulticast mode [ 1895.645998][T28585] bridge0: left promiscuous mode [ 1895.967483][T28594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5663'. [ 1897.481717][T28611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5667'. [ 1897.865134][T28613] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5668'. [ 1897.883399][T28613] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5668'. [ 1898.281903][T28615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1898.292261][T28615] netlink: 'syz.1.5669': attribute type 20 has an invalid length. [ 1898.300711][T28615] netlink: 'syz.1.5669': attribute type 21 has an invalid length. [ 1899.522324][T28638] netlink: 'syz.8.5675': attribute type 4 has an invalid length. [ 1899.530240][T28638] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5675'. [ 1899.552764][T28638] .`: renamed from bond0 [ 1899.952570][T28635] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5673'. [ 1900.592166][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1900.599330][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1900.636824][T28650] ceph: No mds server is up or the cluster is laggy [ 1900.876855][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1900.940371][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1902.689554][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'. [ 1902.701103][T28669] netlink: 'syz.4.5684': attribute type 20 has an invalid length. [ 1902.712513][T28669] netlink: 'syz.4.5684': attribute type 21 has an invalid length. [ 1903.128438][T28678] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1903.357758][T28677] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1905.456255][ T30] audit: type=1326 audit(3916644130.732:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.533243][ T30] audit: type=1326 audit(3916644130.732:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.579438][ T30] audit: type=1326 audit(3916644130.732:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.622028][ T30] audit: type=1326 audit(3916644130.732:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.696788][ T30] audit: type=1326 audit(3916644130.732:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.753742][ T30] audit: type=1326 audit(3916644130.732:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.799029][ T30] audit: type=1326 audit(3916644130.732:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1905.975441][ T30] audit: type=1326 audit(3916644130.732:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1906.006801][ T30] audit: type=1326 audit(3916644130.750:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1906.085392][T28712] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5690'. [ 1906.324478][ T30] audit: type=1326 audit(3916644130.750:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28704 comm="syz.4.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc44f9acb9 code=0x7ffc0000 [ 1907.781887][T28741] tmpfs: Unknown parameter 'grpquota4' [ 1910.654898][T28767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5706'. [ 1911.028214][T28775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1911.908405][T28793] openvswitch: netlink: Flow actions attr not present in new flow. [ 1911.925878][T28794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1912.574616][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1913.625505][T28818] virt_wifi0 speed is unknown, defaulting to 1000 [ 1913.638728][T28818] lo speed is unknown, defaulting to 1000 [ 1914.517919][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1914.517937][ T30] audit: type=1400 audit(3916644138.898:2346): avc: denied { bind } for pid=28809 comm="syz.2.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1915.633528][T28829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.907124][T28829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.009239][T28833] IPVS: length: 218 != 24 [ 1916.081818][T28829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.104831][T28833] syz_tun: entered allmulticast mode [ 1916.128891][T28832] syz_tun: left allmulticast mode [ 1916.203036][T28837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5720'. [ 1916.375072][ T3002] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.465115][ T3002] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.633853][ T3002] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.770230][T28848] SQUASHFS error: Failed to read block 0x0: -5 [ 1916.858785][T24322] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.623584][T28876] can0: slcan on ttyS3. [ 1919.937960][T28877] can0 (unregistered): slcan off ttyS3. [ 1919.952449][T28876] can0: slcan on ttyS3. [ 1920.528445][T28873] can0 (unregistered): slcan off ttyS3. [ 1921.084875][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1921.118617][T28895] ceph: No mds server is up or the cluster is laggy [ 1921.142808][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1921.456316][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1921.498636][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1921.515580][T18225] libceph: connect (1)[c::]:6789 error -22 [ 1921.555131][T28902] ceph: No mds server is up or the cluster is laggy [ 1921.854159][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1921.951904][T28910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5730'. [ 1926.677086][T28975] ceph: No mds server is up or the cluster is laggy [ 1927.261125][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 1927.267188][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 1928.388141][T28995] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5744'. [ 1930.141919][T29003] ceph: No mds server is up or the cluster is laggy [ 1930.148783][T18225] libceph: connect (1)[c::]:6789 error -22 [ 1930.159190][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1931.223350][ T5805] Process accounting resumed [ 1931.693967][ T30] audit: type=1400 audit(3916644155.277:2347): avc: denied { associate } for pid=29032 comm="syz.2.5751" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1933.386187][T29039] ceph: No mds server is up or the cluster is laggy [ 1933.394657][T18225] libceph: connect (1)[c::]:6789 error -101 [ 1933.420285][T18225] libceph: mon0 (1)[c::]:6789 connect error [ 1934.362816][T29051] netlink: 'syz.8.5756': attribute type 10 has an invalid length. [ 1934.466207][T29056] netlink: 'syz.1.5757': attribute type 10 has an invalid length. [ 1934.474152][T29056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1934.485492][T29056] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1934.608169][T29056] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1934.614956][T29056] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1934.641445][T29056] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1934.654700][ T30] audit: type=1400 audit(3916644157.858:2348): avc: denied { relabelfrom } for pid=29052 comm="syz.1.5757" name="" dev="pipefs" ino=108234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1934.678206][T18225] virt_wifi0 speed is unknown, defaulting to 1000 [ 1934.689131][ T30] audit: type=1400 audit(3916644157.858:2349): avc: denied { shutdown } for pid=29052 comm="syz.1.5757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1935.218024][T29059] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1935.372131][T29065] netlink: 'syz.2.5758': attribute type 10 has an invalid length. [ 1936.407563][ T5805] libceph: connect (1)[c::]:6789 error -22 [ 1936.413529][T29079] ceph: No mds server is up or the cluster is laggy [ 1936.420465][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 1936.527489][T29086] 9pnet_virtio: no channels available for device syz [ 1937.574863][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1937.592639][T29088] binder: 29087:29088 ioctl c0306201 200000000080 returned -11 [ 1937.606975][T29088] xt_TCPMSS: Only works on TCP SYN packets [ 1937.847334][T29108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1937.961338][T29108] tipc: Enabling of bearer rejected, already enabled [ 1938.148297][T29117] 9p: Bad value for 'source' [ 1939.303760][T29124] netlink: 'syz.4.5773': attribute type 10 has an invalid length. [ 1939.329276][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1939.391983][T29125] hsr_slave_0: left promiscuous mode [ 1939.610294][T29125] hsr_slave_1: left promiscuous mode [ 1939.881801][T29135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1940.839928][T29137] netlink: 'syz.4.5778': attribute type 10 has an invalid length. [ 1941.491654][T29144] ceph: No mds server is up or the cluster is laggy [ 1941.498569][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1941.514154][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1942.823822][T29167] ceph: No mds server is up or the cluster is laggy [ 1942.832584][T22345] libceph: connect (1)[c::]:6789 error -22 [ 1942.898875][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1943.646395][T29175] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5783'. [ 1943.697131][T29176] netlink: 'syz.7.5782': attribute type 10 has an invalid length. [ 1943.998836][T29181] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1944.383162][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1944.389617][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1944.412609][T29186] ceph: No mds server is up or the cluster is laggy [ 1944.821875][T29191] netlink: 'syz.7.5786': attribute type 10 has an invalid length. [ 1944.967872][T29197] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1946.047505][T29209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5791'. [ 1946.154080][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1947.013025][T29219] netlink: 'syz.4.5790': attribute type 4 has an invalid length. [ 1947.020927][T29219] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5790'. [ 1947.039371][T29219] wlan1: mtu less than device minimum [ 1947.448679][T29223] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1951.121593][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 1951.127634][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 1951.172536][T29257] ceph: No mds server is up or the cluster is laggy [ 1951.572807][T29274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1953.981776][T29295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5812'. [ 1954.539332][T22345] libceph: connect (1)[c::]:6789 error -101 [ 1954.545796][T29303] ceph: No mds server is up or the cluster is laggy [ 1954.568926][T22345] libceph: mon0 (1)[c::]:6789 connect error [ 1955.282113][ T5805] ================================================================== [ 1955.290199][ T5805] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x81c/0x950 [ 1955.298286][ T5805] Read of size 4 at addr ffff88808087be30 by task kworker/0:3/5805 [ 1955.306176][ T5805] [ 1955.308503][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.308529][ T5805] Tainted: [L]=SOFTLOCKUP [ 1955.308536][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1955.308548][ T5805] Workqueue: events hci_uart_write_work [ 1955.308578][ T5805] Call Trace: [ 1955.308584][ T5805] [ 1955.308592][ T5805] dump_stack_lvl+0x100/0x190 [ 1955.308616][ T5805] print_report+0x156/0x4c9 [ 1955.308641][ T5805] ? __virt_addr_valid+0x81/0x620 [ 1955.308658][ T5805] ? __phys_addr+0xe8/0x180 [ 1955.308680][ T5805] ? hci_uart_write_work+0x81c/0x950 [ 1955.308703][ T5805] kasan_report+0xdf/0x1a0 [ 1955.308726][ T5805] ? hci_uart_write_work+0x81c/0x950 [ 1955.308753][ T5805] hci_uart_write_work+0x81c/0x950 [ 1955.308777][ T5805] ? __pfx_pty_write+0x10/0x10 [ 1955.308798][ T5805] process_one_work+0x9c2/0x1840 [ 1955.308822][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 1955.308845][ T5805] ? assign_work+0x19c/0x250 [ 1955.308863][ T5805] worker_thread+0x5da/0xe40 [ 1955.308886][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 1955.308906][ T5805] ? kthread+0x17d/0x730 [ 1955.308922][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 1955.308940][ T5805] kthread+0x3b3/0x730 [ 1955.308958][ T5805] ? __pfx_kthread+0x10/0x10 [ 1955.308975][ T5805] ? ret_from_fork+0x79/0xaf0 [ 1955.308995][ T5805] ? ret_from_fork+0x79/0xaf0 [ 1955.309014][ T5805] ? rcu_is_watching+0x12/0xc0 [ 1955.309036][ T5805] ? __pfx_kthread+0x10/0x10 [ 1955.309055][ T5805] ret_from_fork+0x754/0xaf0 [ 1955.309074][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 1955.309094][ T5805] ? __switch_to+0x7b9/0x10c0 [ 1955.309118][ T5805] ? __pfx_kthread+0x10/0x10 [ 1955.309135][ T5805] ret_from_fork_asm+0x1a/0x30 [ 1955.309157][ T5805] [ 1955.309164][ T5805] [ 1955.479092][ T5805] Allocated by task 5805: [ 1955.483395][ T5805] kasan_save_stack+0x30/0x50 [ 1955.488054][ T5805] kasan_save_track+0x14/0x30 [ 1955.492703][ T5805] __kasan_slab_alloc+0x89/0x90 [ 1955.497534][ T5805] kmem_cache_alloc_node_noprof+0x303/0x880 [ 1955.503406][ T5805] __alloc_skb+0x156/0x410 [ 1955.507797][ T5805] bcsp_prepare_pkt+0xe0/0xa90 [ 1955.512544][ T5805] bcsp_dequeue+0x237/0x4b0 [ 1955.517022][ T5805] hci_uart_write_work+0x4d9/0x950 [ 1955.522111][ T5805] process_one_work+0x9c2/0x1840 [ 1955.527021][ T5805] worker_thread+0x5da/0xe40 [ 1955.531584][ T5805] kthread+0x3b3/0x730 [ 1955.535650][ T5805] ret_from_fork+0x754/0xaf0 [ 1955.540248][ T5805] ret_from_fork_asm+0x1a/0x30 [ 1955.544982][ T5805] [ 1955.547280][ T5805] The buggy address belongs to the object at ffff88808087bdc0 [ 1955.547280][ T5805] which belongs to the cache skbuff_head_cache of size 240 [ 1955.561824][ T5805] The buggy address is located 112 bytes inside of [ 1955.561824][ T5805] freed 240-byte region [ffff88808087bdc0, ffff88808087beb0) [ 1955.575588][ T5805] [ 1955.577885][ T5805] The buggy address belongs to the physical page: [ 1955.584276][ T5805] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8087b [ 1955.593003][ T5805] memcg:ffff888053d4af01 [ 1955.597224][ T5805] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1955.604301][ T5805] page_type: f5(slab) [ 1955.608256][ T5805] raw: 00fff00000000000 ffff88801da9f8c0 ffffea0002022940 dead000000000004 [ 1955.616809][ T5805] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888053d4af01 [ 1955.625371][ T5805] page dumped because: kasan: bad access detected [ 1955.631762][ T5805] page_owner tracks the page as allocated [ 1955.637473][ T5805] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5484, tgid 5484 (dhcpcd), ts 939172685770, free_ts 939114137040 [ 1955.656374][ T5805] post_alloc_hook+0x1e1/0x250 [ 1955.661132][ T5805] get_page_from_freelist+0xe3d/0x2e10 [ 1955.666570][ T5805] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1955.672435][ T5805] alloc_pages_mpol+0x1fb/0x550 [ 1955.677260][ T5805] new_slab+0x2c4/0x440 [ 1955.681384][ T5805] ___slab_alloc+0xda3/0x1ca0 [ 1955.686033][ T5805] __slab_alloc.isra.0+0x63/0x110 [ 1955.691025][ T5805] kmem_cache_alloc_node_noprof+0x51e/0x880 [ 1955.696890][ T5805] __alloc_skb+0x156/0x410 [ 1955.701384][ T5805] alloc_skb_with_frags+0xe0/0x810 [ 1955.706482][ T5805] sock_alloc_send_pskb+0x801/0x980 [ 1955.711672][ T5805] unix_dgram_sendmsg+0x3c7/0x1820 [ 1955.716754][ T5805] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 1955.722180][ T5805] sock_write_iter+0x566/0x610 [ 1955.726922][ T5805] vfs_write+0x6ac/0x1070 [ 1955.731221][ T5805] ksys_write+0x1f8/0x250 [ 1955.735522][ T5805] page last free pid 5818 tgid 5818 stack trace: [ 1955.741816][ T5805] __free_frozen_pages+0x822/0x1130 [ 1955.746992][ T5805] pgd_free+0x3f4/0x560 [ 1955.751123][ T5805] __mmdrop+0xe5/0x750 [ 1955.755177][ T5805] finish_task_switch.isra.0+0x76e/0xb70 [ 1955.760784][ T5805] __schedule+0xfec/0x5e10 [ 1955.765202][ T5805] schedule+0xdd/0x390 [ 1955.769253][ T5805] do_nanosleep+0x206/0x560 [ 1955.773733][ T5805] hrtimer_nanosleep+0x156/0x360 [ 1955.778643][ T5805] common_nsleep+0xa1/0xd0 [ 1955.783029][ T5805] __x64_sys_clock_nanosleep+0x336/0x480 [ 1955.788636][ T5805] do_syscall_64+0xc9/0xf80 [ 1955.793107][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.798974][ T5805] [ 1955.801269][ T5805] Memory state around the buggy address: [ 1955.806870][ T5805] ffff88808087bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1955.814915][ T5805] ffff88808087bd80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1955.822956][ T5805] >ffff88808087be00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1955.830985][ T5805] ^ [ 1955.836585][ T5805] ffff88808087be80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 1955.844619][ T5805] ffff88808087bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1955.852647][ T5805] ================================================================== [ 1956.007261][ T30] audit: type=1400 audit(3916644178.026:2350): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1956.103833][ T30] audit: type=1400 audit(3916644178.026:2351): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1956.135029][ T5805] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1956.142257][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.153171][ T5805] Tainted: [L]=SOFTLOCKUP [ 1956.157467][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1956.167499][ T5805] Workqueue: events hci_uart_write_work [ 1956.173030][ T5805] Call Trace: [ 1956.176282][ T5805] [ 1956.179188][ T5805] dump_stack_lvl+0x100/0x190 [ 1956.183860][ T5805] vpanic+0x20d/0x630 [ 1956.187813][ T5805] panic+0xd1/0xd1 [ 1956.191505][ T5805] ? __pfx_panic+0x10/0x10 [ 1956.195891][ T5805] ? hci_uart_write_work+0x81c/0x950 [ 1956.201152][ T5805] ? preempt_schedule_common+0x42/0xc0 [ 1956.206584][ T5805] ? check_panic_on_warn+0x1f/0x90 [ 1956.211672][ T5805] check_panic_on_warn.cold+0x19/0x34 [ 1956.217018][ T5805] end_report.part.0+0x3a/0x90 [ 1956.221757][ T5805] kasan_report.cold+0xe/0x18 [ 1956.226419][ T5805] ? hci_uart_write_work+0x81c/0x950 [ 1956.231682][ T5805] hci_uart_write_work+0x81c/0x950 [ 1956.236770][ T5805] ? __pfx_pty_write+0x10/0x10 [ 1956.241506][ T5805] process_one_work+0x9c2/0x1840 [ 1956.246418][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 1956.251766][ T5805] ? assign_work+0x19c/0x250 [ 1956.256339][ T5805] worker_thread+0x5da/0xe40 [ 1956.260920][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 1956.266005][ T5805] ? kthread+0x17d/0x730 [ 1956.270230][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 1956.275313][ T5805] kthread+0x3b3/0x730 [ 1956.279354][ T5805] ? __pfx_kthread+0x10/0x10 [ 1956.283914][ T5805] ? ret_from_fork+0x79/0xaf0 [ 1956.288565][ T5805] ? ret_from_fork+0x79/0xaf0 [ 1956.293212][ T5805] ? rcu_is_watching+0x12/0xc0 [ 1956.297953][ T5805] ? __pfx_kthread+0x10/0x10 [ 1956.302514][ T5805] ret_from_fork+0x754/0xaf0 [ 1956.307074][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.312159][ T5805] ? __switch_to+0x7b9/0x10c0 [ 1956.316811][ T5805] ? __pfx_kthread+0x10/0x10 [ 1956.321372][ T5805] ret_from_fork_asm+0x1a/0x30 [ 1956.326108][ T5805] [ 1956.329427][ T5805] Kernel Offset: disabled [ 1956.333729][ T5805] Rebooting in 86400 seconds..