last executing test programs: 1m49.712712851s ago: executing program 2 (id=66): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 1m49.614174877s ago: executing program 2 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x55}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) (async) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.434660094s ago: executing program 2 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000a894db1bc8d017fc352269152baa2562f57ed0b12b38163db4", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1m49.434021129s ago: executing program 2 (id=69): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x3}]}) r2 = userfaultfd(0x80001) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x84000, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001900), 0x6, 0x40400) epoll_create1(0x0) syz_open_dev$media(&(0x7f00000001c0), 0x8000, 0x2365c1) syz_init_net_socket$x25(0x9, 0x5, 0x0) fanotify_init(0x20, 0x101400) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x490b40, 0x1da) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffffffffffff, 0x440a02) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 1m49.364858718s ago: executing program 2 (id=70): getrusage(0x1, &(0x7f0000000340)) r0 = syz_io_uring_setup(0x3a4f, &(0x7f00000000c0)={0x0, 0xf9a4, 0x20, 0x2, 0x337}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001980)={0x8, 0x1, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f0000000540)=""/201, 0xc9}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/154, 0x9a}, {&(0x7f0000001800)=""/154, 0x9a}], &(0x7f0000001940)=[0x8001]}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r1, &(0x7f0000000180)=""/174, 0xae) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000500)={0x1c35}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c0005800500210003"], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newlink={0x28, 0x10, 0x437, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x118c2}, [@IFLA_GROUP={0x8, 0x1b, 0x6fa4a69}]}, 0x28}}, 0x0) fremovexattr(r3, &(0x7f0000000080)=@random={'user.', '\x00'}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x29, 0x2, 0x6) 1m49.124623254s ago: executing program 2 (id=72): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000140)={0x5}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x0, 0x9}, 0x9c) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000180)=0x800, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000340)="2e1221b21ab601c494d3ffff0000963d88a8", 0x12}], 0x1) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m49.098789707s ago: executing program 32 (id=72): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000140)={0x5}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x0, 0x9}, 0x9c) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000180)=0x800, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000340)="2e1221b21ab601c494d3ffff0000963d88a8", 0x12}], 0x1) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m3.129237934s ago: executing program 0 (id=483): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) bind$inet(r5, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 1m2.269696982s ago: executing program 0 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004010) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x10000, 0x0, 0x1d}, 0x18) mkdirat(r7, &(0x7f0000000140)='./file0\x00', 0x3) keyctl$setperm(0x5, r6, 0x21081c22) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r6], 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 1m2.26913323s ago: executing program 0 (id=487): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (rerun: 64) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) (async, rerun: 32) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000640)={0x3, {{0xa, 0x4e22, 0x8ae4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}, {{0xa, 0x4e24, 0x52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x682b}}}, 0x108) (rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@deltaction={0x160, 0x31, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5e}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff801}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m2.157042651s ago: executing program 0 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)="b82ca87fbf4ddfc9253795f9139cb364f7ab4483630f1b7e37d7d2dcb8e65f3c5003654435b055e458ebf622badce086c6fed3f09ef56fa6df8d8c745acb91d5f1966285012cc805480eb6db1dcbdcdc702ec4b32c4ee913e1c4fef13877063ea4ed839ed4be37eb6ea86e8cb1900709bc811426ea02cf06f1c6c2cdb879ea19d0c9703397f221a7e77a3809a3738576c3cffe99293d4dfe5370c4d5eda2f0aad1295a28f58a8725774a1838a5c661518d7691b2", 0xb4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 1m2.144121124s ago: executing program 0 (id=491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xe1, 0x0, 0xd8}]}) (async) syz_usb_control_io(r2, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000000140)) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000084e}, 0xb50bee3148721fc8) 1m1.509926429s ago: executing program 0 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe67, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8}) 1m1.467555393s ago: executing program 33 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe67, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8}) 1m0.24005526s ago: executing program 3 (id=517): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa6202, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000778000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x60, &(0x7f0000000280)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x9, 0xd, 0x3f, 0x0, 0xffffffff, 0xc6, 0x5f, 0x8, 0x3, 0xb, 0xf9, 0xa3, 0x0, 0xc, 0x6, 0xee, 0x17, 0x0, 0x7f, '\x00', 0x9, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r5, 0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @pic={0x81, 0x5, 0xa0, 0x8, 0x3, 0x1, 0x5, 0x15, 0x80, 0xf, 0x7, 0x7, 0xc3, 0xa, 0x7, 0x3}}) syz_ublk_setup_io_uring(0x1420, &(0x7f0000000340)={0x0, 0x4d31, 0x1, 0x0, 0x161}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000000c0)) syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2d8}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x4245, 0x8, 0x1, 0x172}, &(0x7f0000000980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x681a, 0x80, 0x0, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae56, 0x80, 0x3, 0x1d3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5640, 0x4000, 0x2, 0x117}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd57e, 0x2000, 0x3, 0x1ba}}], 0x4, &(0x7f0000001c00)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x2, 0xa1d, 0x0, &(0x7f0000000c00)=@buf_1k="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"}}, &(0x7f0000001c80)) mmap$IORING_OFF_SQES(0x0, 0x114f, 0xc, 0x50, 0xffffffffffffffff, 0x10000000) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) 1m0.050121739s ago: executing program 3 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010058, 0x0, 0x6}]}) 59.888139446s ago: executing program 3 (id=521): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xe, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r3], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 59.705967724s ago: executing program 3 (id=523): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) (async) r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f00000013c0)={{&(0x7f0000455000/0x2000)=nil, 0x2000}, 0x1, 0x2}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f00000013c0)={{&(0x7f0000455000/0x2000)=nil, 0x2000}, 0x1, 0x2}) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = syz_open_dev$video4linux(&(0x7f0000000280), 0xffffffffffffffff, 0x141f02) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$MEMWRITEOOB64(r0, 0xc0184d15, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfece5538a3894cc4}], 0x1, 0x20000040) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) (async) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) 59.705673292s ago: executing program 3 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x148c}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x8000) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000010)=@ipv4_newnexthop={0x1c, 0x68, 0x10, 0x200, 0x0, {0x2, 0x0, 0x0, 0x0, 0x11}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 59.388681545s ago: executing program 3 (id=527): r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/64, 0x40, 0x6) 59.302207788s ago: executing program 34 (id=527): r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/64, 0x40, 0x6) 50.350678185s ago: executing program 5 (id=628): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x6f631b4376e74f1e, {0x2, 0x0, @multicast1}, 'bridge0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) r1 = socket(0x2, 0x80805, 0x0) recvmsg$kcm(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000280)=""/60, 0x3c}, {0x0}, {0x0}, {&(0x7f0000001500)=""/243, 0xf3}, {&(0x7f0000001600)=""/235, 0xeb}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0) r2 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) flock(r4, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x0, 'batadv_slave_0\x00', {}, 0x4}) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x10, 0x8, 0x50, 0x4e}, {0x9, 0x5, 0xd, 0x2, 0x200, 0x9, 0x10, 0x5}, {0x9, 0x5, 0xe, 0x3, 0x40, 0xd, 0x3, 0x81}}}}}}]}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc26"], 0x1c}}, 0x40000) 49.64973681s ago: executing program 5 (id=629): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'dh\x00', 0x30, 0x1, 0x3}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) close(0x3) (async) close(0x3) r5 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c41, 0x2, 0x20002, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r8 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x6a, 0x4, 0xfffffffe, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r7, 0x8001, 0x30}, &(0x7f0000000080)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 49.5987713s ago: executing program 5 (id=630): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x78, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x39}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x34}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000340)={0x1, 0x0, [{0x0, 0x1000, 0x7, [0x4602, 0x8, 0x0, 0x9, 0x40, 0x800, 0x100, 0x6]}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000140)=0x1, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) chdir(&(0x7f0000000040)='./file0\x00') sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$pagemap(r4, &(0x7f00000001c0)) 49.469303317s ago: executing program 5 (id=631): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x2, 0x7, 0x6}) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 48.582379298s ago: executing program 5 (id=647): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x200000, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/acpi/parameters/trace_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='enable', 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 48.268840916s ago: executing program 5 (id=657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) r5 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) setns(0xc9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10f) r7 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0"], 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)=""/147) 33.274771503s ago: executing program 35 (id=657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) r5 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) setns(0xc9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10f) r7 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0"], 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)=""/147) 3.758620208s ago: executing program 4 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @private2, 0x1ff}}, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x2, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) 2.535949936s ago: executing program 1 (id=997): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)={{}, {0x1, 0x6}, [{0x2, 0x0, r0}, {0x2, 0x2, r0}, {0x2, 0x1, r0}, {0x2, 0x0, r0}, {0x2, 0x1, r0}], {0x4, 0x7}, [], {0x10, 0x3}}, 0x4c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='md0\x00', 0x4) (async) close(r1) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000500)='2\x00', 0x1) (async, rerun: 32) close(0xffffffffffffffff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) (async) close(r3) (async) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='2', 0x1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) (async) ioctl(r5, 0x8b32, &(0x7f0000000040)) 2.440132691s ago: executing program 1 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc, 0x7b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x810) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.349728547s ago: executing program 1 (id=999): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x2f, @loopback, 0x0, 0x0, 'dh\x00', 0x1, 0xef, 0x2e}, 0x2c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001340)={r1, 0x6}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)) 2.15921378s ago: executing program 1 (id=1004): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x380, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x463}]}}}]}, 0x3c}}, 0x0) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f0000000300)=ANY=[@ANYRES8=r2], 0x30) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000105, 0x0, 0x46}]}) write(r0, &(0x7f0000000140)="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", 0x148) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000002c0)={r4, &(0x7f00000000c0)='bond\x00', 0x5000, &(0x7f0000000100)={@align=0x9, {0x5, 0x4, 0x7fffffff, 0xf}}, 0x64881ec3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x40}) fchmodat(r6, &(0x7f0000000380)='./file0\x00', 0x84) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.508459569s ago: executing program 1 (id=1012): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48090, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @vsb}}) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0xbaa0, 0x0, @qam={0xfffffff9, 0x7, 0x9}}) 1.506530727s ago: executing program 1 (id=1013): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x80000023) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x6, 0x0, [{0x815, 0x0, 0x1}, {0x8dd, 0x0, 0x4}, {0x2e0, 0x0, 0x5}, {0xc0000080, 0x0, 0x6}, {0xab8, 0x0, 0x9}, {0x107, 0x0, 0x4536}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) clock_getres(0x9, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x8001}]}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x10000807, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000200)={0x2c754362, 0x10001, 0x9, 0x9, 0x9, "01000000000000c000000000800000e4018780"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0x1) r10 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r10, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 708.156525ms ago: executing program 4 (id=1027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x54, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x50d}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4f5e, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1aa) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 470.677828ms ago: executing program 7 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) (async) r2 = socket(0x23, 0x5, 0x0) close(0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl(r4, 0x400caed0, &(0x7f0000000500)="0100000000000000ffffffff") (async, rerun: 32) tee(r1, r0, 0x100, 0x1) (async, rerun: 32) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 385.228252ms ago: executing program 4 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000006c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x5e) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x102, 0x0, {0x9, 0x9, 0xb, 0xe4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x100) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./config/dlm/cl1/comms/1\x00', 0x80000, 0x40) mkdirat(r4, &(0x7f0000000000)='./config\x00', 0xfc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1ff) (async) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000006c0)='cpu.idle\x00', 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x5e) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x102, 0x0, {0x9, 0x9, 0xb, 0xe4}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x100) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./config/dlm/cl1/comms/1\x00', 0x80000, 0x40) (async) mkdirat(r4, &(0x7f0000000000)='./config\x00', 0xfc) (async) 330.300051ms ago: executing program 7 (id=1034): setns(0xc9, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x8000000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x9, 0x0, 0x4, {0x1, @meta={0x50314b52, 0x63f11576, 0xdbc7, 0x88b1, 0x5285bb60}}, 0x1fe0000}) semget$private(0x0, 0x4000, 0x555) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000040000701feffffff02000000017c00000c00018006b4d24b9a0a00000800028004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6100000000003aff0000000000000000000000000000000100000000000000000000000000000001"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="5784be13ca615ecc32a35f8cad45f29763b988fce446e509d0e6d800255aec076c177830a52bb3ed1a3fc32d97"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f00000000c0)=0x4d, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 329.856815ms ago: executing program 6 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='off\n', 0x4) (async) syz_fuse_handle_req(r2, &(0x7f0000002c00)="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", 0x2000, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (rerun: 64) 181.57111ms ago: executing program 7 (id=1036): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0xffff, 0x0, {0x80}}, 0x14}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0x5, 0x80000001, 0x6, 0x9}, 0x14) 181.233615ms ago: executing program 4 (id=1037): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x8040) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/57) (async) io_uring_setup(0x454d, &(0x7f00000004c0)={0x0, 0xecb4, 0x800, 0x2, 0x89}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 180.82213ms ago: executing program 7 (id=1038): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r2, 0x2e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x101482, 0x0) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="825cfc3fb164fa4389d9036adcd3a8c4544e37b4d7ba33a0e3aa0ca7"], 0x1c}, 0x1, 0x0, 0x0, 0x8089}, 0x4000814) write$nci(r0, 0x0, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000080000000500000000000000ad8b0f25035a5a9ca39ed26b615eeab25070c5c711651bf4c2256747877eddec2230277400b8b7d22c71c05e7fb4fa3cec7b02b4e78ed3c22a1dff93ba73ec275db9dfe383fa3b60398f754bcfd00dbe97699d84f9673218119e0e34019d61e58c4f23d3134bbbed5db3da4bfba269c4c37d2f4a275b43437bbba3d74620b670e2a22aa1d1696bbe92ea839d226040692b1d200b0114b213902de006b57c7bc875a34926180c4959bd33611c0c3ee909a869a5adfc3d67a475e8c028de5f9a041977ff53a5aff2b81e3395995fef16862b90a6c7809317f2a9e94006dad96b671d4c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x2, 0x0, 0x0, 0xf, 0xfffffffffffffff8, 0x3fff}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000800)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, &(0x7f0000000700)="ae78881cd88040c67c3d460521718a48ac67d1189f06fabf6af57009102d693f5dfb33b0b6d4e41d42be3e57fe965538940e4912e5b0e6513b54c577bbc5a73974788a896085ff31025b0ce99c2285ef9464a812df89f8bf86070221dbbcd54f4a45b400dc3a1521b44444cbd6216e72e8cad563ef0f4c8a143babe08c630403501bac215aee867da10e29fc647319ca0879e504b76cb70fd3949837fe6afb887a9f8b69bed841dc82cb71cd2ee3f146477138038a6368ab0e85adfb2e6c235718165914806da25126c768905894baa3a98674bc98edba29de4b"}) (async) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000006000000080004000000000008000500ea8c00002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}}, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x63, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x10, 0x3, 0x300}, 0x30, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000000), &(0x7f0000000580)=r12}, 0x20) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000540)={0x18, 0x0, 0x1, 0x0, 0x0, 0x9}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x702, 0xb90, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) syz_open_dev$loop(&(0x7f00000002c0), 0x10, 0x288100) 180.579359ms ago: executing program 6 (id=1039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80}, @TCA_FLOW_KEYS={0x8, 0x1, 0xba37}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}}, 0x24040084) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x1e8, 0x10, 0x7, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x2, 0x4, 0x10000000}, {0x0, 0x200000, 0x7}, {0xc, 0x0, 0xae5}, 0x4, 0xfffffffe, 0xa, 0x2, 0x0, 0xba4c15520301ae61}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x4e22, 0x2, 0x4e23, 0x7, 0xa, 0x20, 0x20, 0xc, r4, r5}, {@in6=@mcast1, 0x4d5, 0xff}, @in=@loopback, {0x9, 0x9, 0x9, 0x7f, 0x3, 0x250a896, 0x2, 0x4}, {0x2, 0x0, 0x0, 0x400}, {0x2e4, 0x0, 0xf}, 0x70bd25, 0x0, 0xa, 0x4, 0x6, 0x20}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) 179.32993ms ago: executing program 6 (id=1040): ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'ipvlan0\x00', @ifru_names='veth1_macvtap\x00'}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x13, 0x80000000, 0x0, 0xd, 0x11, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x5, 0xff, 0x0, 0x5, [0xffffffff, 0x1]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000040)=""/137, 0x89}], 0x2, 0x7, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 178.395684ms ago: executing program 4 (id=1041): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4e24, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x4e22, 0xde50, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}}, {{0xa, 0x4e24, 0x7fff, @empty, 0x5}}]}, 0x190) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd28, 0x27dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}}, 0x22044804) 178.281062ms ago: executing program 6 (id=1042): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) chdir(&(0x7f0000000340)='my_tracefs\x00') mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x3, 0x9}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x3, 0x9}, 0x8) write(r0, &(0x7f0000000240)='oom_score_adj < 1&', 0x12) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xd0, 0x18, 0x0, 0x0, 0x8000}) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/17, 0x11}, 0x0) 176.492581ms ago: executing program 6 (id=1043): r0 = userfaultfd(0x801) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"bf814e6a29d347efee7e63f56f913dbf", 0x0, 0x0, {0x5, 0x2}, {0x4, 0x4}, 0xfffffffffffffe00, [0xc, 0xfffffffffffffffc, 0x3, 0x100, 0x5, 0x6, 0xb6eb, 0xffffffff, 0x6, 0x40, 0xfffffffffffff29e, 0x7, 0x69, 0x8, 0x1, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000200)={0x0, 0x0, 0x0, [0x3, 0x6, 0x4, 0x40, 0x175a], [0x9, 0x6, 0x4, 0xa, 0xfffffffffffffff4, 0x7, 0x9, 0x0, 0x3, 0x1ff, 0x8000000000000000, 0x8, 0x9, 0x2e7c, 0x800, 0xa, 0x96, 0x3, 0x4, 0x4, 0xfff, 0x3, 0x1, 0xc1e1, 0x9, 0x4, 0x8000000000000000, 0x10001, 0x8, 0x8001, 0x7, 0x7000000, 0x5, 0x4, 0x80000001, 0x0, 0x1, 0x3, 0x1, 0x3, 0x8, 0x1, 0xfffffffffffffff8, 0x4, 0xe5, 0x8, 0x9, 0x2, 0x5, 0x80000001, 0x6, 0x8, 0x6, 0x9, 0xe8, 0x0, 0x529, 0x3c, 0x7, 0x6, 0x9, 0x101, 0xa4, 0x8, 0x7, 0x1e, 0xa, 0xffffffffd6885b8f, 0xffffffff, 0x92, 0xd44, 0x8, 0xf5c, 0x6, 0x9, 0x8, 0xbcef, 0xfd61, 0x0, 0x5, 0x7, 0x741feada, 0x7, 0x9, 0x7, 0xc8b, 0x1ff, 0xfffffffffffffff9, 0x8000000000000000, 0x5, 0x3ff, 0x9, 0x5, 0x10001, 0x5f, 0x100000000, 0x80, 0xe, 0x1, 0xfffffffffffffeff, 0x4, 0x8, 0xcc, 0x1, 0x7ff, 0x9, 0x1, 0xb, 0x2, 0xb, 0x101, 0x1, 0x4, 0x401, 0x6, 0xd27, 0xec03, 0x2, 0x4e0, 0xffffffffffffff2d, 0x881]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000640)={{r1}, r2, 0x12, @unused=[0x7, 0xffffffffffffffff, 0x2, 0x4d], @devid=r3}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 100.765066ms ago: executing program 7 (id=1044): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000268000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/235, 0xeb, 0x0, &(0x7f0000000180)=""/156, 0x9c}, &(0x7f0000000280)=0x40) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x10, 0xffe0}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4006881}, 0x20000900) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x200000}) 100.396437ms ago: executing program 4 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd690000000028290000000000000000000000ffffe0000001ff0200000000000000000000000000017955"], 0x62) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0xfffffc00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 50.348448ms ago: executing program 7 (id=1046): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendmsg$rds(r2, &(0x7f0000002740)={&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x2000000c}, 0x8000) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x41) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delnexthop={0x15, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}, {0x0, 0x1, 0x2}, {}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delnexthop={0x15, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}, {0x0, 0x1, 0x2}, {}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, 0x0, 0x0) (async) accept(r1, 0x0, 0x0) 0s ago: executing program 6 (id=1047): r0 = getpid() r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'vxcan1\x00', 0x6}) r2 = syz_pidfd_open(r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c97000000000010002100000000007008fc07a07c5fef0c63dd0372290cf22564cf6cb50869b077a612da988a968d8e95348ceaa6bd21bbd6cd2ade6e2a0e25d30d4142dae90c0c07657bbd6f1b617094b60ad8bc5fc49025c17e80541c5a723e1b0e3bb2afebbe760032cb6dd092040819939f25489be0710b3a5870aa2778afc6cb6a11ceb4b3f09f8ba2eff858ba90a18789cc9f2bf60aabd03c83e1280f48354373246da1b53b3c0a61ebab934409392"], 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x8020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40800) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @buffer={0x0, 0x56, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0cd8e3e4052abbbf4d755ef653e8f4a6151d2e4d974c", 0x0, 0x1, 0x10039, 0x0, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='logfs\x00', 0x11040c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@audit}, {@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}, {@subj_role={'subj_role', 0x3d, 'vxcan1\x00'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'audit'}}, {@fowner_lt}, {@smackfsdef}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '^,%(%\''}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', &(0x7f0000000300)={{r7, r8/1000+10000}, {0x0, 0xea60}}) write(r6, &(0x7f0000000200)='1', 0x1) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x19) chdir(&(0x7f00000001c0)='./bus\x00') open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4c814}, 0xc004) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64=r0]) kernel console output (not intermixed with test programs): d with errno=-22 [ 80.493311][ T7473] 9pnet_virtio: no channels available for device syz [ 80.671633][ T7479] openvswitch: netlink: IP tunnel dst address not specified [ 80.734723][ T7481] IPVS: Error connecting to the multicast addr [ 80.777675][ T7485] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.834416][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.838127][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.841002][ T7491] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 80.843246][ T7491] UDF-fs: Scanning with blocksize 512 failed [ 80.851005][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.854403][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.858717][ T7491] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 80.861041][ T7491] UDF-fs: Scanning with blocksize 1024 failed [ 80.863180][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.866438][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.869253][ T7491] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 80.871492][ T7491] UDF-fs: Scanning with blocksize 2048 failed [ 80.874463][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 80.874662][ T42] audit: type=1326 audit(1787197282.233:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.3.398" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ea5d9e0d9 code=0x0 [ 80.877440][ T7491] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 80.887786][ T7492] netlink: 'syz.1.393': attribute type 19 has an invalid length. [ 80.889022][ T7491] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 80.893687][ T7491] UDF-fs: Scanning with blocksize 4096 failed [ 80.895533][ T7491] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 81.173711][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.213683][ T42] audit: type=1400 audit(1787197282.563:622): avc: denied { remount } for pid=7503 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 81.334339][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.338201][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.341785][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.345069][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.349177][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.354333][ T29] usb 6-1: config 0 descriptor?? [ 81.496678][ T9] cfg80211: failed to load regulatory.db [ 81.768065][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 81.770684][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 81.775089][ T29] usb 6-1: USB disconnect, device number 6 [ 81.888752][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 81.915845][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 81.963886][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.964634][ T41] e1000 0000:00:06.0 eth0: Reset adapter [ 81.965986][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.013675][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 82.043716][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.043786][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.084863][ T5132] pmem0: [POWERTEC] [ 82.102280][ T7510] veth0_vlan: left promiscuous mode [ 82.105398][ T7510] vlan0: entered promiscuous mode [ 82.107816][ T7510] veth0_vlan: entered promiscuous mode [ 82.115122][ T5513] e1000 0000:00:06.0 eth0: Reset adapter [ 82.121835][ T7510] team0: Port device vlan0 added [ 82.127656][ T7514] tipc: Enabled bearer , priority 0 [ 82.164463][ T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 82.170055][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.175976][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.180069][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.185693][ T9] usb 8-1: config 0 descriptor?? [ 82.234165][ T7520] netlink: 92 bytes leftover after parsing attributes in process `syz.4.406'. [ 82.321049][ T7524] bond2 (unregistering): Released all slaves [ 82.672934][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 82.675955][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 82.680228][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0005/input/input13 [ 82.691830][ T9] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 82.869936][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.873648][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.884942][ T60] usb 8-1: USB disconnect, device number 12 [ 84.044791][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.044887][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.123538][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.123581][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.284495][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 88.076408][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 88.076420][ T42] audit: type=1400 audit(1787197289.424:631): avc: denied { write } for pid=7553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.117364][ T42] audit: type=1400 audit(1787197289.464:632): avc: denied { write } for pid=7556 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.759783][ T42] audit: type=1400 audit(1787197292.104:633): avc: denied { write } for pid=7560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.819419][ T42] audit: type=1400 audit(1787197292.165:634): avc: denied { write } for pid=7563 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.582793][ T42] audit: type=1400 audit(1787197296.935:635): avc: denied { listen } for pid=7575 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.704997][ T42] audit: type=1326 audit(1787197297.055:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.418" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8aeb9e0d9 code=0x0 [ 95.717122][ T42] audit: type=1400 audit(1787197297.065:637): avc: denied { wake_alarm } for pid=7591 comm="syz.0.420" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.717162][ T7592] netlink: 'syz.0.420': attribute type 6 has an invalid length. [ 95.740041][ T7592] ima: Unable to open file: / (-22) [ 95.740227][ T7591] ima: policy update failed [ 95.747116][ T42] audit: type=1802 audit(1787197297.095:638): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.420" res=0 errno=0 [ 95.801398][ T42] audit: type=1400 audit(1787197297.145:639): avc: denied { map } for pid=7604 comm="syz.1.423" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.810626][ T42] audit: type=1400 audit(1787197297.155:640): avc: denied { execute } for pid=7604 comm="syz.1.423" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.818281][ T42] audit: type=1400 audit(1787197297.155:641): avc: denied { setopt } for pid=7604 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.828778][ T7610] Mount JFS Failure: -22 [ 95.831361][ T7610] jfs_mount failed w/return code = -22 [ 95.850034][ T7613] CIFS mount error: No usable UNC path provided in device string! [ 95.850034][ T7613] [ 95.854509][ T7613] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 96.041946][ T60] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 96.083743][ T7625] sl0: compressed packet ignored [ 96.202610][ T60] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 96.207063][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.211535][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.215030][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.220432][ T60] usb 8-1: config 0 descriptor?? [ 96.634200][ T60] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 96.636645][ T60] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 96.640328][ T60] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0006/input/input14 [ 96.661203][ T60] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 96.834071][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.837298][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.841446][ T5802] usb 8-1: USB disconnect, device number 13 [ 97.701686][ T41] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 97.852261][ T41] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.856095][ T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.859300][ T41] usb 8-1: config 0 has no interfaces? [ 97.861139][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.865691][ T41] usb 8-1: config 0 descriptor?? [ 98.107395][ T42] audit: type=1400 audit(1787197299.455:642): avc: denied { append } for pid=7627 comm="syz.3.429" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.109165][ T7628] usb usb8: usbfs: process 7628 (syz.3.429) did not claim interface 0 before use [ 98.115627][ T42] audit: type=1400 audit(1787197299.455:643): avc: denied { getopt } for pid=7627 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.186254][ T9] usb 8-1: USB disconnect, device number 14 [ 98.708790][ T7596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.764751][ T42] audit: type=1400 audit(1787197300.115:644): avc: denied { module_request } for pid=7633 comm="syz.0.430" kmod="net-pf-28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 98.879090][ T7635] team0: Port device vlan0 removed [ 99.143505][ T7669] loop0: detected capacity change from 0 to 3904 [ 99.189993][ T7669] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 99.195109][ T7669] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 99.197265][ T7669] loop0: [ 99.332802][ T7683] binder_alloc: binder_alloc_mmap_handler: 7682 200000ffd000-200001000000 already mapped failed -16 [ 99.376945][ T7685] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.381933][ T7685] raw_sendmsg: syz.0.439 forgot to set AF_INET. Fix it! [ 99.386822][ T7685] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.478291][ T7690] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.500857][ T7683] syz.1.438 (7683): drop_caches: 2 [ 99.564000][ T7699] geneve1: entered allmulticast mode [ 99.571858][ T5802] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 99.664411][ T7705] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 99.669694][ T7705] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 99.717440][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 99.723370][ T5802] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 99.728361][ T5802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.734654][ T5802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.739141][ T7708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.739192][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.746549][ T5802] usb 9-1: config 0 descriptor?? [ 99.757350][ T7708] bond2: entered promiscuous mode [ 100.157246][ T5802] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 100.159717][ T5802] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 100.169857][ T5802] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0007/input/input15 [ 100.185335][ T5802] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 100.241568][ T847] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 100.360665][ T5802] usb 9-1: USB disconnect, device number 11 [ 100.391700][ T847] usb 8-1: Using ep0 maxpacket: 32 [ 100.394682][ T847] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 100.398050][ T847] usb 8-1: config 0 has no interfaces? [ 100.402210][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.404880][ T847] usb 8-1: Product: syz [ 100.406077][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.406234][ T847] usb 8-1: Manufacturer: syz [ 100.411354][ T847] usb 8-1: SerialNumber: syz [ 100.412538][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.418191][ T847] usb 8-1: config 0 descriptor?? [ 100.662556][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 100.662568][ T42] audit: type=1400 audit(1787197302.016:666): avc: denied { write } for pid=7735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.675597][ T5802] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 100.748132][ T42] audit: type=1400 audit(1787197302.096:667): avc: denied { write } for pid=7740 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.766506][ T42] audit: type=1400 audit(1787197302.116:668): avc: denied { ioctl } for pid=7741 comm="syz.1.452" path="socket:[21264]" dev="sockfs" ino=21264 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.785811][ T42] audit: type=1400 audit(1787197302.136:669): avc: denied { remount } for pid=7720 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.799126][ T7742] macvtap1: entered allmulticast mode [ 100.801824][ T5802] usb 9-1: device descriptor read/64, error -71 [ 100.804425][ T7742] bond0: entered allmulticast mode [ 100.806470][ T7742] bond_slave_0: entered allmulticast mode [ 100.808893][ T7742] bond_slave_1: entered allmulticast mode [ 100.813526][ T7742] bond_slave_0: entered promiscuous mode [ 100.818091][ T7742] bond_slave_1: entered promiscuous mode [ 100.826102][ T7742] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.834207][ T7742] bond0: left allmulticast mode [ 100.835837][ T7742] bond_slave_0: left allmulticast mode [ 100.837575][ T7742] bond_slave_1: left allmulticast mode [ 100.854251][ T55] bond_slave_0: left promiscuous mode [ 100.856328][ T55] bond_slave_1: left promiscuous mode [ 101.041326][ T5802] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 101.109732][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.116671][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.120825][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.123940][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.171604][ T5802] usb 9-1: device descriptor read/64, error -71 [ 101.292000][ T5802] usb usb9-port1: attempt power cycle [ 101.336366][ T7755] netlink: 'syz.0.455': attribute type 7 has an invalid length. [ 101.437201][ T42] audit: type=1400 audit(1787197302.786:670): avc: denied { mmap_zero } for pid=7756 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 101.511619][ T42] audit: type=1400 audit(1787197302.866:671): avc: denied { ioctl } for pid=7756 comm="syz.0.456" path="socket:[19263]" dev="sockfs" ino=19263 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.575372][ T42] audit: type=1400 audit(1787197302.926:672): avc: denied { bind } for pid=7756 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.633880][ T5802] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 101.652004][ T5802] usb 9-1: device descriptor read/8, error -71 [ 101.656330][ T7764] netlink: 52 bytes leftover after parsing attributes in process `syz.1.457'. [ 101.706786][ T7767] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 101.785227][ T62] nvmet: connect request for invalid subsystem testsubsys! [ 101.791907][ T7770] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 101.891673][ T5802] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 101.915433][ T5802] usb 9-1: device descriptor read/8, error -71 [ 102.021602][ T5802] usb usb9-port1: unable to enumerate USB device [ 102.120455][ T9] usb 8-1: USB disconnect, device number 15 [ 102.231474][ T55] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 102.388039][ T7777] nfs: Unknown parameter '$' [ 102.391511][ T7777] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 102.396725][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 102.411938][ T55] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 102.417678][ T55] usb 6-1: config 100 has an invalid interface number: 173 but max is 0 [ 102.421129][ T55] usb 6-1: config 100 has no interface number 0 [ 102.423676][ T55] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 102.427793][ T55] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 102.432645][ T55] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.442391][ T55] usb 6-1: config 100 interface 173 has no altsetting 0 [ 102.452897][ T55] usb 6-1: string descriptor 0 read error: -22 [ 102.455629][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.467168][ T7775] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.480144][ T55] metro_usb 6-1:100.173: Metrologic USB to Serial converter detected [ 102.484263][ T42] audit: type=1400 audit(1787197303.836:673): avc: denied { nlmsg_read } for pid=7779 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.495022][ T55] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 102.498420][ T42] audit: type=1400 audit(1787197303.836:674): avc: denied { read } for pid=7778 comm="syz.0.462" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.509388][ T42] audit: type=1400 audit(1787197303.836:675): avc: denied { open } for pid=7778 comm="syz.0.462" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.536504][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7784 comm=syz.4.464 [ 102.543889][ T7783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7783 comm=syz.4.464 [ 102.547747][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 102.684606][ T7775] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 102.705377][ T7793] xt_TCPMSS: Only works on TCP SYN packets [ 102.748876][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.756035][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.760657][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 102.764626][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 102.930341][ T9] usb 6-1: USB disconnect, device number 7 [ 102.947738][ T9] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 102.952901][ T9] metro_usb 6-1:100.173: device disconnected [ 103.149279][ T7822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.384028][ T7787] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.431144][ T7839] trusted_key: syz.0.480 sent an empty control message without MSG_MORE. [ 103.484449][ T7848] CIFS: Attempting to mount //127.0.0.1/share [ 103.489110][ T7848] CIFS: VFS: Error connecting to socket. Aborting operation. [ 103.493734][ T7845] input: syz1 as /devices/virtual/input/input16 [ 103.494981][ T7848] CIFS: VFS: cifs_mount failed w/return code = -22 [ 103.496160][ T7845] input: failed to attach handler leds to device input16, error: -6 [ 104.449175][ T7864] block2mtd: parameter too long [ 104.480313][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 104.484440][ T5731] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 104.493403][ T7869] syzkaller0: entered promiscuous mode [ 104.499442][ T7869] syzkaller0: entered allmulticast mode [ 104.638391][ T7876] Cannot find set identified by id 0 to match [ 104.643818][ T5731] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 104.654149][ T7876] CIFS: Attempting to mount //127.0.0.1/share [ 104.663577][ T7876] CIFS: VFS: Error connecting to socket. Aborting operation. [ 104.666553][ T7876] CIFS: VFS: cifs_mount failed w/return code = -111 [ 104.902779][ T7895] gadgetfs: bound to dummy_udc driver [ 104.931509][ T7895] xt_CT: No such helper "netbios-ns" [ 104.994458][ T7900] ip6gre1: entered allmulticast mode [ 104.998001][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.118983][ T7899] CIFS: Attempting to mount //127.0.0.1/share [ 105.161704][ T55] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 105.166885][ C3] gadgetfs: connected [ 105.168866][ T55] gadgetfs: disconnected [ 105.176502][ T7904] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 105.187451][ T7899] CIFS: VFS: cifs_mount failed w/return code = -112 [ 105.253324][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.256869][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.260332][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.266315][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.269574][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.311344][ T5802] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 105.321642][ C3] gadgetfs: connected [ 105.323740][ T55] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 105.327039][ T55] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 105.330082][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.335045][ C3] gadgetfs: configuration #1 [ 105.481477][ T5802] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 105.485582][ T5802] usb 9-1: config 0 has no interfaces? [ 105.489606][ T5802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.492836][ T5802] usb 9-1: Product: syz [ 105.494315][ T5802] usb 9-1: Manufacturer: syz [ 105.496325][ T5802] usb 9-1: SerialNumber: syz [ 105.511085][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.511595][ T5802] usb 9-1: config 0 descriptor?? [ 105.526019][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.697135][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 105.697149][ T42] audit: type=1400 audit(105.632:688): avc: denied { ioctl } for pid=7923 comm="syz.1.505" path="socket:[24600]" dev="sockfs" ino=24600 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.705120][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.710273][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.712902][ T7906] bridge_slave_0: entered allmulticast mode [ 105.718239][ T7906] bridge_slave_0: entered promiscuous mode [ 105.723663][ T7924] syzkaller0: entered promiscuous mode [ 105.726074][ T7924] syzkaller0: entered allmulticast mode [ 105.729411][ T7894] gadgetfs: suspended from state 3 [ 105.732704][ T42] audit: type=1400 audit(105.662:689): avc: denied { write } for pid=7901 comm="syz.4.502" name="target" dev="configfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.741712][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.744536][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.747233][ T7894] gadgetfs: disconnected [ 105.747286][ T7924] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 65487 [ 105.750297][ T55] usb 6-1: USB disconnect, device number 8 [ 105.758424][ T7906] bridge_slave_1: entered allmulticast mode [ 105.762845][ T7906] bridge_slave_1: entered promiscuous mode [ 105.833624][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.843291][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.891111][ T7906] team0: Port device team_slave_0 added [ 105.895456][ T7906] team0: Port device team_slave_1 added [ 105.917573][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.919835][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.934998][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.940367][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.945336][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.959887][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.988400][ T7906] hsr_slave_0: entered promiscuous mode [ 105.991621][ T7906] hsr_slave_1: entered promiscuous mode [ 105.993976][ T7906] debugfs: 'hsr0' already exists in 'hsr' [ 105.995821][ T7906] Cannot create hsr debugfs directory [ 106.003167][ T7947] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 106.156853][ T7906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.169616][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.173047][ T7906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.181694][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.185754][ T7906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.194789][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.201731][ T7906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.215419][ T55] usb 9-1: USB disconnect, device number 16 [ 106.216355][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.240271][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.242808][ T7906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.246385][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.249050][ T7906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.303785][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.333153][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.336891][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.353065][ T7906] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.359189][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.362111][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.368793][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.371117][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.524462][ T7988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.574446][ T7993] kvm: kvm [7992]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 106.715794][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.748560][ T8003] netlink: 'syz.3.521': attribute type 2 has an invalid length. [ 106.752590][ T8003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.521'. [ 106.779544][ T8003] : entered promiscuous mode [ 106.882368][ T55] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.906932][ T7906] veth0_vlan: entered promiscuous mode [ 106.917523][ T7906] veth1_vlan: entered promiscuous mode [ 106.950834][ T7906] veth0_macvtap: entered promiscuous mode [ 106.958916][ T7906] veth1_macvtap: entered promiscuous mode [ 106.974766][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.009098][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.051775][ T5801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.056061][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.061869][ T55] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 107.065178][ T5801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.065605][ T55] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.076410][ T55] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.078063][ T5801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.083026][ T55] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.091953][ T55] usb 6-1: Product: syz [ 107.093360][ T55] usb 6-1: Manufacturer: syz [ 107.094643][ T5801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.094906][ T55] usb 6-1: SerialNumber: syz [ 107.102559][ T55] usb 6-1: config 0 descriptor?? [ 107.107603][ T55] hub 6-1:0.0: bad descriptor, ignoring hub [ 107.110020][ T55] hub 6-1:0.0: probe with driver hub failed with error -5 [ 107.114766][ T55] usb 6-1: selecting invalid altsetting 0 [ 107.125715][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.128397][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.149925][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.153086][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.180148][ T42] audit: type=1400 audit(107.112:690): avc: denied { mounton } for pid=7906 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 107.195673][ T42] audit: type=1400 audit(107.112:691): avc: denied { mounton } for pid=7906 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.255372][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 107.306812][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.313100][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.319823][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.320210][ T5773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.321666][ T5733] Bluetooth: hci0: command tx timeout [ 107.332245][ T5773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.332537][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.348267][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.349073][ T8042] netlink: 'syz.5.510': attribute type 9 has an invalid length. [ 107.351941][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.357776][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.363504][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.366703][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.371550][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.432421][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.5.530'. [ 107.474231][ T5731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.493120][ T5731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.498594][ T5731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.509747][ T5731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.515553][ T5731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.538998][ T5773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.541379][ T5817] usb 6-1: USB disconnect, device number 9 [ 107.543220][ T5773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.549218][ T8056] netlink: 'syz.5.532': attribute type 21 has an invalid length. [ 107.553962][ T8058] netlink: 'syz.5.532': attribute type 21 has an invalid length. [ 107.557131][ T8056] netlink: 128 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.563146][ T8058] netlink: 128 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.569965][ T8056] netlink: 'syz.5.532': attribute type 5 has an invalid length. [ 107.575430][ T8056] netlink: 'syz.5.532': attribute type 6 has an invalid length. [ 107.577930][ T8056] netlink: 3 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.581042][ T8056] netlink: 'syz.5.532': attribute type 21 has an invalid length. [ 107.583486][ T8056] netlink: 128 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.586339][ T8056] netlink: 'syz.5.532': attribute type 5 has an invalid length. [ 107.588739][ T8056] netlink: 'syz.5.532': attribute type 6 has an invalid length. [ 107.591845][ T8056] netlink: 3 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.594748][ T8056] netlink: 'syz.5.532': attribute type 21 has an invalid length. [ 107.595050][ T8058] netlink: 3 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.597222][ T8056] netlink: 128 bytes leftover after parsing attributes in process `syz.5.532'. [ 107.676422][ T8067] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 107.694099][ T5773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.697594][ T5773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.742731][ T42] audit: type=1400 audit(107.682:692): avc: denied { listen } for pid=8072 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.755371][ T42] audit: type=1400 audit(107.692:693): avc: denied { mount } for pid=8075 comm="syz.4.536" name="/" dev="hugetlbfs" ino=21795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 107.759466][ T8076] hugetlbfs: Bad value 'x' for mount option 'size' [ 107.759466][ T8076] [ 107.767381][ T42] audit: type=1400 audit(107.692:694): avc: denied { remount } for pid=8075 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 107.788096][ T42] audit: type=1400 audit(107.722:695): avc: denied { unmount } for pid=6125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 107.803454][ T5773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.807745][ T5773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.015103][ T8097] bridge_slave_1: left allmulticast mode [ 108.017644][ T8097] bridge_slave_1: left promiscuous mode [ 108.023183][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.030373][ T8097] bridge_slave_0: left allmulticast mode [ 108.033635][ T8097] bridge_slave_0: left promiscuous mode [ 108.036740][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.122603][ T8104] tc_dump_action: action bad kind [ 108.157134][ T8111] usbip-vudc usbip-vudc.0: gadget not bound [ 108.208098][ T42] audit: type=1400 audit(108.142:696): avc: denied { watch_sb } for pid=8113 comm="syz.5.546" path="/9/file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.218575][ T5773] bridge_slave_1: left allmulticast mode [ 108.221021][ T5773] bridge_slave_1: left promiscuous mode [ 108.223288][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.234120][ T5773] bridge_slave_0: left allmulticast mode [ 108.236194][ T5773] bridge_slave_0: left promiscuous mode [ 108.239505][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.341121][ T7973] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 108.394838][ T5773] : left promiscuous mode [ 108.409196][ T8129] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.455029][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.458254][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.461514][ T8050] bridge_slave_0: entered allmulticast mode [ 108.465441][ T8050] bridge_slave_0: entered promiscuous mode [ 108.472649][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.475138][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.477534][ T8050] bridge_slave_1: entered allmulticast mode [ 108.480805][ T8050] bridge_slave_1: entered promiscuous mode [ 108.491797][ T7973] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 108.496703][ T7973] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 108.501208][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.505637][ T7973] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.511529][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.512507][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.517192][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.525251][ T7973] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 108.528032][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.536129][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.540998][ T7973] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.545936][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.550374][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.556081][ T7973] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 108.568142][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.572864][ T7973] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.572945][ T42] audit: type=1400 audit(108.512:697): avc: denied { write } for pid=8136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.577686][ T8050] team0: Port device team_slave_0 added [ 108.577764][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.578999][ T8050] team0: Port device team_slave_1 added [ 108.594567][ T7973] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.602319][ T7973] usb 6-1: string descriptor 0 read error: -22 [ 108.606046][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 108.606773][ T7973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.628574][ T7973] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 108.647357][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.649610][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.659145][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.663819][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.666098][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.674546][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.679063][ T5434] 8021q: adding VLAN 0 to HW filter on device eth6 [ 108.717540][ T8050] hsr_slave_0: entered promiscuous mode [ 108.719851][ T8050] hsr_slave_1: entered promiscuous mode [ 108.722257][ T8050] debugfs: 'hsr0' already exists in 'hsr' [ 108.724239][ T8050] Cannot create hsr debugfs directory [ 108.781873][ T60] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.793953][ T60] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.798638][ T60] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.802158][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.808230][ T8122] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 108.815547][ T60] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.846259][ T5773] hsr_slave_0: left promiscuous mode [ 108.854846][ T5773] hsr_slave_1: left promiscuous mode [ 108.859401][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.866490][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.872603][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.875257][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.883918][ T5773] veth1_macvtap: left promiscuous mode [ 108.885809][ T5773] veth0_macvtap: left promiscuous mode [ 108.887667][ T5773] veth1_vlan: left promiscuous mode [ 108.889367][ T5773] veth0_vlan: left promiscuous mode [ 109.032819][ T60] usb 10-1: USB disconnect, device number 2 [ 109.115311][ T5773] team0 (unregistering): Port device team_slave_1 removed [ 109.127690][ T5773] team0 (unregistering): Port device team_slave_0 removed [ 109.217707][ T5434] 8021q: adding VLAN 0 to HW filter on device eth7 [ 109.361581][ T8050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.367998][ T5817] usb 6-1: USB disconnect, device number 10 [ 109.374145][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.380773][ T8050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.386662][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.389654][ T8050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.398332][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.401127][ T5733] Bluetooth: hci0: command tx timeout [ 109.402677][ T8050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.423412][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.449374][ T5434] 8021q: adding VLAN 0 to HW filter on device eth8 [ 109.464447][ T8163] capability: warning: `syz.1.552' uses 32-bit capabilities (legacy support in use) [ 109.517006][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.530041][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.535064][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.537416][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.547677][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.550025][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.642134][ T5733] Bluetooth: hci3: command tx timeout [ 109.651902][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 109.667689][ T5434] 8021q: adding VLAN 0 to HW filter on device eth9 [ 109.806208][ T8191] overlayfs: conflicting lowerdir path [ 109.924443][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.106243][ T8050] veth0_vlan: entered promiscuous mode [ 110.111750][ T8050] veth1_vlan: entered promiscuous mode [ 110.128969][ T8050] veth0_macvtap: entered promiscuous mode [ 110.136502][ T8050] veth1_macvtap: entered promiscuous mode [ 110.145830][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.152474][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.535875][ T8227] gadgetfs: bound to dummy_udc driver [ 110.552519][ T55] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 110.740964][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 110.748503][ T55] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.754128][ T55] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 110.757535][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.760680][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.765184][ T55] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.772812][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.782184][ T5802] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 110.787366][ C3] gadgetfs: connected [ 110.789275][ T5802] gadgetfs: disconnected [ 110.832092][ T847] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 110.924593][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 110.924670][ T42] audit: type=1326 audit(110.862:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.5.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051559e0d9 code=0x7fc00000 [ 110.951522][ C3] gadgetfs: connected [ 110.953239][ T5802] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 110.957166][ T5802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.985584][ C3] gadgetfs: configuration #1 [ 110.994434][ T847] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 111.001915][ T847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.019665][ T847] usb 9-1: config 0 has no interfaces? [ 111.025186][ T55] usb 6-1: GET_CAPABILITIES returned 0 [ 111.027505][ T55] usbtmc 6-1:16.0: can't read capabilities [ 111.042605][ T847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.050008][ T847] usb 9-1: Product: syz [ 111.058062][ T847] usb 9-1: Manufacturer: syz [ 111.063947][ T847] usb 9-1: SerialNumber: syz [ 111.098846][ T847] usb 9-1: config 0 descriptor?? [ 111.115835][ T5802] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input17 [ 111.231995][ T8027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.246027][ T8027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.263441][ T8027] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.481024][ T5733] Bluetooth: hci0: command tx timeout [ 111.655139][ T8155] usb 9-1: USB disconnect, device number 17 [ 111.668795][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.672132][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.678831][ T8231] gadgetfs: suspended from state 3 [ 111.682848][ T8231] gadgetfs: disconnected [ 111.686568][ T24] usb 7-1: USB disconnect, device number 3 [ 111.721145][ T5733] Bluetooth: hci3: command tx timeout [ 111.741961][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.745323][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.761192][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.892304][ T8155] usb 6-1: USB disconnect, device number 11 [ 111.927028][ T8245] __nla_validate_parse: 138 callbacks suppressed [ 111.927052][ T8245] netlink: 2040 bytes leftover after parsing attributes in process `syz.6.528'. [ 111.936117][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.6.528'. [ 111.957866][ T8249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8249 comm=syz.5.564 [ 112.023302][ T42] audit: type=1400 audit(111.962:716): avc: denied { append } for pid=8259 comm="syz.4.569" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 112.187164][ T8277] XFS (nullb0): Invalid superblock magic number [ 112.236123][ T8283] binder: Unknown parameter 'smackfsdef' [ 112.247091][ T8276] XFS (nullb0): Invalid superblock magic number [ 112.313836][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 112.393298][ T8298] xt_hashlimit: size too large, truncated to 1048576 [ 112.454953][ T8300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 112.506355][ T42] audit: type=1400 audit(112.442:717): avc: denied { map } for pid=8301 comm="syz.4.577" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.514120][ T42] audit: type=1400 audit(112.442:718): avc: denied { execute } for pid=8301 comm="syz.4.577" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.529188][ T8302] e1000e 0000:00:02.0 eth1: S0ix is not supported on this device [ 112.551860][ T5802] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 112.560153][ T42] audit: type=1400 audit(112.492:719): avc: denied { create } for pid=8311 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 112.647300][ T8320] xt_hashlimit: size too large, truncated to 1048576 [ 112.702432][ T5802] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 112.712458][ T5802] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.721450][ T5802] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.725733][ T5802] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.734848][ T5802] usb 10-1: config 0 descriptor?? [ 112.769174][ T8328] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 112.813031][ T8332] [U] zÍ»´iœùÊý®Ò[27| [ 112.814705][ T8332] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 112.819255][ T8332] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 112.822156][ T8332] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 112.829745][ T8332] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 112.841642][ T8332] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 112.844918][ T8332] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 112.847349][ T8332] [U] ‰ϼcEv‹û @ý [ 112.848843][ T8332] [U] aÆ„% [ 112.850123][ T8332] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 112.858367][ T8332] [U] éf1Ïp±3 [ 112.859717][ T8332] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 112.862235][ T8332] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 112.865972][ T8331] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 112.873194][ T90] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.917278][ T42] audit: type=1400 audit(112.852:720): avc: denied { write } for pid=8329 comm="syz.6.584" name="/" dev="9p" ino=79954033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.929239][ T42] audit: type=1400 audit(112.852:721): avc: denied { write } for pid=8329 comm="syz.6.584" name="/" dev="9p" ino=79954033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.936418][ T42] audit: type=1400 audit(112.862:722): avc: denied { rename } for pid=8329 comm="syz.6.584" name="file0" dev="9p" ino=79954039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.153457][ T5802] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 113.156005][ T5802] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 113.159719][ T5802] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.0008/input/input18 [ 113.172410][ T5802] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 113.223943][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 113.227584][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 113.237143][ T8348] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 113.357037][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.360477][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.378464][ T42] audit: type=1400 audit(113.312:723): avc: denied { create } for pid=8350 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 113.533643][ T24] usb 10-1: USB disconnect, device number 3 [ 113.561653][ T5731] Bluetooth: hci0: command tx timeout [ 113.671009][ T5802] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 113.697585][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.801041][ T5081] Bluetooth: hci3: command tx timeout [ 113.821201][ T5802] usb 9-1: Using ep0 maxpacket: 8 [ 113.824116][ T5802] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.828757][ T5802] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 113.832278][ T5802] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 113.836681][ T5802] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.840689][ T5802] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 113.845256][ T5802] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 113.849267][ T5802] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.854525][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.063879][ T5802] usb 9-1: GET_CAPABILITIES returned 0 [ 114.070967][ T5802] usbtmc 9-1:16.0: can't read capabilities [ 114.078102][ T42] audit: type=1400 audit(114.012:724): avc: denied { mount } for pid=8362 comm="syz.5.595" name="/" dev="autofs" ino=25327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.080346][ T8363] overlay: filesystem on ./bus not supported [ 114.268815][ T8353] 9pnet_virtio: no channels available for device syz [ 114.290209][ T60] usb 9-1: USB disconnect, device number 18 [ 114.330962][ T8374] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 114.611032][ T3380] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 114.770988][ T3380] usb 10-1: Using ep0 maxpacket: 8 [ 114.773720][ T3380] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.777872][ T3380] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.781930][ T3380] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.785995][ T3380] usb 10-1: config 0 interface 0 has no altsetting 0 [ 114.788753][ T3380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.794474][ T3380] usb 10-1: config 0 descriptor?? [ 114.839636][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 114.842808][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.599'. [ 114.905269][ T8386] (syz.4.600,8386,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 114.908467][ T8386] (syz.4.600,8386,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 114.916267][ T8386] (syz.4.600,8386,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 114.919832][ T8386] (syz.4.600,8386,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 114.923166][ T5081] Bluetooth: hci4: command 0x1003 tx timeout [ 114.923214][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.935190][ T5733] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 115.008336][ T3380] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 115.016740][ T3380] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 115.018969][ T3380] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 115.022655][ T3380] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 115.024927][ T3380] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 115.027472][ T3380] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 115.261526][ T60] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 115.271776][ T8380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.276351][ T8395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.305574][ T24] usb 10-1: USB disconnect, device number 4 [ 115.402048][ T60] usb 9-1: device descriptor read/64, error -71 [ 115.643175][ T60] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 115.668300][ T8421] CIFS mount error: No usable UNC path provided in device string! [ 115.668300][ T8421] [ 115.672705][ T8421] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.726760][ T5731] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.781524][ T60] usb 9-1: device descriptor read/64, error -71 [ 115.881383][ T5731] Bluetooth: hci3: command tx timeout [ 115.902347][ T60] usb usb9-port1: attempt power cycle [ 116.031095][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 116.031112][ T42] audit: type=1400 audit(115.962:735): avc: denied { write } for pid=8449 comm="syz.1.618" name="subsystems" dev="configfs" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.046464][ T42] audit: type=1400 audit(115.982:736): avc: denied { write } for pid=8449 comm="syz.1.618" name="namespaces" dev="configfs" ino=23546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.047248][ T8454] nvmet: adding nsid 1 to subsystem subsys1 [ 116.076076][ T8456] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl812) [ 116.132078][ T8458] CUSE: info not properly terminated [ 116.143091][ T8461] overlay: Unknown parameter 'smackfsdef' [ 116.179885][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.623'. [ 116.220477][ T42] audit: type=1400 audit(116.152:737): avc: denied { bind } for pid=8469 comm="syz.6.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.263238][ T60] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 116.275705][ T8477] Bluetooth: MGMT ver 1.23 [ 116.277881][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.282532][ T60] usb 9-1: device descriptor read/8, error -71 [ 116.294601][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.513175][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 116.541038][ T60] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 116.561032][ T5802] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 116.571702][ T60] usb 9-1: device descriptor read/8, error -71 [ 116.681514][ T60] usb usb9-port1: unable to enumerate USB device [ 116.684442][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 116.714034][ T5802] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.722323][ T5802] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.741053][ T5802] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.745206][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.756813][ T8477] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 116.782493][ T5802] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.968307][ T5802] usb 6-1: USB disconnect, device number 12 [ 117.013155][ T8487] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 117.017912][ T8487] xt_hashlimit: size too large, truncated to 1048576 [ 117.163093][ T42] audit: type=1400 audit(117.102:738): avc: denied { write } for pid=8490 comm="syz.5.631" name="/" dev="9p" ino=79954033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.219940][ T24] usb 11-1: device descriptor read/all, error -71 [ 117.269028][ T42] audit: type=1400 audit(117.202:739): avc: denied { listen } for pid=8493 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.283264][ T42] audit: type=1400 audit(117.202:740): avc: denied { accept } for pid=8493 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.523296][ T42] audit: type=1400 audit(117.462:741): avc: denied { create } for pid=8505 comm="syz.6.637" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.529649][ T42] audit: type=1400 audit(117.462:742): avc: denied { link } for pid=8505 comm="syz.6.637" name="#21" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.538694][ T42] audit: type=1400 audit(117.462:743): avc: denied { rename } for pid=8505 comm="syz.6.637" name="#22" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.571040][ T5513] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 117.606109][ T42] audit: type=1400 audit(117.542:744): avc: denied { write } for pid=8510 comm="syz.6.639" name="usbmon5" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.624720][ T8512] pimreg: entered allmulticast mode [ 117.734149][ T5513] usb 6-1: not running at top speed; connect to a high speed hub [ 117.736667][ T5513] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.740364][ T5513] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.744841][ T5513] usb 6-1: config 1 interface 0 has no altsetting 0 [ 117.751260][ T5513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.754768][ T5513] usb 6-1: Product: syz [ 117.756653][ T5513] usb 6-1: Manufacturer: à  [ 117.758645][ T5513] usb 6-1: SerialNumber: syz [ 117.790421][ T8518] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 117.970079][ T8497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.972517][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.645'. [ 117.973875][ T8497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.998457][ T5513] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 118.017730][ T5513] usb 6-1: USB disconnect, device number 13 [ 118.042711][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'. [ 118.049789][ T5513] usblp0: removed [ 118.107804][ T8537] team0: Device gtp0 is of different type [ 118.140179][ T8538] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.520435][ T8568] cgroup: noprefix used incorrectly [ 118.525243][ T8568] syzkaller0: entered promiscuous mode [ 118.527511][ T8568] syzkaller0: entered allmulticast mode [ 118.684788][ T8586] dlm: non-version read from control device 4096 [ 118.716146][ T8592] CIFS mount error: No usable UNC path provided in device string! [ 118.716146][ T8592] [ 118.719787][ T8592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.724824][ T8597] CIFS mount error: No usable UNC path provided in device string! [ 118.724824][ T8597] [ 118.728083][ T8597] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.754481][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.778933][ T5733] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 118.985401][ T8629] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 118.991983][ T8630] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 120.765159][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 120.765971][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.276370][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 121.276386][ T42] audit: type=1400 audit(121.212:758): avc: denied { write } for pid=8663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.325771][ T42] audit: type=1400 audit(121.262:759): avc: denied { write } for pid=8666 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.480654][ T42] audit: type=1400 audit(121.412:760): avc: denied { write } for pid=8669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.536263][ T42] audit: type=1400 audit(121.472:761): avc: denied { write } for pid=8672 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.693803][ T8588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.735977][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 121.798530][ T8677] validate_nla: 192 callbacks suppressed [ 121.798549][ T8677] netlink: 'syz.1.681': attribute type 1 has an invalid length. [ 121.875346][ T8685] binder: 8684:8685 ioctl 4018620d 0 returned -22 [ 121.952896][ T8688] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 121.955866][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.961130][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 121.969131][ T8690] vhci_hcd: unknown pdu 2 [ 121.978946][ T12] vhci_hcd vhci_hcd.1: stop threads [ 121.993917][ T12] vhci_hcd vhci_hcd.1: release socket [ 121.995680][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 122.745088][ T42] audit: type=1800 audit(122.682:762): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.688" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 123.479129][ T8682] pvfs2: Unknown parameter 'aclF—!Œ \¢y(é÷d-B§¨ýw‚"•©£ ¹ÿÝ÷`QJ9±û§ä4¶Uz8V²íBGK‚º¥„L‚kÁGéëTå‚÷Ùqñ×ÓË2g˜$MÞ·PzeI&§Kô:÷”´Ž•®q›wý [ 123.479129][ T8682] wAÖæñëÚkª€B[hÑÁþBÞÜ·2qóDõs†š¤`ñØËÛºIj8ÿÛ ãÙ F¬×ߥàîÌ [ 123.479129][ T8682] Ž@ù<–¹g2¶¾jœí2³±{Çèf¹ì7dßYpç"àÖ.Å¡2}ÀoA¾*CÀ¹ç¢ŸG“pú÷Gþ’.~ôÀ>@ýcô2ãè7#bÕD<]òDZÊ^c™Fr2Lî·7{:ÜW™ñwc¹Níb:‡.9ò±]t Ž±¯Ònú/ Š©Tš;Ãèï+傉©»g?·Äˆ¨2ȬdN•‘wO«vš$@‡D[o$\‘¹sµÙõÉ4&' [ 123.646809][ T42] audit: type=1400 audit(123.582:763): avc: denied { write } for pid=8720 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.661562][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 123.674352][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 123.706974][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.710238][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.713657][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.715653][ T42] audit: type=1400 audit(123.652:764): avc: denied { write } for pid=8733 comm="syz.1.698" name="functions" dev="configfs" ino=14271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.716104][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.725512][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.727956][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.730349][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.733303][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.735802][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.738255][ T8731] aoe: error packet from 9007.102@lo; ecode=101 'no such error' [ 123.763752][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.6.699'. [ 123.770183][ T8739] netlink: 830 bytes leftover after parsing attributes in process `syz.6.699'. [ 123.833243][ T42] audit: type=1400 audit(123.772:765): avc: denied { read write } for pid=8740 comm="syz.1.700" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 123.842321][ T42] audit: type=1400 audit(123.772:766): avc: denied { open } for pid=8740 comm="syz.1.700" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 123.851983][ T42] audit: type=1400 audit(123.772:767): avc: denied { mounton } for pid=8741 comm="syz.4.701" path="/proc/529/task" dev="proc" ino=26374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 123.951925][ T8739] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.699'. [ 124.084944][ T8764] FAT-fs (nullb0): bogus number of reserved sectors [ 124.088470][ T8764] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 124.232325][ T8769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.757229][ T8790] kAFS: No cell specified [ 124.862009][ T8794] ALSA: seq fatal error: cannot create timer (-19) [ 124.981325][ T8817] 9pnet_virtio: no channels available for device syz [ 125.035838][ T8821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=8821 comm=syz.1.725 [ 125.063525][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 125.227448][ T8829] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 125.286976][ T8833] netlink: 'syz.6.726': attribute type 4 has an invalid length. [ 125.406954][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.737'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 125.881295][ T8867] netlink: 'syz.6.742': attribute type 29 has an invalid length. [ 126.030802][ T5731] Bluetooth: hci2: hardware error 0xff [ 126.095873][ T8875] 9p: Bad value for 'rfdno' [ 126.144421][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.6.749'. [ 126.387345][ T8901] netlink: 'syz.1.754': attribute type 2 has an invalid length. [ 126.403741][ T8900] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 126.619291][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 126.619311][ T42] audit: type=1400 audit(126.552:787): avc: denied { watch } for pid=8911 comm="syz.6.757" path="/59/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 127.031018][ T5513] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 127.181003][ T5513] usb 6-1: Using ep0 maxpacket: 16 [ 127.184724][ T5513] usb 6-1: New USB device found, idVendor=0fe6, idProduct=8101, bcdDevice=98.70 [ 127.189266][ T5513] usb 6-1: config 3 has an invalid interface number: 221 but max is 3 [ 127.192561][ T5513] usb 6-1: config 3 has an invalid interface number: 29 but max is 3 [ 127.195728][ T5513] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 127.199120][ T5513] usb 6-1: config 3 has an invalid interface number: 217 but max is 3 [ 127.202463][ T5513] usb 6-1: config 3 has an invalid interface number: 141 but max is 3 [ 127.205355][ T5513] usb 6-1: config 3 has an invalid interface number: 246 but max is 3 [ 127.208328][ T5513] usb 6-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 127.211933][ T5513] usb 6-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 127.215421][ T5513] usb 6-1: config 3 has no interface number 0 [ 127.217871][ T5513] usb 6-1: config 3 has no interface number 1 [ 127.220257][ T5513] usb 6-1: config 3 has no interface number 2 [ 127.222743][ T5513] usb 6-1: config 3 has no interface number 3 [ 127.225074][ T5513] usb 6-1: config 3 has no interface number 4 [ 127.227591][ T5513] usb 6-1: config 3 interface 221 altsetting 16 has a duplicate endpoint with address 0xD, skipping [ 127.231892][ T5513] usb 6-1: config 3 interface 221 altsetting 16 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 127.236051][ T5513] usb 6-1: config 3 interface 29 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 127.240186][ T5513] usb 6-1: config 3 interface 29 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 127.244326][ T5513] usb 6-1: config 3 interface 29 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 127.248392][ T5513] usb 6-1: config 3 interface 29 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1023 [ 127.252375][ T5513] usb 6-1: config 3 interface 29 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 127.256427][ T5513] usb 6-1: config 3 interface 29 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 127.260286][ T5513] usb 6-1: config 3 interface 29 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 127.264471][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 127.268548][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 127.272724][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 127.276814][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 127.280965][ T5513] usb 6-1: config 3 interface 217 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 127.285063][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 127.289123][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 127.293234][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 127.297252][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 127.301430][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 127.305539][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 127.309703][ T5513] usb 6-1: config 3 interface 217 altsetting 4 has 13 endpoint descriptors, different from the interface descriptor's value: 15 [ 127.314881][ T5513] usb 6-1: too many endpoints for config 3 interface 141 altsetting 83: 232, using maximum allowed: 30 [ 127.319125][ T5513] usb 6-1: config 3 interface 141 altsetting 83 has a duplicate endpoint with address 0xF, skipping [ 127.323327][ T5513] usb 6-1: config 3 interface 141 altsetting 83 has a duplicate endpoint with address 0xA, skipping [ 127.327511][ T5513] usb 6-1: config 3 interface 141 altsetting 83 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 127.332758][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0x87, skipping [ 127.336914][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 127.341127][ T5513] usb 6-1: config 3 interface 246 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 127.345336][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 127.349520][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 127.353756][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 127.357960][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 127.362244][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 127.366379][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 127.370509][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 127.374720][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 127.378749][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 127.382701][ T5513] usb 6-1: config 3 interface 246 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 127.386945][ T5513] usb 6-1: config 3 interface 221 has no altsetting 0 [ 127.389609][ T5513] usb 6-1: config 3 interface 29 has no altsetting 0 [ 127.392325][ T5513] usb 6-1: config 3 interface 217 has no altsetting 0 [ 127.394949][ T5513] usb 6-1: config 3 interface 141 has no altsetting 0 [ 127.397622][ T5513] usb 6-1: config 3 interface 246 has no altsetting 0 [ 127.759058][ T8928] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.045214][ T5731] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 128.673153][ T42] audit: type=1400 audit(128.612:788): avc: denied { setattr } for pid=8936 comm="syz.6.764" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 128.680230][ T42] audit: type=1400 audit(128.612:789): avc: denied { append } for pid=8936 comm="syz.6.764" name="pfkey" dev="proc" ino=4026534077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 128.896667][ T8954] misc userio: Can't change port extra on an already running userio instance [ 129.527747][ T8965] netlink: 'syz.6.773': attribute type 1 has an invalid length. [ 129.691945][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.6.773'. [ 129.801780][ T5513] usb 6-1: Dual-Role OTG device on HNP port [ 129.807914][ T5513] usb 6-1: can't set HNP mode: -71 [ 129.850217][ T8977] jffs2: notice: (8977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.864451][ T42] audit: type=1400 audit(129.802:790): avc: denied { write } for pid=8976 comm="syz.6.776" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.871637][ T42] audit: type=1400 audit(129.802:791): avc: denied { add_name } for pid=8976 comm="syz.6.776" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.878038][ T42] audit: type=1400 audit(129.812:792): avc: denied { read write open } for pid=8976 comm="syz.6.776" path="/75/file0/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.913441][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.776'. [ 129.918453][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.949631][ T42] audit: type=1400 audit(129.882:793): avc: denied { getopt } for pid=8981 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.978580][ T8984] net_ratelimit: 3257 callbacks suppressed [ 129.978601][ T8984] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 130.203057][ T8996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.618571][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 130.631330][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 130.803194][ T9040] batman_adv: batadv0: Adding interface: veth0 [ 130.806812][ T9040] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.814951][ T9040] batman_adv: batadv0: Interface activated: veth0 [ 130.817770][ T9043] netlink: 'syz.4.795': attribute type 11 has an invalid length. [ 130.822292][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.824784][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.828414][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.835379][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.840842][ T9040] batman_adv: batadv0: Interface deactivated: veth0 [ 130.850007][ T9040] batman_adv: batadv0: Removing interface: veth0 [ 130.962795][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.967313][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.975680][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.007836][ T42] audit: type=1400 audit(130.942:794): avc: denied { getopt } for pid=9054 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.013743][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.022786][ T9043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.026109][ T9043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.031278][ T9043] virt_wifi0: left promiscuous mode [ 131.036872][ T9043] veth1_vlan: left promiscuous mode [ 131.042223][ T9043] veth0_vlan: entered promiscuous mode [ 131.048179][ T9043] veth1_vlan: entered promiscuous mode [ 131.056699][ T9043] veth1_macvtap: left promiscuous mode [ 131.059753][ T9043] veth0_macvtap: left promiscuous mode [ 131.068463][ T9043] veth0_macvtap: entered promiscuous mode [ 131.088777][ T9043] veth1_macvtap: entered promiscuous mode [ 131.104059][ T9043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.107142][ T9043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.110566][ T9043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.116885][ T9043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.117845][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 131.126448][ T9043] virt_wifi0: entered promiscuous mode [ 131.372742][ T9074] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 (while UP) [ 131.381027][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 131.384259][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.390757][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 131.396144][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.399220][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 131.410272][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.416673][ T9071] pim6reg1: entered promiscuous mode [ 131.418439][ T9071] pim6reg1: entered allmulticast mode [ 131.460987][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 131.463735][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.480983][ T5873] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 131.489937][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.804'. [ 131.631026][ T5873] usb 11-1: Using ep0 maxpacket: 16 [ 131.633251][ T5873] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.637024][ T5873] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.640529][ T5873] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.644600][ T5873] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.649575][ T5873] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.657372][ T5873] usb 11-1: config 0 descriptor?? [ 131.667001][ T9091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.805'. [ 131.941056][ T7973] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 132.051224][ T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 132.064564][ T5873] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 132.069835][ T5873] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 132.072441][ T5873] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 132.074683][ T5873] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 132.087282][ T5873] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.000A/input/input20 [ 132.092188][ T7973] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 132.102414][ T7973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.107053][ T7973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.113272][ T7973] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 132.116096][ T7973] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 132.118587][ T7973] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 132.126043][ T7973] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 132.128560][ T7973] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 132.133675][ T7973] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 132.138025][ T7973] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 132.142832][ T7973] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 132.148361][ T7973] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 132.198347][ T5873] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 132.222319][ T9] usb 9-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 132.233307][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.235905][ T9] usb 9-1: Product: syz [ 132.237225][ T9] usb 9-1: Manufacturer: syz [ 132.238686][ T9] usb 9-1: SerialNumber: syz [ 132.250789][ T9] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.344927][ T5873] usb 6-1: USB disconnect, device number 16 [ 132.352192][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 132.359343][ T55] usb 11-1: USB disconnect, device number 4 [ 132.365350][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 132.369296][ T5873] keyspan 6-1:1.0: device disconnected [ 132.491040][ T9090] smpboot: CPU 1 is now offline [ 132.568457][ T9090] smpboot: CPU 3 is now offline [ 132.595139][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.597636][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.637342][ T9113] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 132.703505][ T9113] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 132.734472][ T9] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.766056][ T42] audit: type=1400 audit(132.702:795): avc: denied { ioctl } for pid=9115 comm="syz.6.810" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.782750][ T9] usb 9-1: USB disconnect, device number 23 [ 132.815307][ T7728] udevd[7728]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.876574][ T42] audit: type=1400 audit(132.812:796): avc: denied { append } for pid=9119 comm="syz.1.811" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.976847][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 133.208611][ T9137] netlink: 160 bytes leftover after parsing attributes in process `syz.6.817'. [ 133.416745][ T9152] bridge_slave_0: invalid flags given to default FDB implementation [ 133.441555][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.450674][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.453710][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.457783][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.458821][ T9156] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 133.464818][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.531058][ T9164] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 133.566056][ T9164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.618466][ T9164] bond3: (slave geneve2): making interface the new active one [ 133.624249][ T9164] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 133.674103][ T42] audit: type=1400 audit(133.612:797): avc: denied { ioctl } for pid=9177 comm="syz.1.829" path="socket:[30403]" dev="sockfs" ino=30403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.716536][ T42] audit: type=1400 audit(133.652:798): avc: denied { write } for pid=9183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.750549][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.832'. [ 133.760274][ T42] audit: type=1400 audit(133.692:799): avc: denied { write } for pid=9189 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.834585][ T42] audit: type=1400 audit(133.772:800): avc: denied { write } for pid=9196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.875478][ T42] audit: type=1400 audit(133.812:801): avc: denied { write } for pid=9203 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.937134][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.939487][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.941945][ T9153] bridge_slave_0: entered allmulticast mode [ 133.944657][ T9153] bridge_slave_0: entered promiscuous mode [ 133.948154][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.950502][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.953062][ T9153] bridge_slave_1: entered allmulticast mode [ 133.955779][ T9153] bridge_slave_1: entered promiscuous mode [ 133.975042][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.979889][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.011393][ T9153] team0: Port device team_slave_0 added [ 134.015008][ T9153] team0: Port device team_slave_1 added [ 134.042423][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.044876][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.054442][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.060158][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.071728][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.082906][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.088680][ T42] audit: type=1400 audit(134.022:802): avc: denied { write } for pid=9224 comm="syz.6.836" path="socket:[27405]" dev="sockfs" ino=27405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.116724][ T9153] hsr_slave_0: entered promiscuous mode [ 134.119467][ T9153] hsr_slave_1: entered promiscuous mode [ 134.267837][ T9153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 134.274297][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.279577][ T9153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 134.286747][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.289667][ T9153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 134.294620][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.297451][ T9153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 134.308747][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.362979][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.371667][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.378518][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.382990][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.398789][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.402040][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.483231][ T9272] netlink: 'syz.6.840': attribute type 21 has an invalid length. [ 134.617651][ T42] audit: type=1400 audit(134.552:803): avc: denied { create } for pid=9294 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.627407][ T42] audit: type=1400 audit(134.552:804): avc: denied { bind } for pid=9294 comm="syz.6.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.639716][ T9295] syzkaller0: entered promiscuous mode [ 134.641588][ T9295] syzkaller0: entered allmulticast mode [ 134.685532][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.823884][ T9153] veth0_vlan: entered promiscuous mode [ 134.829096][ T9153] veth1_vlan: entered promiscuous mode [ 134.850140][ T9153] veth0_macvtap: entered promiscuous mode [ 134.854302][ T9153] veth1_macvtap: entered promiscuous mode [ 134.863915][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.877434][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.925690][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.933769][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.953649][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.958859][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.961495][ T5773] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.961907][ T5773] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.990651][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.994022][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.045483][ T9327] __nla_validate_parse: 3 callbacks suppressed [ 135.045495][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.7.822'. [ 135.077519][ T9329] null_blk: nullb1: using native zone append [ 135.103096][ T9331] netlink: 'syz.7.849': attribute type 1 has an invalid length. [ 135.128955][ T9329] null_blk: disk nullb1 created [ 135.158492][ T9329] null_blk: disk nullb2 created [ 135.160781][ T9335] gretap1: entered promiscuous mode [ 135.266050][ T9337] syzkaller1: entered promiscuous mode [ 135.267907][ T9337] syzkaller1: entered allmulticast mode [ 135.396825][ T9348] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 135.407176][ T9348] team0: Device wg2 is of different type [ 135.416646][ T9348] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 135.420163][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 135.441399][ T9350] netlink: 'syz.6.854': attribute type 4 has an invalid length. [ 135.446901][ T9350] netlink: 60 bytes leftover after parsing attributes in process `syz.6.854'. [ 135.449797][ T9350] netlink: 60 bytes leftover after parsing attributes in process `syz.6.854'. [ 135.464717][ T9352] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 135.482670][ T5733] Bluetooth: hci4: command tx timeout [ 135.548688][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.6.860'. [ 135.564574][ T9364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.584135][ T9364] macvlan2: entered promiscuous mode [ 135.586667][ T9364] macvlan2: entered allmulticast mode [ 135.644073][ T9373] could not open pipe file descriptor [ 137.561547][ T5733] Bluetooth: hci4: command tx timeout [ 139.641127][ T5733] Bluetooth: hci4: command tx timeout [ 141.721217][ T5733] Bluetooth: hci4: command tx timeout [ 142.736423][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 142.736435][ T42] audit: type=1400 audit(142.672:824): avc: denied { write } for pid=9382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.793674][ T42] audit: type=1400 audit(142.732:825): avc: denied { write } for pid=9385 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.149780][ T9395] netlink: 'syz.1.866': attribute type 12 has an invalid length. [ 155.265055][ T42] audit: type=1400 audit(155.202:826): avc: denied { getopt } for pid=9401 comm="syz.7.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.392303][ T5802] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 155.510785][ T42] audit: type=1400 audit(155.442:827): avc: denied { create } for pid=9428 comm="syz.7.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.543539][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 155.555960][ T5802] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 155.560718][ T5802] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.567601][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.571450][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24933, setting to 1024 [ 155.574830][ T5802] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.581058][ T42] audit: type=1400 audit(155.522:828): avc: denied { watch watch_reads } for pid=9433 comm="syz.6.880" path="/114/file1" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 155.588225][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.590766][ T5802] usb 6-1: Product: syz [ 155.592268][ T5802] usb 6-1: Manufacturer: syz [ 155.593767][ T5802] usb 6-1: SerialNumber: syz [ 155.786038][ T9452] vers=1.0 (cifs) not permitted when mounting with smb3 [ 155.786038][ T9452] [ 155.790182][ T9452] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 155.791519][ T9449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.801557][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 155.867572][ T42] audit: type=1400 audit(155.802:829): avc: denied { name_bind } for pid=9457 comm="syz.4.889" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 156.014484][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.018183][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.061200][ T5802] usb 6-1: USB disconnect, device number 17 [ 156.181036][ T847] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 156.311078][ T847] usb 11-1: device descriptor read/64, error -71 [ 156.551058][ T847] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 156.691094][ T847] usb 11-1: device descriptor read/64, error -71 [ 156.776909][ T42] audit: type=1400 audit(156.712:830): avc: denied { create } for pid=9484 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.782637][ T42] audit: type=1400 audit(156.712:831): avc: denied { connect } for pid=9484 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.789426][ T42] audit: type=1400 audit(156.712:832): avc: denied { write } for pid=9484 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.797316][ T42] audit: type=1400 audit(156.712:833): avc: denied { read } for pid=9484 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.801215][ T847] usb usb11-port1: attempt power cycle [ 156.981017][ T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 157.131814][ T24] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 157.135592][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.139205][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 157.143169][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.153303][ T24] idmouse 9-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 157.161004][ T847] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 157.181542][ T847] usb 11-1: device descriptor read/8, error -71 [ 157.431118][ T847] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 157.461625][ T847] usb 11-1: device descriptor read/8, error -71 [ 157.572291][ T847] usb usb11-port1: unable to enumerate USB device [ 157.658545][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.899'. [ 157.688345][ T42] audit: type=1400 audit(157.622:834): avc: denied { bind } for pid=9491 comm="syz.7.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.696970][ T42] audit: type=1400 audit(157.622:835): avc: denied { name_bind } for pid=9491 comm="syz.7.899" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 157.701181][ T9492] syz.7.899 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.002599][ T9520] netlink: 'syz.7.905': attribute type 10 has an invalid length. [ 158.008913][ T9520] team0: Device wg2 is of different type [ 158.126289][ T9530] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.907'. [ 158.130178][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.907'. [ 158.197704][ T9534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3170034004 (101441088128 ns) > initial count (92024169792 ns). Using initial count to start timer. [ 159.022355][ T9553] tmpfs: Bad value for 'mpol' [ 159.177754][ T9566] loop5: detected capacity change from 0 to 7 [ 159.189122][ T9566] loop5: p1 p3 p4 [ 159.190804][ T9566] loop5: partition table partially beyond EOD, truncated [ 159.199044][ T9566] loop5: p1 size 128 extends beyond EOD, truncated [ 159.211996][ T9566] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 159.213801][ T9572] overlayfs: overlapping lowerdir path [ 159.237817][ T9573] /dev/sg0: Can't lookup blockdev [ 159.248826][ T9566] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.252809][ T9566] overlayfs: failed to set xattr on upper [ 159.272018][ T9566] overlayfs: ...falling back to redirect_dir=nofollow. [ 159.274866][ T9566] overlayfs: ...falling back to index=off. [ 159.277318][ T9566] overlayfs: ...falling back to uuid=null. [ 159.324674][ T5873] usb 9-1: USB disconnect, device number 24 [ 159.332593][ T5873] idmouse 9-1:1.0: disconnected [ 159.334941][ T9586] overlayfs: missing 'workdir' [ 159.512276][ T9605] netlink: 'syz.7.928': attribute type 19 has an invalid length. [ 159.515340][ T9605] hfsplus: Unknown parameter 'fuse' [ 159.750941][ T3380] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 159.901881][ T3380] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 159.906715][ T3380] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.911453][ T3380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.133397][ T3380] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 160.158450][ T3380] wwan wwan0: port wwan0qmi0 attached [ 160.222461][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.6.934'. [ 160.230736][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.6.934'. [ 160.354198][ T3380] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 3a:43:68:b6:d6:00 [ 160.448639][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 160.448657][ T42] audit: type=1400 audit(160.382:850): avc: denied { write } for pid=9658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.503819][ T42] audit: type=1400 audit(160.442:851): avc: denied { write } for pid=9668 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.529986][ T42] audit: type=1400 audit(160.462:852): avc: denied { mounton } for pid=9666 comm="syz.6.943" path="/126/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 160.535643][ T55] usb 6-1: USB disconnect, device number 18 [ 160.548204][ T55] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 160.703235][ T42] audit: type=1400 audit(160.632:853): avc: denied { write } for pid=9687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.729949][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 160.752379][ T55] wwan wwan0: port wwan0qmi0 disconnected [ 160.767532][ T42] audit: type=1400 audit(160.702:854): avc: denied { write } for pid=9696 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.846740][ T42] audit: type=1400 audit(160.782:855): avc: denied { write } for pid=9702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.894730][ T9694] fuse: Invalid rootmode [ 160.920160][ T42] audit: type=1400 audit(160.852:856): avc: denied { write } for pid=9711 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.111916][ T9728] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.114752][ T9728] overlayfs: missing 'lowerdir' [ 161.118560][ T9728] trusted_key: encrypted_key: keylen parameter is missing [ 161.212281][ T42] audit: type=1400 audit(161.142:857): avc: denied { cmd } for pid=9735 comm="syz.7.958" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 161.237789][ T42] audit: type=1400 audit(161.172:858): avc: denied { connect } for pid=9741 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.374340][ T42] audit: type=1400 audit(161.312:859): avc: denied { mount } for pid=9745 comm="syz.1.960" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 161.392670][ T9759] block2mtd: parameter too long [ 161.438459][ T9767] FAULT_INJECTION: forcing a failure. [ 161.438459][ T9767] name fail_futex, interval 1, probability 0, space 0, times 1 [ 161.446074][ T9767] CPU: 0 UID: 0 PID: 9767 Comm: syz.7.966 Not tainted syzkaller #0 PREEMPT(full) [ 161.446098][ T9767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.446135][ T9767] Call Trace: [ 161.446175][ T9767] [ 161.446183][ T9767] dump_stack_lvl+0x100/0x190 [ 161.446274][ T9767] should_fail_ex.cold+0x5/0xa [ 161.446300][ T9767] get_futex_key+0x1d0/0x14f0 [ 161.446339][ T9767] ? __pfx_get_futex_key+0x10/0x10 [ 161.446363][ T9767] ? ttwu_queue_wakelist+0x2fd/0x450 [ 161.446392][ T9767] ? __smp_call_single_queue+0x17e/0x450 [ 161.446418][ T9767] ? __pfx___smp_call_single_queue+0x10/0x10 [ 161.446446][ T9767] futex_wait_setup+0x91/0x540 [ 161.446473][ T9767] __futex_wait+0x19f/0x300 [ 161.446496][ T9767] ? __pfx___futex_wait+0x10/0x10 [ 161.446515][ T9767] ? __pfx_try_to_wake_up+0x10/0x10 [ 161.446539][ T9767] ? futex_hash+0x311/0x400 [ 161.446563][ T9767] ? __pfx_futex_wake_mark+0x10/0x10 [ 161.446586][ T9767] ? find_held_lock+0x2b/0x80 [ 161.446602][ T9767] ? futex_wake+0x4ea/0x5e0 [ 161.446627][ T9767] futex_wait+0xe6/0x370 [ 161.446646][ T9767] ? __pfx_futex_wait+0x10/0x10 [ 161.446670][ T9767] ? rcu_read_lock_any_held+0x6a/0x90 [ 161.446689][ T9767] ? find_held_lock+0x2b/0x80 [ 161.446707][ T9767] ? ksys_write+0x190/0x250 [ 161.446735][ T9767] ? ksys_write+0x190/0x250 [ 161.446756][ T9767] do_futex+0x265/0x440 [ 161.446774][ T9767] ? __pfx_do_futex+0x10/0x10 [ 161.446803][ T9767] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.446887][ T9767] __x64_sys_futex+0x34f/0x4d0 [ 161.446905][ T9767] ? fput+0x7c/0x100 [ 161.446926][ T9767] ? __pfx___x64_sys_futex+0x10/0x10 [ 161.446957][ T9767] ? ksys_write+0x1ac/0x250 [ 161.446978][ T9767] ? __pfx_ksys_write+0x10/0x10 [ 161.447003][ T9767] do_syscall_64+0x123/0x790 [ 161.447023][ T9767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.447043][ T9767] RIP: 0033:0x7fdf6239e0d9 [ 161.447058][ T9767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.447090][ T9767] RSP: 002b:00007fdf633350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.447118][ T9767] RAX: ffffffffffffffda RBX: 00007fdf62625fa8 RCX: 00007fdf6239e0d9 [ 161.447130][ T9767] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf62625fa8 [ 161.447140][ T9767] RBP: 00007fdf62625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 161.447151][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.447161][ T9767] R13: 00007fdf62626038 R14: 00007ffc987871a0 R15: 00007ffc98787288 [ 161.447191][ T9767] [ 161.474927][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.967'. [ 161.530805][ T9776] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 161.537933][ T9769] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 161.821020][ T55] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 161.901026][ T5873] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 161.992190][ T55] usb 12-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 161.997549][ T55] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.001887][ T55] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 162.006027][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.022133][ T55] idmouse 12-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 162.052054][ T5873] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 162.057317][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.061269][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 162.064858][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 162.070039][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.073256][ T5873] usb 6-1: Product: syz [ 162.074619][ T5873] usb 6-1: Manufacturer: syz [ 162.076188][ T5873] usb 6-1: SerialNumber: syz [ 162.079215][ T5873] usb 6-1: config 0 descriptor?? [ 162.082074][ T9785] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.141561][ T5873] rc_core: IR keymap rc-streamzap not found [ 162.143579][ T5873] Registered IR keymap rc-empty [ 162.146430][ T5873] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 162.150819][ T5873] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 162.212153][ T9810] syz.4.978 (9810): attempted to duplicate a private mapping with mremap. This is not supported. [ 162.223272][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.261185][ T24] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 162.289269][ T9785] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 162.303310][ T5817] usb 6-1: USB disconnect, device number 19 [ 162.369644][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 162.385599][ T9815] ip6erspan0: entered promiscuous mode [ 162.421108][ T24] usb 11-1: Using ep0 maxpacket: 16 [ 162.424211][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.428602][ T24] usb 11-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 162.433434][ T24] usb 11-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 162.437413][ T24] usb 11-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 32 [ 162.441667][ T24] usb 11-1: config 1 interface 0 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 162.445813][ T24] usb 11-1: config 1 interface 0 has no altsetting 0 [ 162.449480][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.452240][ T24] usb 11-1: Product: syz [ 162.453593][ T24] usb 11-1: Manufacturer: syz [ 162.455255][ T24] usb 11-1: SerialNumber: syz [ 162.459507][ T9804] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 162.462035][ T9804] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 162.669132][ T24] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 162.682251][ T24] usb 11-1: USB disconnect, device number 9 [ 163.130954][ T55] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 163.281625][ T55] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 163.285613][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.439813][ T9845] xt_CT: No such helper "pptp" [ 163.500474][ T55] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 163.763448][ T9855] bridge1: entered promiscuous mode [ 163.827140][ T5873] usb 12-1: USB disconnect, device number 2 [ 163.839015][ T9852] smpboot: CPU 1 is now offline [ 163.841415][ T5873] idmouse 12-1:1.0: disconnected [ 163.929602][ T9856] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 163.940275][ T9860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=9860 comm=syz.1.994 [ 163.955674][ T9860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=9860 comm=syz.1.994 [ 164.025835][ T9867] erspan1: entered promiscuous mode [ 164.146835][ T9871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.252531][ T9876] deleting an unspecified loop device is not supported. [ 164.287632][ T9883] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 164.465271][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1003'. [ 164.474559][ T9892] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 164.518187][ T9895] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 164.520830][ T9895] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.527098][ T9895] vhci_hcd vhci_hcd.0: Device attached [ 164.530371][ T9900] usbip_core: unknown command [ 164.532916][ T9895] netlink: 'syz.1.1004': attribute type 29 has an invalid length. [ 164.535921][ T9900] vhci_hcd: unknown pdu 4278190080 [ 164.537802][ T9900] usbip_core: unknown command [ 164.540244][ T9895] netlink: 'syz.1.1004': attribute type 3 has an invalid length. [ 164.548398][ T12] vhci_hcd vhci_hcd.1: stop threads [ 164.550558][ T12] vhci_hcd vhci_hcd.1: release socket [ 164.551103][ T9895] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1004'. [ 164.552809][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 164.664086][ T9909] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.1008'. [ 164.907930][ T9918] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.1011'. [ 164.938059][ T9917] i2c i2c-1: dtv_property_process_set: SET cmd 0x25dfdbfc undefined [ 165.160286][ T9925] netlink: 'syz.1.1013': attribute type 21 has an invalid length. [ 165.163844][ T9925] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.396705][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1016'. [ 165.400545][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1016'. [ 165.404763][ T9934] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 165.463763][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1016'. [ 165.467769][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 165.467781][ T42] audit: type=1400 audit(421.403:877): avc: denied { read } for pid=9933 comm="syz.7.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.515031][ T42] audit: type=1400 audit(421.453:878): avc: denied { ioctl } for pid=9944 comm="syz.6.1018" path="socket:[34656]" dev="sockfs" ino=34656 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.566849][ T42] audit: type=1400 audit(421.503:879): avc: denied { read write } for pid=9947 comm="syz.7.1019" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 165.571871][ T9948] type: 17119 invalid [ 165.574341][ T42] audit: type=1400 audit(421.503:880): avc: denied { open } for pid=9947 comm="syz.7.1019" path="/48/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 165.584690][ T42] audit: type=1400 audit(421.503:881): avc: denied { ioctl } for pid=9947 comm="syz.7.1019" path="/48/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 165.623823][ T9954] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 165.633321][ T42] audit: type=1800 audit(421.573:882): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1022" name="zone_nr_conv" dev="configfs" ino=32503 res=0 errno=0 [ 165.652144][ T5873] IPVS: starting estimator thread 0... [ 165.760719][ T9956] IPVS: using max 44 ests per chain, 105600 per kthread [ 165.766306][ T9964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9964 comm=syz.7.1024 [ 165.913875][ T34] usb 9-1: USB disconnect, device number 25 [ 165.997724][ T42] audit: type=1400 audit(421.933:883): avc: denied { read } for pid=9972 comm="syz.4.1027" lport=59294 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.060890][ T9977] XFS (nbd7): SB validate failed with error -5. [ 166.088985][ T42] audit: type=1400 audit(422.023:884): avc: denied { ioctl } for pid=9984 comm="syz.6.1030" path="socket:[36147]" dev="sockfs" ino=36147 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.182821][ T9993] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 166.231435][ T42] audit: type=1400 audit(422.173:885): avc: denied { write } for pid=9996 comm="syz.4.1033" name="dlm" dev="configfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.245010][ T9997] input: syz0 as /devices/virtual/input/input23 [ 166.272850][ T42] audit: type=1400 audit(422.213:886): avc: denied { write } for pid=9996 comm="syz.4.1033" name="comms" dev="configfs" ino=34721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.455662][T10012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.627584][ T5733] Bluetooth: hci3: ACL packet too small [ 166.671975][T10049] overlay: Unknown parameter 'audit' [ 166.685279][ C0] ------------[ cut here ]------------ [ 166.687532][ C0] cpu_t != t [ 166.687541][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x289/0x2e0, CPU#0: syz.4.1045/10037 [ 166.694652][ C0] Modules linked in: [ 166.697142][ C0] CPU: 0 UID: 0 PID: 10037 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(full) [ 166.700167][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.703544][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 166.705280][ C0] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 0b c9 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 58 ce 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 60 cd bf 8e e8 70 df 85 [ 166.711344][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 166.713643][ C0] RAX: 0000000000000000 RBX: ffff88806a423440 RCX: 0000000000000101 [ 166.716228][ C0] RDX: ffff88802b39cb00 RSI: ffffffff81b1d018 RDI: ffffffff8e670920 [ 166.718776][ C0] RBP: ffff88806a523440 R08: 0000000000000001 R09: 0000000000000000 [ 166.721406][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 166.724001][ C0] R13: 0000000000000101 R14: 1ffff92000000f8d R15: ffffffff81b1cd90 [ 166.726615][ C0] FS: 0000555590e7e500(0000) GS:ffff8880d5bd4000(0000) knlGS:0000000000000000 [ 166.729600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.731832][ C0] CR2: 0000200000000948 CR3: 0000000054176000 CR4: 0000000000352ef0 [ 166.734660][ C0] Call Trace: [ 166.735803][ C0] [ 166.736774][ C0] call_timer_fn+0x198/0x5f0 [ 166.739011][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 166.740750][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 166.742429][ C0] ? mark_held_locks+0x40/0x70 [ 166.744136][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 166.745866][ C0] __run_timers+0x757/0xb00 [ 166.747383][ C0] ? __pfx___run_timers+0x10/0x10 [ 166.749005][ C0] ? clockevents_program_event+0x1bf/0x820 [ 166.750961][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 166.752620][ C0] run_timer_base+0x114/0x190 [ 166.754205][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 166.755979][ C0] run_timer_softirq+0x10/0x50 [ 166.757556][ C0] handle_softirqs+0x1e6/0x9d0 [ 166.759240][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 166.761014][ C0] ? _raw_spin_unlock+0x28/0x50 [ 166.762604][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 166.764428][ C0] __irq_exit_rcu+0x194/0x210 [ 166.765989][ C0] irq_exit_rcu+0x9/0x30 [ 166.767433][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 166.769242][ C0] [ 166.770270][ C0] [ 166.771249][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.773159][ C0] RIP: 0010:preempt_schedule_irq+0x49/0x90 [ 166.775215][ C0] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 42 c1 15 f6 e8 ad e8 52 f6 fb bf 01 00 00 00 b2 91 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 30 61 15 [ 166.781570][ C0] RSP: 0018:ffffc900044ef968 EFLAGS: 00000202 [ 166.783544][ C0] RAX: 0000000000001325 RBX: ffffed1005673960 RCX: 0000000000000040 [ 166.786117][ C0] RDX: 0000000000000001 RSI: ffffffff8e3a92ac RDI: 0000000000000001 [ 166.788888][ C0] RBP: ffff88802b39cb00 R08: 0000000000000001 R09: 0000000000000000 [ 166.791645][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 166.794200][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.796776][ C0] ? preempt_schedule_irq+0x43/0x90 [ 166.798620][ C0] irqentry_exit+0x205/0xa10 [ 166.800368][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 166.802112][ C0] RIP: 0010:lockdep_unregister_key+0x197/0x2b0 [ 166.804112][ C0] Code: 48 c7 c7 4c f3 49 8e e8 17 3f d9 09 65 ff 0d 38 6c 9f 12 9c 58 f6 c4 02 0f 85 9f 00 00 00 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 51 5b 5d 41 5c 41 5d e9 1c c8 09 00 9c 58 f6 c4 02 0f 84 ad fe [ 166.810672][ C0] RSP: 0018:ffffc900044efa78 EFLAGS: 00000202 [ 166.812635][ C0] RAX: 0000000000000046 RBX: 0000000000000001 RCX: 0000000000000001 [ 166.815143][ C0] RDX: 0000000000000000 RSI: ffffffff8e49f34c RDI: ffffffff8c602380 [ 166.817689][ C0] RBP: ffffffff98077eb8 R08: 0000000000008e87 R09: ffffffff96a39b6e [ 166.820617][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 166.823335][ C0] R13: ffff88802b39cb00 R14: ffff88803989c568 R15: 0000000000000001 [ 166.825883][ C0] __qdisc_destroy+0x172/0x530 [ 166.827501][ C0] qdisc_put+0xb0/0xf0 [ 166.828882][ C0] dev_shutdown+0x1d2/0x440 [ 166.830484][ C0] unregister_netdevice_many_notify+0xd55/0x2150 [ 166.830795][T10062] openvswitch: netlink: Message has 4 unknown bytes. [ 166.832560][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 166.834784][T10062] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.837066][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.837117][ C0] ? linkwatch_fire_event+0x211/0x270 [ 166.842215][T10062] __nla_validate_parse: 1 callbacks suppressed [ 166.842224][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1049'. [ 166.851040][ C0] ? netif_carrier_off+0xa8/0xc0 [ 166.853061][ C0] unregister_netdevice_queue+0x30b/0x3c0 [ 166.855010][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 166.856999][ C0] ? linkwatch_schedule_work+0x16f/0x1a0 [ 166.858770][ C0] ? linkwatch_fire_event+0x74/0x270 [ 166.860526][ C0] __tun_detach+0x1173/0x1480 [ 166.862120][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 166.863783][ C0] ? __pfx_tun_chr_fasync+0x10/0x10 [ 166.865433][ C0] tun_chr_close+0xc2/0x220 [ 166.866928][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 166.868715][ C0] __fput+0x3ff/0xb50 [ 166.870094][ C0] task_work_run+0x150/0x240 [ 166.871596][ C0] ? __pfx_task_work_run+0x10/0x10 [ 166.873380][ C0] exit_to_user_mode_loop+0x1d8/0x700 [ 166.875459][ C0] ? rcu_is_watching+0x13/0xc0 [ 166.877180][ C0] do_syscall_64+0x661/0x790 [ 166.878662][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.880630][ C0] RIP: 0033:0x7fd8aeb9e0d9 [ 166.882050][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.888239][ C0] RSP: 002b:00007ffc7361be38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 166.890888][ C0] RAX: 0000000000000000 RBX: 00007ffc7361bf20 RCX: 00007fd8aeb9e0d9 [ 166.893366][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 166.896129][ C0] RBP: 0000000000028a26 R08: 0000000000000001 R09: 0000000000000000 [ 166.898797][ C0] R10: 0000001b32620000 R11: 0000000000000246 R12: 00007ffc7361bf60 [ 166.901493][ C0] R13: 00007fd8aee25fac R14: 0000000000028ae0 R15: 00007fd8aee25fa0 [ 166.903994][ C0] [ 166.905081][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.907420][ C0] CPU: 0 UID: 0 PID: 10037 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(full) [ 166.910298][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.913642][ C0] Call Trace: [ 166.914787][ C0] [ 166.915920][ C0] dump_stack_lvl+0x100/0x190 [ 166.917540][ C0] vpanic+0x553/0x970 [ 166.918809][ C0] ? __pfx_vpanic+0x10/0x10 [ 166.920247][ C0] panic+0xd1/0xe0 [ 166.921433][ C0] ? __pfx_panic+0x10/0x10 [ 166.922846][ C0] check_panic_on_warn.cold+0x19/0x34 [ 166.924543][ C0] ? mce_timer_fn+0x289/0x2e0 [ 166.926044][ C0] __warn.cold+0x191/0x318 [ 166.927735][ C0] __report_bug+0x30f/0x440 [ 166.929199][ C0] ? mce_timer_fn+0x289/0x2e0 [ 166.930845][ C0] ? __pfx___report_bug+0x10/0x10 [ 166.932452][ C0] ? mark_lock+0x69a/0x1020 [ 166.933901][ C0] ? look_up_lock_class+0x64/0x120 [ 166.935537][ C0] ? mce_timer_fn+0x289/0x2e0 [ 166.937091][ C0] report_bug+0xb3/0x220 [ 166.938636][ C0] ? mce_timer_fn+0x289/0x2e0 [ 166.940168][ C0] handle_bug+0x16a/0x2a0 [ 166.941645][ C0] exc_invalid_op+0x17/0x50 [ 166.943333][ C0] asm_exc_invalid_op+0x1a/0x20 [ 166.945135][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 166.946990][ C0] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 0b c9 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 58 ce 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 60 cd bf 8e e8 70 df 85 [ 166.953931][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 166.956253][ C0] RAX: 0000000000000000 RBX: ffff88806a423440 RCX: 0000000000000101 [ 166.958942][ C0] RDX: ffff88802b39cb00 RSI: ffffffff81b1d018 RDI: ffffffff8e670920 [ 166.961459][ C0] RBP: ffff88806a523440 R08: 0000000000000001 R09: 0000000000000000 [ 166.963930][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 166.966463][ C0] R13: 0000000000000101 R14: 1ffff92000000f8d R15: ffffffff81b1cd90 [ 166.968940][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 166.970536][ C0] ? mce_timer_fn+0x288/0x2e0 [ 166.972036][ C0] call_timer_fn+0x198/0x5f0 [ 166.973501][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 166.975133][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 166.976757][ C0] ? mark_held_locks+0x40/0x70 [ 166.978273][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 166.979880][ C0] __run_timers+0x757/0xb00 [ 166.981330][ C0] ? __pfx___run_timers+0x10/0x10 [ 166.982918][ C0] ? clockevents_program_event+0x1bf/0x820 [ 166.984766][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 166.986370][ C0] run_timer_base+0x114/0x190 [ 166.987881][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 166.989524][ C0] run_timer_softirq+0x10/0x50 [ 166.991048][ C0] handle_softirqs+0x1e6/0x9d0 [ 166.992578][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 166.994246][ C0] ? _raw_spin_unlock+0x28/0x50 [ 166.995805][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 166.997599][ C0] __irq_exit_rcu+0x194/0x210 [ 166.999095][ C0] irq_exit_rcu+0x9/0x30 [ 167.000450][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 167.002240][ C0] [ 167.003187][ C0] [ 167.004153][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.006052][ C0] RIP: 0010:preempt_schedule_irq+0x49/0x90 [ 167.007951][ C0] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 42 c1 15 f6 e8 ad e8 52 f6 fb bf 01 00 00 00 b2 91 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 30 61 15 [ 167.013915][ C0] RSP: 0018:ffffc900044ef968 EFLAGS: 00000202 [ 167.015831][ C0] RAX: 0000000000001325 RBX: ffffed1005673960 RCX: 0000000000000040 [ 167.018336][ C0] RDX: 0000000000000001 RSI: ffffffff8e3a92ac RDI: 0000000000000001 [ 167.021235][ C0] RBP: ffff88802b39cb00 R08: 0000000000000001 R09: 0000000000000000 [ 167.024306][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 167.027373][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.030431][ C0] ? preempt_schedule_irq+0x43/0x90 [ 167.032471][ C0] irqentry_exit+0x205/0xa10 [ 167.034284][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 167.036413][ C0] RIP: 0010:lockdep_unregister_key+0x197/0x2b0 [ 167.038587][ C0] Code: 48 c7 c7 4c f3 49 8e e8 17 3f d9 09 65 ff 0d 38 6c 9f 12 9c 58 f6 c4 02 0f 85 9f 00 00 00 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 51 5b 5d 41 5c 41 5d e9 1c c8 09 00 9c 58 f6 c4 02 0f 84 ad fe [ 167.045041][ C0] RSP: 0018:ffffc900044efa78 EFLAGS: 00000202 [ 167.047263][ C0] RAX: 0000000000000046 RBX: 0000000000000001 RCX: 0000000000000001 [ 167.050129][ C0] RDX: 0000000000000000 RSI: ffffffff8e49f34c RDI: ffffffff8c602380 [ 167.052918][ C0] RBP: ffffffff98077eb8 R08: 0000000000008e87 R09: ffffffff96a39b6e [ 167.055798][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 167.058874][ C0] R13: ffff88802b39cb00 R14: ffff88803989c568 R15: 0000000000000001 [ 167.061903][ C0] __qdisc_destroy+0x172/0x530 [ 167.063787][ C0] qdisc_put+0xb0/0xf0 [ 167.065384][ C0] dev_shutdown+0x1d2/0x440 [ 167.067160][ C0] unregister_netdevice_many_notify+0xd55/0x2150 [ 167.069586][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 167.072156][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.074121][ C0] ? linkwatch_fire_event+0x211/0x270 [ 167.076098][ C0] ? netif_carrier_off+0xa8/0xc0 [ 167.077923][ C0] unregister_netdevice_queue+0x30b/0x3c0 [ 167.080115][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 167.082320][ C0] ? linkwatch_schedule_work+0x16f/0x1a0 [ 167.084344][ C0] ? linkwatch_fire_event+0x74/0x270 [ 167.086217][ C0] __tun_detach+0x1173/0x1480 [ 167.087813][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 167.089482][ C0] ? __pfx_tun_chr_fasync+0x10/0x10 [ 167.091123][ C0] tun_chr_close+0xc2/0x220 [ 167.092579][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 167.094206][ C0] __fput+0x3ff/0xb50 [ 167.095513][ C0] task_work_run+0x150/0x240 [ 167.096997][ C0] ? __pfx_task_work_run+0x10/0x10 [ 167.098616][ C0] exit_to_user_mode_loop+0x1d8/0x700 [ 167.100317][ C0] ? rcu_is_watching+0x13/0xc0 [ 167.101829][ C0] do_syscall_64+0x661/0x790 [ 167.103298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.105170][ C0] RIP: 0033:0x7fd8aeb9e0d9 [ 167.106618][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.112607][ C0] RSP: 002b:00007ffc7361be38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 167.115209][ C0] RAX: 0000000000000000 RBX: 00007ffc7361bf20 RCX: 00007fd8aeb9e0d9 [ 167.117693][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 167.120156][ C0] RBP: 0000000000028a26 R08: 0000000000000001 R09: 0000000000000000 [ 167.122611][ C0] R10: 0000001b32620000 R11: 0000000000000246 R12: 00007ffc7361bf60 [ 167.125092][ C0] R13: 00007fd8aee25fac R14: 0000000000028ae0 R15: 00007fd8aee25fa0 [ 167.127590][ C0] [ 167.129509][ C0] Kernel Offset: disabled [ 167.131243][ C0] Rebooting in 86400 seconds..