last executing test programs: 2m14.810344207s ago: executing program 3 (id=46): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x400d0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8005, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x8000000000001, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x6], 0xeeee8000, 0x2810c7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x55b283, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x4, &(0x7f0000000100)={0x25, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718d000c021b22b650"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x400d0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8005, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x8000000000001, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x6], 0xeeee8000, 0x2810c7}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x55b283, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x4, &(0x7f0000000100)={0x25, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718d000c021b22b650"}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 2m14.679416979s ago: executing program 3 (id=49): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r1, 0x80081270, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000550001002abd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00020300ff02000000000000000000000000000186dd0000"], 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000000c0)=""/139, 0x8b, 0x40, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x3, @loopback, 0x6}}}, 0x80) 2m14.678289536s ago: executing program 3 (id=50): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x12, &(0x7f0000000340)='debug') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x860200, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@dfltgid}]}}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="660f01760b0f20c035000001000f22c00f20e035000002000f22e00f01cb0f23a2640f0f88ea7c000094b94d0900000f320f3236f60ab766baf80cb87c636e81ef66bafc0cec", 0x46}], 0x1, 0x43, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) ioctl$SG_BLKSECTGET(r6, 0x1267, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m14.46245971s ago: executing program 3 (id=55): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) socket$unix(0x1, 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x50141, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e23, @loopback}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='syzkaller1\x00', 0x100000001, 0x7f, 0x3ff}) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0xca, 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mmap(&(0x7f0000890000/0x4000)=nil, 0x4000, 0x3000003, 0x4010, r6, 0xaeb36000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000003c0)='B', 0x1, 0x4054, 0x0, 0x0) 2m14.090440233s ago: executing program 3 (id=62): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r1], 0x1000000000000002, 0x1, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b000040000000800000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f00000000c0)=""/203, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000002880), 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x9, 0x1, 0x2, 0xe, 0x3, 0x81}, &(0x7f0000000200)=0x20) 2m13.831818467s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca", 0x21}], 0x1}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001fb8cad3a0000000000000000"], 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000002702000214000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendto$packet(r0, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) write(r2, &(0x7f0000000580)="a0308d76d0f7a3c884b31f069633e289079fc4f6fa1a9668d73eda7759fb5ee4d65caebe50deaca0283b418c916b997d9b5423366293f105fc4a5baf99156de080be54f98231c5d6b21b7861e175964d79a4bb6a3ca7", 0x56) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 2m13.827776392s ago: executing program 32 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca", 0x21}], 0x1}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001fb8cad3a0000000000000000"], 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000002702000214000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendto$packet(r0, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) write(r2, &(0x7f0000000580)="a0308d76d0f7a3c884b31f069633e289079fc4f6fa1a9668d73eda7759fb5ee4d65caebe50deaca0283b418c916b997d9b5423366293f105fc4a5baf99156de080be54f98231c5d6b21b7861e175964d79a4bb6a3ca7", 0x56) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 1m17.25075002s ago: executing program 1 (id=532): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x121021) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000300)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xce0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000240)="44001d00", 0x4, 0x2004c015, 0x0, 0x0) (async) sendto$inet(r6, &(0x7f0000000240)="44001d00", 0x4, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d88c26f7061a74df2cfc06c89f3d9e234b30c50997d3bed909ff21764bd3ff015748e52678f19e6aa54cc50a00000000831fa79c00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) 1m17.079747624s ago: executing program 1 (id=533): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="080088a200040600000e8100400088"], 0x4a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000640)='.\x00', 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) copy_file_range(r6, 0x0, r6, &(0x7f0000000500)=0xffff, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMK={0x14, 0xfe, "5aeeb305d21104444e1d42402cbae99d"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000910}, 0x8090) 1m17.005283271s ago: executing program 1 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x402) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) 1m16.991477828s ago: executing program 1 (id=536): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40800) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa0109058303"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0xd5ff) 1m15.750921364s ago: executing program 1 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/1000, 0xfdef) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0xfffffff3, 0x4) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="582a07f9aaaaaaaaaa10"], 0xa) mlock2(&(0x7f0000512000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000000)) 1m15.612235964s ago: executing program 1 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="66b886000f00d00f35823c6200b9790200000f32b9800000c00f3235010000000f300f01d1b8010000000f01c1b8010000000f01d9dbf70f79e6", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 22) 1m9.2122659s ago: executing program 0 (id=631): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x4002}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000340)={@dev, @broadcast, 0x0}, &(0x7f0000000380)=0xc) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000009}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xc814}, 0x20000010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4334}, @call={0x85, 0x0, 0x0, 0x4b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 1m9.112002189s ago: executing program 0 (id=633): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1, 0x7, 0x72b) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r0, 0x80207509, &(0x7f0000000200)={0x0, 0xffff, 0x70, &(0x7f0000000040)={0x70}}) getpgrp(0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x180, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x400c000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="04", @ANYRESDEC=r8, @ANYRESOCT=r8], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) 1m8.942092437s ago: executing program 0 (id=636): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0xfffffffffffffdb2) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r1, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x600381, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9", 0x5b}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, 0x0, 0x4000) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_io_uring_setup(0x1fc7, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0xfffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000400000007000000000000003871cb676dd24cec7cc913729a8217351accf134704f155103", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, 0x0, 0x0, 0x4}, 0x20) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@llc={0x1a, 0x200, 0x0, 0x5, 0x1, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24", 0x31}], 0x1}, 0x8001) 1m8.769457125s ago: executing program 0 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x238) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/test_subsys/namespaces/1/ana_grpid\x00', 0x2, 0x0) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000002c0)="82a0f71bd0bd9e1864c98eaa32cad674cabce8142579d178ca63936d5d0b727ecbea2f2c66bffe448570b5e0817a3065cc8adcf505df6200a4693bd363560c3994141c1065e2789a28b5b851e04e8c579d8cdf908a996d889f41", 0x5a}, {&(0x7f0000000340)="a2af5145ce6932fe820695227f78932e7621a7f04bfd04b3c6bec47332ad1fec3afe8b5a13646e521cb03bf4807566a223042a275870a4bb454c35a2eebdec1523abaa75fa0a2d064c67e8249ac544e61d6a8284932607a1e4e75a80ada675d4cc51de49c4cfb65bc41c0b4298d47aae92df15bede70af6b020f73558cd66bb07d292f7feedb9fc0650c0c01797b168befbde5d718d0e1ed9e398a91e236aa25c36a4beba9691b4b6d807a4ba6bd621b5c85d76b3a42242553597a0867bb", 0xbe}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) getdents64(r2, 0x0, 0x4f) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x401, 0x0, r4}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x39d51, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x48800) 1m8.652940273s ago: executing program 0 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='10', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00001b00f8000000b702000014000000b703000000000000850000008b000000bf0900000000000055090100000000009500000000200000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4004550c, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r10, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x8800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1m6.943111522s ago: executing program 0 (id=650): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)={0x2, 0x0, @b}, 0x48, r1) keyctl$link(0x8, r3, r0) keyctl$search(0xa, r1, &(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, r1) 1m6.917322291s ago: executing program 33 (id=650): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)={0x2, 0x0, @b}, 0x48, r1) keyctl$link(0x8, r3, r0) keyctl$search(0xa, r1, &(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, r1) 59.69023643s ago: executing program 34 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="66b886000f00d00f35823c6200b9790200000f32b9800000c00f3235010000000f300f01d1b8010000000f01c1b8010000000f01d9dbf70f79e6", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 22) 6.008937371s ago: executing program 6 (id=1188): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) madvise(&(0x7f0000178000/0x1000)=nil, 0x1000, 0x11) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') getdents64(r2, &(0x7f0000000240)=""/44, 0x7a) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x140000, 0x0, 0xffffffffffffffff}) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x10, 0x800, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast2, @multicast2}}}}) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000280)={0x1, 0x20, &(0x7f0000000180)="ef53f779b84a7148a03d5a872a1b99a5443a617fffd3c41dffba1adc17ba1143a2fc98d38641bd88efc755ca54f3d8744dfbccd8ce3059db5b12256998955751b4fc9796f95b9d41a2f543fee92ed65e72ccbf460d86f8aefb7a94f661a8a7846f65f52c2e1a5721c46380805503c7e2762fee57126634b28002db10a86b6c58947860dcf892c5e65c67dd690071aa03b858c95abacf2dcff6cca61bcc2c7e16aa5341afd4fa819698fc3007c7b7ffcfee22e08215a51255855dc934518a", {0x2, 0xfffff760, 0x30324c4a, 0x8, 0x12000, 0x7, 0x1, 0x2ee}}) 5.879903626s ago: executing program 6 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000440)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x23b, 0x9}}, @code={0xa, 0x6e, {"66b839010f00d866baf80cb8dd3e7681ef66bafc0cb000eec4e3315da7bd000000930fc6cccbb9800000c00f3235008000000f30b902000040b8dbb20000ba000000000f300f09263e0f01d10f019cfd08000000400fc7b4e500a00000"}}, @out_dx={0x6a, 0x28, {0x9105, 0x3, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x25}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0xd}, @in_dx={0x69, 0x20, {0x7669}}, @code={0xa, 0x7d, {"48b869370000000000000f23d00f21f8351000000d0f23f8c7442400cf000000c74424025f617871ff2c2441ab420f019a01000000c744240005000000c74424020f4d4a5fc7442406000000000f011c24b99a0900000f320fc78c908a00000043f42e430f2240410f017e05"}}, @out_dx={0x6a, 0x28, {0x811, 0x1, 0x1}}, @rdmsr={0x66, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x52, 0xc2, 0x1, 0x8000000000000000}}, @out_dx={0x6a, 0x28, {0x3581, 0x2, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x81c9}}, @in_dx={0x69, 0x20, {0x7765}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x8}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x8b59}}, @wrmsr={0x65, 0x20, {0x365, 0x200}}, @wr_drn={0x68, 0x20, {0x6, 0x9}}, @in_dx={0x69, 0x20, {0x1a58}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6812, 0x2, 0x5100, 0x8000}}, @cpuid={0x64, 0x18, {0xffffffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x77c, 0x1000, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5d8, 0x5, 0x3, 0xb}}, @nested_load_code={0x12e, 0x4c, {0x3, "450f00d0451d000000002e65440f21a266b89e000f00d80f0666b8f6008ee042deed676626650f22130fef82dbd70000660f601f"}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0xfd6f}}, @uexit={0x0, 0x18, 0x5}], 0x4b7}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f00000006c0)={0xa3, 0x0, &(0x7f0000000680)}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) 5.809331023s ago: executing program 6 (id=1200): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000500)={'some', 0x20, 0x0, 0x20, 0x5}, 0x2f) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) (async) listen(r3, 0xc) (async) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x20048010) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = getpid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r5, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x7, 0x0, r6}}, 0x40) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000188a83000810040000800458600280064000004069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100040e814ad26"], 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000180)) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r9, 0x8004b707, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.879993756s ago: executing program 5 (id=1228): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000007bd100611194000000000018000094c6e156a3fed8f4000000000095000000000000004fd3aa9b50f3daaf9708c25454b95dd1ce5e2c2a13b8e934ef2cf552062aa279797fcd660ed1c3fcc729034bb0971a532e7362165b8c6b6d0b4661151ae7657aa8895de00cb5d8242ee03b8e9646526f76c31fe76ece6e6c43d6e3d774360dfd441bf391a2798229a084f3056809ccbcf7f2a3c909012352eae3a3de5db918fc85758892295e5c4eb7b8521a"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.876848037s ago: executing program 6 (id=1229): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @const={0xf, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/203, 0x4b, 0xcb, 0x0, 0x8b5}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x3b, 0x719d}, {0xfff8, 0x6, 0x7, 0x2}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000180), &(0x7f0000000000)=@udp6, 0x1}, 0x20) 2.869427715s ago: executing program 5 (id=1232): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x100400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000013f6c0)={0x1, &(0x7f000013f500)=[{0x4000000, 0xffffffffffffff82, 0x0, 0x6, 0xfffffff8}]}) 2.793806479s ago: executing program 5 (id=1234): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) bind$x25(r1, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c79"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close_range(r5, 0xffffffffffffffff, 0x0) 2.793438729s ago: executing program 6 (id=1235): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.470300369s ago: executing program 6 (id=1239): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000001"], 0x6) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000004c0)={0x0, "09e6498cd7b70000b56a00000000000100000000f3ffffffffffffff0500"}) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x2, {0xd3, 0x7}}, 0x5) 2.230637763s ago: executing program 4 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x538c4cbc}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x2}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r3, &(0x7f0000000500)=ANY=[], 0x20) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000280)="ab2fa7bb26508fcc5256718455f11ed662d3b5c88a46c4e6d9671393404c0fa2dcdda6a4301a551e8c496777ec76f4ef7fc46846b038407415de567f275bcd212d0283945d490de08dcc913c2f698632ae03c664d306f2d26c27311f0097f38c15c91e3a174f10f69807e398100955f4bcf86d77cb89d42728f281e8f403ea073c908f455f67a5ead90c5921c6650c5644e5dcece8cf16716d098f5a41d7019ccb30adeac956d852211f073e134d67b40044c9bec5e2676b17c46cd69978a27fd3d2aee738267b0666a2a25ed3aac0ac82fc31478855967d2c43ea5cbbfb61db812b0b", &(0x7f0000000380)=""/66}, 0x20) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) 1.990500016s ago: executing program 4 (id=1244): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x6}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x3, 0x0, 0x1014}, 0x30, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) landlock_restrict_self(r1, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 1.985788511s ago: executing program 4 (id=1246): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000400000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000067fcffffff00000000"]}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="100700000005010400000000000000000a0000035402010002000000070000000387330a00800a0073797a31000000000000000000000000000000000000000000000000000000001a96ad0675b576e4f7046316bf7e74e5b41b91490a6b7667a252c481e59da39b6c7e849a70983507ac3fcd65f95eb872a06ff5d506d670a61ca59e2f90d6b52a0900090003000000018000000400e4000100000005000000001057000200000000000000000040000300000000000000ff0308000300000008000000070000080300000003000000ce000e0001000000080000008000da000300000007000000e100060003000000020000000070ff07020000007d0000000700060003000000c20600000000050002000000090000000300e50203000000ffffffff02000900020000000a00000006000100030000004f0000000600070000000000ff0100003f020e000300000001000000008007000100000004000000070000000300000009000000750f0010010000000100000004000700010000000d8e467c000108000200000000000000ff7f070000000000040000000600010103000000080000009e015800000000007a0000000f00050002000000020000000080490902000000b31a00000900018003000000dd000000020004000200000004000000500dfaff03000000ff01000080008d0400000000e90100007f00030000000000fa0000004200edd4030000001d020000e703000001000000ff070000020004000100000006000000030006000100000002000000e602050000000000040000000800ef0002000000000000000100000200000000020000005f00070002000000040000005402010001000000ff0f00003a46000005000a0073797a30000000000000000000000000000000000000000000000000000000008d23040e64139561b7ce63b6b66ea1a48e9075d0660bf726ecade24c7b0e691373afa6b8f3a0b54cd0d040c35766342f50ba05dc62a45c6eea5859a1eedc0ce3c86d010001000000ef00000002000c"], 0x710}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x55) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)) r5 = fcntl$dupfd(r2, 0x0, r2) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000140)=0x7, 0x4) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x3000007, 0x810, r5, 0x83000000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_proto_private(r6, 0x89e5, &(0x7f0000000100)="bae6e264ede95f7494aa359954b4845fcdccaa23b14030f4ffd8c22c25c4438a0e0d3afd510462183e5615d2a92d4e9181f2a89705301ebeb900dce8d5d464b78b5ab85fc68efcdf6981602c75261aa069ae66b0a93cc136e98c282831fcaed52c604ea033c9ec58b8c68899348e30eff129647d618c8964f17a2003ae62e690b0f557cd7e7ff1b34b2525203bac2463c50bad26277bb8af773cf4ea391b476100d1371e30c877c37ed696755be1c695f13e8c1c3f") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0a00000000000061117000000000001800000000000000000000000000557eec03f2efbc6132cbffea05501d00009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) getpeername$tipc(r7, 0x0, &(0x7f0000000300)) 1.925778891s ago: executing program 4 (id=1249): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00800000084400001c00124bb14c10d314cfd6739b800b00010067656e65766500000c00028005000a0001000004"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) 1.920171688s ago: executing program 4 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000040000300012800b00010067656e657665000020000280060005004e23000004000600050003000b00000005000a00"], 0x50}}, 0x40800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@bridge_delneigh={0x6c, 0x1d, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x20, 0x40, 0x6}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @NDA_PROTOCOL={0x5, 0xc, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0xca}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x6c}, 0x1, 0x2000000000000000}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r0, &(0x7f0000001d40)=[{&(0x7f00000001c0)="b095681c1caa318daed35c4106b55e91026cd2f0d7abf293a43264fc8924e042e8e7e2e1b9715adfa5c8c38f5045fe40b87a8bf2760f948c0c9d894bb7201ebecbc519362c32f895cbb10369af1adacc580b69776de3a039890b64c63a6f6d2b585d80cab677ad8ea25aa49016ca3d5cfdd0fc14fcd5621a5851d9d5192ccbee615ba4522470c2f5f5e34558d9d889e3ab717be45d511fff6ae0dea2ad105af97796584134cf09597408299c18323fdaa3d12bfd74d2631d83f41f27494311a26fe103a3f93c2cc5d4ef1972bbe10259f448", 0xd2}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="7e9e7d1bab68ad764a4e1aabc61350154fdf83088eed6673e55680ba99b594320d7f7b9aaf076e0edafc46edfb845960c07a5cc46b9daaa401c41e8a2e58ad10970d853dda3b044e88489f670b86b249e629a857fd68b8fb4c4bf24e569a5fb3793c2b14999abf02bdf26568aa8dc84dee117356ab79afc43e35e217f44e4c640d5a90c1cf6959653f966d7e7b5a192ee0213010cadab8d314654bda660edcf9e0b40fbcfbdbe175bc8e7ed2a39e1988d5cf50e76970ccc7", 0xb8}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="2cc30c4ffc4a82dc4ddf265917a7c31a7741c1421c2b9d23962fb14ced4a8fc1a313df0a8287c2b6986888b83ce165579da9e7abd5a602a0aa3fe8311e5ac42979572adc473337fecea03db875465434d0ee344008f2bd524f408d3143e48a35a07d7df7ea2264afb829c19ae26bd0ccf5deb3071d4f25497ebae603f793df74da02a1274324afeca2fa", 0x8a}, {&(0x7f0000000380)="7d6ee9dc028ea9439bd077c0cd2eb8a9aca6b6d1de3a7e293e05b47575b4a184dd8af40586cb0e7f8fe343bd1d8a5e7ca4f42ef867ee958f07d598c4c6f9f9ca4b75e3254ec37b971a7fb0a12191de7ce3a508906ecc0149d640f61fe88eac305cf2cd224ca941c4930cb7dd2ed284fe985967de9089e3fd4d80467bf5757400d7b45aa15447578a24e401", 0x8b}], 0x6) (async) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="201721f62c67687cf0358f2a1c6a62c70557f08432900f2d5b27", 0x1a}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='0x09E7R', 0x7) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x48041}, 0x40) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x8}) (async) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="40000000010101030000000000000000030000071c00108008000240fffeffff08000240000000010800024034daa4ed080003400000000008001a4000000006bfa02bbaf52f672c97949fbc2701e1b3d1f0eb027e651ca9055d67241b21251e6bb078f8d4cf377741a490c9ef558a067a81c7b7ba5f5529c3aa7253267f458ad84d870ed5c02966476a6cd4203c36"], 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x2001) openat(0xffffffffffffffff, &(0x7f0000000480)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x101002, 0x10b) (async) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) (async) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) syz_open_dev$loop(&(0x7f0000000940), 0x8, 0x0) (async) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x3fa, 0x800, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8, @ANYRES32=r7], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.8490349s ago: executing program 2 (id=1251): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234560800000078", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x5}]}, 0x1c}}, 0x0) 1.848805152s ago: executing program 2 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000040)=@physical={0x0, 0x3, [{0x6, 0x8, 0x1, 0x2, 0x3, 0x1, 0x1, 0xf, 0x8, 0x1, 0x4, 0x6, 0x9}, {0x2, 0xe, 0x9, 0x4, 0x2, 0x0, 0x3, 0xd, 0x1, 0x1, 0x8000, 0x9, 0xfff}, {0x4, 0x0, 0x4, 0x3, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x9, 0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0xa8d2, 0x3}]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000008c0)={{0x0, 0x4, 0x8000, 0xffffffffffffffa0, 0x3, 0x3436, 0x0, 0x10, 0x9, 0x6, 0x564, 0x1e, 0x5, 0x9, 0x90b}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000018c0)={{r2, 0x3, 0x0, 0x3, 0x5, 0x7, 0xfffffffffffffffb, 0x8001, 0xa24b, 0x3, 0x67, 0x1, 0x5, 0x7, 0x4}}) write(r0, &(0x7f0000000300)='vfio-pci', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0000:00:00.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000700001214000780080000124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970003db8649c67"], 0x60}}, 0x20004000) pipe2$watch_queue(&(0x7f0000000880), 0x80) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = dup(r7) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) ioctl(r9, 0x3b76, 0x0) 1.780496643s ago: executing program 4 (id=1253): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000001c0)={0x8, 'dvmrp1\x00', {'nicvf0\x00'}, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$CDROMCLOSETRAY(r2, 0x5319) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000001340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x1, 0x28, 0x65, 0x0, 0x2, 0x2, 0x0, @local, @local}, {0x12, 0x3, 0x0, @loopback, "6ff418b0b90abfca4d5253b5"}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10101, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty, 0x10000}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r6, 0x4}}, 0x5d) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r6, 0x2}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xa, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x800}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x100) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000090}, 0x1) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.232734274s ago: executing program 5 (id=1254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x4824b3966aa41fd4, 0xe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x85e}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xbc69, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0xcc, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xf3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xff, 0x6}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 1.120700089s ago: executing program 2 (id=1255): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f0000000440)="8f", 0x1}], 0x1, 0x6) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000140)={0x2, [0x7fff, 0x0, 0xb6d, 0x9, 0x81, 0x8, 0xc7, 0x7ff, 0x800, 0x5, 0xe4d4, 0x3, 0x8, 0xfff6, 0x2, 0x1, 0xa, 0x0, 0x8, 0x7, 0x9, 0x8, 0xfffb, 0x83, 0xfffe, 0x5, 0x5, 0x9, 0x2, 0xc, 0x4, 0x5, 0x8, 0x5, 0x1, 0x6, 0x8, 0x308, 0x6, 0xb, 0x8001, 0xfff, 0x800, 0x8, 0x0, 0xff27, 0x7a8, 0x8], 0x7}) (async) r6 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x8, 0x6, 0x768, 0x578, 0xf8, 0xf8, 0x578, 0x460, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x80}, @loopback, [], [0x0, 0x0, 0xff000000], 'veth1_to_batadv\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x138, 0x160, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x14}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3}, @private2, @empty, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'netbios-ns\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6c081, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) recvmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0x400000cb, 0x0) (async) r10 = fsmount(r2, 0x0, 0x0) openat$cgroup_ro(r10, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.118235952s ago: executing program 2 (id=1256): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f00000001c0)="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") r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000002140)=0x20) ppoll(&(0x7f00000003c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x94) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1, 0x4, 0x5) keyctl$unlink(0x9, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106442, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x0, @private}}) socket$inet_mptcp(0x2, 0x1, 0x106) 190.866761ms ago: executing program 2 (id=1257): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}], r7}, 0x18, 0x1) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) r11 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='\xe0^@&&}\'\x00', 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r9], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) dup(r0) r12 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0xa8143, 0x0) ioctl$TCSETSF2(r12, 0x402c542d, &(0x7f0000000100)={0x4ae, 0x1, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) write$P9_RSTAT(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="ee0000007d0100003d3b0004007b000000020300000006000000000000000000000103000000092000000700000000000000b2008351ba130bb7eb166d8f94e02eff2ae8d31393a097f6674659975b50d0f9b487a762411477ab493e8cf45bac39fa3cbc1941238372313b3a079d4e78254c31af92dabb362ad8934068eaeeace5334323ac8e077a762f46f241c20200000000000000e6e5ec668661eabdbc7ed04f73d9e3c49486c0daafb052890b1a0afaa6573c6381c6cf79b1c2f3ccdb2a0d9663560a4cd3430612076310d314d238a703cc2449b42cdaff6288abc71eced060948fe62901002a010000"], 0xee) 119.815067ms ago: executing program 2 (id=1258): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='1', 0x1) writev(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './my_sys/bus/pci/devices/0000:00:01.0/config\x00'}) write$P9_RREADDIR(r1, &(0x7f0000000140)={0x3, 0x29, 0x2, {0x23}}, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='1', 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) accept(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x0) ftruncate(r5, 0xffff) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x88be, 0x8}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 462.233µs ago: executing program 5 (id=1259): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000000)={0x4, "e11e823db3b18c22d30a4cce68707f1bda7a4dc3da8468c5944068f123f26272e38c80888d106233bffcda4548b082a485ed298f393c1a5ae1e5b18db14bd3b3", {0x5, 0x7}}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000003c0)) 0s ago: executing program 5 (id=1260): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x5, 0xf3100000) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r8], 0x1, r6, r7, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) write$tun(r1, &(0x7f0000000300)={@void, @val={0x0, 0x3, 0x9, 0x40, 0x32dc, 0x203}, @x25={0x0, 0x0, 0x1}}, 0xa) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000280)=0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_mcast\x00') landlock_create_ruleset(&(0x7f0000000240)={0x1ffb}, 0x30, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x2}) landlock_restrict_self(r9, 0x5) write(r10, &(0x7f0000000140)="02341414e1809247f4dbe5e60ae907be970bfa837a257ebe00664d4b85c65aaa0df0dd7fde49b799ad4ba7463ba27ef0fd9bc816b7bf366ee2ef54c20e53540a7934132b481af81dc9550e048817aed246f41de4ef67e8396a9d7f2cf5b868c3288baded001f7ea3a3ee28e4df383fe04e1fa93f626b2357281e5d1ab4a306890c9c7e551316edd09d72c2874d769a111bf4223a469bb83a", 0x98) symlinkat(&(0x7f0000000100)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0xfc, 0x91, 0x2, 0xff, 0x0, 0x38, 0x3, 0x40, 0x0, 0x4, 0x1, 0x9, 0x6, 0xb}, 0xe) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): size=2048kB [ 112.736122][ T8110] 95989 total pagecache pages [ 112.737613][ T8110] 1 pages in swap cache [ 112.738922][ T8110] Free swap = 123548kB [ 112.740077][ T8110] Total swap = 124996kB [ 112.741368][ T8110] 1048443 pages RAM [ 112.742573][ T8110] 0 pages HighMem/MovableOnly [ 112.744130][ T8110] 285332 pages reserved [ 112.745447][ T8110] 0 pages cma reserved [ 112.746960][ T8110] ttyUSB ttyUSB0: ldisc open failed (-12), clearing slot 0 [ 112.751424][ T5817] usb 7-1: USB disconnect, device number 12 [ 112.758226][ T5817] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 112.761860][ T5817] metro_usb 7-1:100.173: device disconnected [ 112.909026][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 112.926805][ T8123] Bluetooth: hci0: unsupported parameter 255 [ 112.929344][ T8123] Bluetooth: hci0: unsupported parameter 255 [ 112.932911][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.937716][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.942692][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.950483][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.977037][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 112.977110][ T42] audit: type=1400 audit(1786095025.337:923): avc: denied { getopt } for pid=8126 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.064033][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.554'. [ 113.098936][ T8131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8131 comm=syz.0.554 [ 113.109802][ T8131] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 113.114266][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 113.118033][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.554'. [ 113.122169][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.554'. [ 113.358666][ T8135] rdma_rxe: rxe_newlink: failed to add lo [ 113.362149][ T8135] netlink: 216 bytes leftover after parsing attributes in process `syz.2.556'. [ 113.447672][ T8139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.557'. [ 113.499067][ T42] audit: type=1400 audit(1786095281.857:924): avc: denied { map } for pid=8141 comm="syz.0.558" path="socket:[22187]" dev="sockfs" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.507929][ T42] audit: type=1400 audit(1786095281.857:925): avc: denied { read } for pid=8141 comm="syz.0.558" path="socket:[22187]" dev="sockfs" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.522778][ T42] audit: type=1400 audit(1786095281.887:926): avc: denied { read write } for pid=8146 comm="syz.2.560" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.532907][ T42] audit: type=1400 audit(1786095281.887:927): avc: denied { open } for pid=8146 comm="syz.2.560" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.539960][ T42] audit: type=1400 audit(1786095281.887:928): avc: denied { ioctl } for pid=8146 comm="syz.2.560" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.548355][ T42] audit: type=1400 audit(1786095281.887:929): avc: denied { read write } for pid=8146 comm="syz.2.560" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.555606][ T42] audit: type=1400 audit(1786095281.887:930): avc: denied { open } for pid=8146 comm="syz.2.560" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.562028][ T8149] binder: 8148:8149 ioctl c0306201 200000000640 returned -22 [ 113.562871][ T42] audit: type=1400 audit(1786095281.917:931): avc: denied { write } for pid=8148 comm="syz.2.561" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.576657][ T8150] netlink: 'syz.2.561': attribute type 21 has an invalid length. [ 113.580126][ T8150] netlink: 152 bytes leftover after parsing attributes in process `syz.2.561'. [ 113.889578][ T8160] xt_hashlimit: size too large, truncated to 1048576 [ 113.941983][ T8163] netlink: 'syz.2.566': attribute type 3 has an invalid length. [ 113.967233][ T8165] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 114.027955][ T42] audit: type=1400 audit(1786095282.377:932): avc: denied { setopt } for pid=8169 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.237147][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 114.630447][ T8179] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 114.638620][ T8179] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 114.641036][ T8179] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 114.643930][ T8179] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 114.647314][ T8179] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 114.650060][ T8179] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 114.665763][ T8179] pci 0000:00:01.0: Adding to iommu group 1 [ 114.671596][ T8179] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 114.673904][ T8179] pci 0000:00:01.0: vgaarb: bridge control possible [ 114.676001][ T8179] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io,locks=none [ 114.685891][ T8179] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 114.688487][ T8179] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 114.691747][ T8179] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 114.699193][ T8179] virtio-pci 0000:00:01.0: enabling device (0001 -> 0003) [ 114.738282][ T1495] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 114.746984][ T1495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.758552][ T1495] usb 9-1: can't set config #100, error -71 [ 114.773368][ T1495] usb 9-1: USB disconnect, device number 5 [ 114.792451][ T8179] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 114.795557][ T8179] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 114.799321][ T8179] [drm] features: -virgl +edid -resource_blob -host_visible [ 114.799334][ T8179] [drm] features: -context_init -blob_alignment [ 114.850355][ T8179] [drm] number of scanouts: 1 [ 114.851944][ T8179] [drm] number of cap sets: 0 [ 114.881479][ T8179] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 114.926904][ T8179] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 115.315666][ T8232] afs: Unknown parameter 'dÜyn' [ 115.557171][ T8236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.739692][ T8271] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 115.750548][ T8271] bond3: option mode: invalid value (12) [ 115.755341][ T8271] bond3 (unregistering): Released all slaves [ 116.799128][ T1305] block nbd0: Possible stuck request ffff88802961e000: control (read@0,4096B). Runtime 30 seconds [ 116.897309][ T8340] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 116.924127][ T8343] loop7: detected capacity change from 0 to 16384 [ 117.043154][ T8350] netlink: 'syz.4.599': attribute type 39 has an invalid length. [ 117.125822][ T8346] loop7: detected capacity change from 16384 to 0 [ 117.127560][ C2] blk_print_req_error: 10 callbacks suppressed [ 117.127575][ C2] I/O error, dev loop7, sector 15360 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 117.420297][ T8369] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 117.424734][ T8369] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.469877][ T8374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.608'. [ 117.640602][ T8382] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 117.862572][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 117.869513][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 117.874396][ T8402] netlink: 'syz.4.615': attribute type 15 has an invalid length. [ 117.876835][ T8402] netlink: 'syz.4.615': attribute type 18 has an invalid length. [ 118.006815][ T8400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.614'. [ 118.016828][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 118.026715][ T8400] vivid-000: ================= START STATUS ================= [ 118.031018][ T8400] vivid-000: Radio HW Seek Mode: Bounded [ 118.035727][ T8400] vivid-000: Radio Programmable HW Seek: false [ 118.039156][ T8400] vivid-000: RDS Rx I/O Mode: Block I/O [ 118.041223][ T8400] vivid-000: Generate RBDS Instead of RDS: false [ 118.043545][ T8400] vivid-000: RDS Reception: true [ 118.046993][ T8400] vivid-000: RDS Program Type: 0 inactive [ 118.048949][ T8400] vivid-000: RDS PS Name: inactive [ 118.051059][ T8400] vivid-000: RDS Radio Text: inactive [ 118.053643][ T8400] vivid-000: RDS Traffic Announcement: false inactive [ 118.056134][ T8400] vivid-000: RDS Traffic Program: false inactive [ 118.060188][ T8400] vivid-000: RDS Music: false inactive [ 118.062220][ T8400] vivid-000: ================== END STATUS ================== [ 118.066869][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 118.066891][ T42] audit: type=1400 audit(1786095286.427:981): avc: denied { connect } for pid=8398 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.121409][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 118.299723][ T42] audit: type=1400 audit(1786095286.657:982): avc: denied { write } for pid=8428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.374087][ T42] audit: type=1400 audit(1786095286.737:983): avc: denied { write } for pid=8431 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.506222][ T42] audit: type=1400 audit(1786095286.867:984): avc: denied { write } for pid=8438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.532564][ T42] audit: type=1400 audit(1786095286.897:985): avc: denied { append } for pid=8443 comm="syz.0.624" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.535894][ T8444] netlink: 'syz.0.624': attribute type 21 has an invalid length. [ 118.581434][ T42] audit: type=1400 audit(1786095286.937:986): avc: denied { write } for pid=8445 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.661521][ T8452] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 118.672121][ T42] audit: type=1400 audit(1786095287.027:987): avc: denied { write } for pid=8451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.687638][ T8452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.731502][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 118.744906][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 118.761897][ T42] audit: type=1400 audit(1786095287.117:988): avc: denied { write } for pid=8462 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.813447][ T8469] use of bytesused == 0 is deprecated and will be removed in the future, [ 118.817724][ T8469] use the actual size instead. [ 118.841837][ T42] audit: type=1400 audit(1786095287.197:989): avc: denied { write } for pid=8468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.900157][ T8476] binder: BINDER_SET_CONTEXT_MGR already set [ 118.908422][ T8477] overlayfs: failed to resolve './file0': -2 [ 118.915519][ T8476] binder: 8473:8476 ioctl 4018620d 200000000100 returned -16 [ 118.926774][ T8475] 9pnet_virtio: no channels available for device syz [ 118.933052][ T42] audit: type=1400 audit(1786095287.297:990): avc: denied { write } for pid=8478 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.988314][ T8481] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 118.995316][ T8481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.632'. [ 118.999297][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 119.274579][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x002e instead [ 119.278416][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0006 instead [ 119.281762][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x7504 instead [ 119.286647][ T8497] jffs2: Empty flash at 0x00000070 ends at 0x00000074 [ 119.288966][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000074: 0xffff instead [ 119.292926][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000078: 0x0500 instead [ 119.297456][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0x2000 instead [ 119.302613][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000140: 0x0500 instead [ 119.306470][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000144: 0x2000 instead [ 119.310369][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000340: 0x0001 instead [ 119.317466][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000348: 0x1000 instead [ 119.324544][ T8497] jffs2: Further such events for this erase block will not be printed [ 119.327610][ T8497] jffs2: Empty flash at 0x00000350 ends at 0x00000354 [ 119.331118][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001444: 0x2000 instead [ 119.336107][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001448: 0x0010 instead [ 119.340455][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001460: 0x0180 instead [ 119.345018][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001464: 0x2000 instead [ 119.349099][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001468: 0x0058 instead [ 119.353551][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d80: 0x002e instead [ 119.356732][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d84: 0x0008 instead [ 119.359779][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d88: 0x7525 instead [ 119.363453][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d9c: 0x0001 instead [ 119.367234][ T8497] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001da0: 0x0103 instead [ 119.370495][ T8497] jffs2: Further such events for this erase block will not be printed [ 119.381916][ T8497] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 119.385572][ T8497] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 119.576133][ T8513] netlink: 'syz.4.643': attribute type 3 has an invalid length. [ 119.579244][ T8513] netlink: 64 bytes leftover after parsing attributes in process `syz.4.643'. [ 119.590174][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 120.222374][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 120.372098][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 120.375369][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 120.383739][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.386817][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.389497][ T34] usb 7-1: Product: syz [ 120.390866][ T34] usb 7-1: Manufacturer: syz [ 120.392589][ T34] usb 7-1: SerialNumber: syz [ 120.399462][ T34] usb 7-1: config 0 descriptor?? [ 120.401655][ T8527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.405342][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 120.407330][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 120.526091][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 120.673703][ T8531] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 120.676184][ T8531] netlink: 232 bytes leftover after parsing attributes in process `syz.4.649'. [ 120.679033][ T8531] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 120.808863][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.812822][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.865264][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.868684][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.000024][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.003463][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.071425][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.075670][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.175103][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.178333][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.267186][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.280353][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.288175][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.294548][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.301562][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.320282][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.326182][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.330765][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.335659][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.338583][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.376340][ T13] bridge_slave_1: left allmulticast mode [ 121.378236][ T13] bridge_slave_1: left promiscuous mode [ 121.380211][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.385281][ T13] bridge_slave_0: left allmulticast mode [ 121.391929][ T13] bridge_slave_0: left promiscuous mode [ 121.393977][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.498067][ T13] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 121.606529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.611173][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.617454][ T13] bond0 (unregistering): Released all slaves [ 121.625532][ T13] bond1 (unregistering): Released all slaves [ 121.634037][ T13] bond2 (unregistering): Released all slaves [ 121.645636][ T13] bond3 (unregistering): Released all slaves [ 121.730768][ T8554] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 121.734417][ T139] raw-gadget.0 gadget.2: failed to queue suspend event [ 121.804363][ T8527] raw-gadget.0 gadget.2: failed to queue resume event [ 121.818420][ T13] tipc: Left network mode [ 121.834637][ T8537] vcan0 speed is unknown, defaulting to 1000 [ 121.839933][ T13] IPVS: stopping backup sync thread 8165 ... [ 121.858471][ T89] raw-gadget.0 gadget.2: failed to queue suspend event [ 121.864762][ T5450] 8021q: adding VLAN 0 to HW filter on device eth1 [ 121.877877][ T8535] raw-gadget.0 gadget.2: failed to queue disconnect event [ 121.893270][ T5846] usb 7-1: USB disconnect, device number 13 [ 122.064028][ T1135] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 122.070593][ T1135] ata1: failed to read log page 10h (errno=-5) [ 122.073254][ T1135] ata1.00: exception Emask 0x1 SAct 0x2 SErr 0x0 action 0x0 [ 122.075598][ T1135] ata1.00: irq_stat 0x40000000 [ 122.077511][ T1135] ata1.00: failed command: WRITE FPDMA QUEUED [ 122.079548][ T1135] ata1.00: cmd 61/58:08:36:31:08/00:00:00:00:00/40 tag 1 ncq dma 45056 out [ 122.079548][ T1135] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 122.085354][ T1135] ata1.00: status: { DRDY } [ 122.088811][ T1135] ata1.00: configured for UDMA/100 [ 122.090773][ T1135] ata1: EH complete [ 122.097354][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 122.123705][ T8535] bond3: ARP target 9.0.0.0 is already present [ 122.125731][ T8535] bond3: option arp_ip_target: invalid value (9) [ 122.128743][ T8535] bond3 (unregistering): Released all slaves [ 122.249680][ T8589] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 122.372657][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.401672][ T13] hsr_slave_0: left promiscuous mode [ 122.406833][ T13] hsr_slave_1: left promiscuous mode [ 122.413389][ T13] veth1_macvtap: left promiscuous mode [ 122.415350][ T13] veth0_macvtap: left promiscuous mode [ 122.417227][ T13] veth0_vlan: left promiscuous mode [ 122.593232][ T13] team0 (unregistering): Port device team_slave_1 removed [ 122.605246][ T13] team0 (unregistering): Port device team_slave_0 removed [ 122.686822][ T139] smc: removing ib device syz1 [ 122.719565][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.727002][ T139] smbdirect: ib_dev[syz1] removed [ 122.730964][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.734943][ T8537] bridge_slave_0: entered allmulticast mode [ 122.738153][ T8537] bridge_slave_0: entered promiscuous mode [ 122.743165][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.745637][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.747787][ T8537] bridge_slave_1: entered allmulticast mode [ 122.751227][ T8537] bridge_slave_1: entered promiscuous mode [ 122.755732][ T1495] vcan0 speed is unknown, defaulting to 1000 [ 122.758199][ T1495] syz1: Port: 1 Link DOWN [ 122.810140][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.823017][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.865026][ T8537] team0: Port device team_slave_0 added [ 122.868477][ T8537] team0: Port device team_slave_1 added [ 123.012092][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.015734][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.034206][ T8537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.038757][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.040994][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.049721][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.132978][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 123.153985][ T8537] hsr_slave_0: entered promiscuous mode [ 123.156513][ T8537] hsr_slave_1: entered promiscuous mode [ 123.158882][ T8537] debugfs: 'hsr0' already exists in 'hsr' [ 123.161007][ T8537] Cannot create hsr debugfs directory [ 123.217372][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 123.217390][ T42] audit: type=1400 audit(1786095291.578:1008): avc: denied { write } for pid=8609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.290021][ T42] audit: type=1400 audit(1786095291.648:1009): avc: denied { write } for pid=8612 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.352603][ T1495] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 123.382028][ T42] audit: type=1400 audit(1786095291.738:1010): avc: denied { write } for pid=8614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.412654][ T8537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.418052][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.421002][ T8537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.426355][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.428812][ T42] audit: type=1400 audit(1786095291.788:1011): avc: denied { write } for pid=8617 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.430860][ T8537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.439759][ T5745] Bluetooth: hci2: command tx timeout [ 123.447924][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.450744][ T8537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.457318][ T8537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.503621][ T42] audit: type=1400 audit(1786095291.858:1012): avc: denied { write } for pid=8625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.504921][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.519085][ T1495] usb 9-1: unable to get BOS descriptor or descriptor too short [ 123.528627][ T1495] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 123.541462][ T1495] usb 9-1: config 100 has no interface number 0 [ 123.542334][ T42] audit: type=1400 audit(1786095291.908:1013): avc: denied { write } for pid=8628 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.550124][ T1495] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 123.555976][ T1495] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 123.563408][ T1495] usb 9-1: config 100 interface 173 has no altsetting 0 [ 123.564797][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.569673][ T1495] usb 9-1: string descriptor 0 read error: -22 [ 123.575233][ T1495] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 123.576224][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.579149][ T1495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.581435][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.596317][ T8607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.601805][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.604923][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.612918][ T1495] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 123.624011][ T1495] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 123.673949][ T42] audit: type=1400 audit(1786095292.038:1014): avc: denied { write } for pid=8631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.723960][ T42] audit: type=1400 audit(1786095292.088:1015): avc: denied { write } for pid=8636 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.792305][ T42] audit: type=1400 audit(1786095292.158:1016): avc: denied { write } for pid=8641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.835047][ T42] audit: type=1400 audit(1786095292.198:1017): avc: denied { write } for pid=8648 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.839528][ T8607] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 123.885491][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.978436][ T1495] usb 9-1: USB disconnect, device number 6 [ 123.996968][ T1495] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 124.002172][ T1495] metro_usb 9-1:100.173: device disconnected [ 124.036701][ T8537] veth0_vlan: entered promiscuous mode [ 124.045141][ T8537] veth1_vlan: entered promiscuous mode [ 124.064514][ T8537] veth0_macvtap: entered promiscuous mode [ 124.068605][ T8537] veth1_macvtap: entered promiscuous mode [ 124.078383][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.084454][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.121706][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.125203][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.139421][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.145243][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.152663][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.159431][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.174541][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.177216][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.245461][ T8674] netlink: 'syz.5.658': attribute type 4 has an invalid length. [ 124.432359][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.434902][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.436654][ T8688] netlink: 'syz.4.663': attribute type 10 has an invalid length. [ 124.508433][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.514041][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.544831][ T8690] netlink: 'syz.4.663': attribute type 10 has an invalid length. [ 124.622432][ T8688] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.651658][ T5816] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.654942][ T5816] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.657976][ T5816] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.661122][ T5816] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.665509][ T5816] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.668568][ T5816] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.672348][ T5816] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.675661][ T5816] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.511767][ T5745] Bluetooth: hci2: command tx timeout [ 125.535948][ T8735] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 125.541907][ T8735] tipc: Started in network mode [ 125.543995][ T8735] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.547019][ T8735] tipc: New replicast peer: 172.20.20.187 [ 125.552277][ T8735] tipc: Enabled bearer , priority 10 [ 125.555387][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 125.558927][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 125.569346][ T8735] vlan0: entered allmulticast mode [ 125.571019][ T8735] veth0_vlan: entered allmulticast mode [ 125.670868][ T8737] syzkaller1: entered promiscuous mode [ 125.674569][ T8737] syzkaller1: entered allmulticast mode [ 125.678110][ T5832] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 125.835155][ T5832] usb 10-1: unable to get BOS descriptor or descriptor too short [ 125.839360][ T5832] usb 10-1: config 100 has an invalid interface number: 173 but max is 0 [ 125.843240][ T5832] usb 10-1: config 100 has no interface number 0 [ 125.845095][ T5832] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 125.848162][ T5832] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 125.852026][ T5832] usb 10-1: config 100 interface 173 has no altsetting 0 [ 125.856512][ T5832] usb 10-1: string descriptor 0 read error: -22 [ 125.858428][ T5832] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 125.861245][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.866580][ T8733] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 125.870542][ T5832] metro_usb 10-1:100.173: Metrologic USB to Serial converter detected [ 125.879545][ T5832] usb 10-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 126.059230][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 126.078741][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.086157][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.101604][ T8733] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 126.119000][ T5832] usb 10-1: USB disconnect, device number 2 [ 126.122144][ T8770] xt_hashlimit: size too large, truncated to 1048576 [ 126.128903][ T5832] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 126.132605][ T5832] metro_usb 10-1:100.173: device disconnected [ 126.182692][ T8772] overlayfs: failed to verify upper root origin [ 126.190511][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'. [ 126.553130][ T5817] tipc: Node number set to 2886997162 [ 126.849385][ T8782] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 127.043309][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.687'. [ 127.052342][ T8785] xfrm1: entered promiscuous mode [ 127.054692][ T8785] xfrm1: entered allmulticast mode [ 127.146590][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.150006][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.164090][ T8788] netlink: 'syz.5.688': attribute type 10 has an invalid length. [ 127.202280][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.209844][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.275388][ T8790] netlink: 'syz.5.688': attribute type 10 has an invalid length. [ 127.288422][ T8788] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 127.294518][ T8790] syz_tun: entered promiscuous mode [ 127.311341][ T5550] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.321360][ T5550] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.324470][ T5550] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.328098][ T5550] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.348791][ T8792] netlink: 'syz.5.689': attribute type 11 has an invalid length. [ 127.591319][ T5745] Bluetooth: hci2: command tx timeout [ 127.601257][ T5817] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 127.761216][ T5817] usb 10-1: Using ep0 maxpacket: 32 [ 127.764605][ T5817] usb 10-1: unable to get BOS descriptor or descriptor too short [ 127.770272][ T5817] usb 10-1: string descriptor 0 read error: -22 [ 127.772677][ T5817] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 127.775550][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 127.783069][ T5817] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 127.785624][ T5817] dw2102: su3000_power_ctrl: 1, initialized 0 [ 127.787870][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 127.794437][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.797937][ T5817] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 127.802725][ T5817] usb 10-1: media controller created [ 127.804611][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 127.806649][ T5817] dw2102: i2c transfer failed. [ 127.808332][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 127.810161][ T5817] dw2102: i2c transfer failed. [ 127.811850][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 127.813626][ T5817] dw2102: i2c transfer failed. [ 127.815975][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 127.817736][ T5817] dw2102: i2c transfer failed. [ 127.819223][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 127.820984][ T5817] dw2102: i2c transfer failed. [ 127.822568][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 127.824291][ T5817] dw2102: i2c transfer failed. [ 127.825795][ T5817] dvb-usb: MAC address: 02:02:02:02:02:02 [ 127.835077][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.849550][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 127.851581][ T5817] dw2102: command 0x0e transfer failed. [ 127.853563][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 127.855355][ T5817] dw2102: command 0x0e transfer failed. [ 128.161192][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 128.163610][ T5817] dw2102: command 0x0e transfer failed. [ 128.165988][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 128.168381][ T5817] dw2102: command 0x0e transfer failed. [ 128.170633][ T5817] dvb-usb: bulk message failed: -22 (1/0) [ 128.176107][ T5817] dw2102: command 0x51 transfer failed. [ 128.179656][ T8792] dvb-usb: bulk message failed: -22 (4/0) [ 128.183142][ T8792] dw2102: i2c transfer failed. [ 128.198191][ T5817] DVB: Unable to find symbol ds3000_attach() [ 128.200576][ T5817] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 128.261234][ T5817] rc_core: IR keymap rc-su3000 not found [ 128.263582][ T5817] Registered IR keymap rc-empty [ 128.268549][ T5817] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 128.275812][ T5817] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input12 [ 128.295071][ T5817] dvb-usb: schedule remote query interval to 150 msecs. [ 128.298019][ T5817] dw2102: su3000_power_ctrl: 0, initialized 1 [ 128.300535][ T5817] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 128.312774][ T5817] usb 10-1: USB disconnect, device number 3 [ 128.354545][ T5817] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 128.511121][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.520059][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.531222][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.537417][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.541759][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.954672][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.956969][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.959180][ T8797] bridge_slave_0: entered allmulticast mode [ 128.962307][ T8797] bridge_slave_0: entered promiscuous mode [ 128.965808][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.968104][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.970383][ T8797] bridge_slave_1: entered allmulticast mode [ 128.973749][ T8797] bridge_slave_1: entered promiscuous mode [ 128.977129][ T8819] netlink: 'syz.5.692': attribute type 1 has an invalid length. [ 129.014311][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.020861][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.048897][ T8797] team0: Port device team_slave_0 added [ 129.054334][ T8797] team0: Port device team_slave_1 added [ 129.080004][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.084660][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.095198][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.101210][ T8765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.102928][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.107706][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.117689][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.158096][ T8797] hsr_slave_0: entered promiscuous mode [ 129.160600][ T8797] hsr_slave_1: entered promiscuous mode [ 129.164310][ T8797] debugfs: 'hsr0' already exists in 'hsr' [ 129.166207][ T8797] Cannot create hsr debugfs directory [ 129.166501][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 129.166518][ T42] audit: type=1400 audit(1786095297.528:1045): avc: denied { getopt } for pid=8822 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.260634][ T42] audit: type=1400 audit(1786095297.618:1046): avc: denied { write } for pid=8833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.294965][ T42] audit: type=1400 audit(1786095297.658:1047): avc: denied { setattr } for pid=8838 comm="syz.4.698" name="file0" dev="9p" ino=78395315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 129.295276][ T8797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.306890][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.310750][ T8797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.315758][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.318468][ T8797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.324515][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.326134][ T42] audit: type=1400 audit(1786095297.688:1048): avc: denied { write } for pid=8840 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.336575][ T8797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.344042][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.357782][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.360121][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.362710][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.364878][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.403183][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.407534][ T42] audit: type=1400 audit(1786095297.768:1049): avc: denied { write } for pid=8850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.418522][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.423122][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.431535][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.437353][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.439588][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.446171][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.448520][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.451681][ T5817] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 129.462209][ T42] audit: type=1400 audit(1786095297.828:1050): avc: denied { write } for pid=8853 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.530279][ T42] audit: type=1400 audit(1786095297.888:1051): avc: denied { write } for pid=8856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.579232][ T42] audit: type=1400 audit(1786095297.948:1052): avc: denied { write } for pid=8862 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.602911][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short [ 129.606260][ T5817] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 129.609015][ T5817] usb 7-1: config 100 has no interface number 0 [ 129.611309][ T5817] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 129.614691][ T5817] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 129.618223][ T5817] usb 7-1: config 100 interface 173 has no altsetting 0 [ 129.623414][ T5817] usb 7-1: string descriptor 0 read error: -22 [ 129.625529][ T5817] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 129.628679][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.636342][ T8832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.643511][ T8870] syzkaller1: entered promiscuous mode [ 129.644140][ T5817] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 129.645341][ T8870] syzkaller1: entered allmulticast mode [ 129.652525][ T5817] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 129.670958][ T5745] Bluetooth: hci2: command tx timeout [ 129.708600][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.777684][ T8884] devtmpfs: Unknown parameter 'ip' [ 129.846755][ T8832] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 129.851036][ T5817] usb 7-1: USB disconnect, device number 14 [ 129.859361][ T8797] veth0_vlan: entered promiscuous mode [ 129.863872][ T5817] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 129.866086][ T8797] veth1_vlan: entered promiscuous mode [ 129.877341][ T5817] metro_usb 7-1:100.173: device disconnected [ 129.905191][ T8797] veth0_macvtap: entered promiscuous mode [ 129.914299][ T8797] veth1_macvtap: entered promiscuous mode [ 129.926769][ T8896] tipc: Started in network mode [ 129.928382][ T8896] tipc: Node identity a61acb4d8a95, cluster identity 4711 [ 129.932401][ T8896] tipc: Enabled bearer , priority 10 [ 129.948063][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.956331][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.961224][ T42] audit: type=1400 audit(1786095298.329:1053): avc: denied { mounton } for pid=8895 comm="syz.5.707" path="/14/bus" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 129.961352][ T8896] MTD: Couldn't look up './bus': -15 [ 130.000997][ T5550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.030729][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.034839][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.038463][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.045625][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.066921][ T8895] tipc: Resetting bearer [ 130.082894][ T8895] tipc: Disabling bearer [ 130.096473][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.100887][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.166207][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.710'. [ 130.172327][ T8910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8910 comm=syz.5.710 [ 130.181145][ T5550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.188885][ T42] audit: type=1400 audit(1786095298.549:1054): avc: denied { mount } for pid=8912 comm="syz.4.711" name="/" dev="hugetlbfs" ino=28747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 130.249351][ T8921] macvlan2: entered promiscuous mode [ 130.254769][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8921 comm=syz.6.715 [ 130.261788][ T8923] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.714'. [ 130.283870][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.716'. [ 130.289343][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.716'. [ 130.407703][ T8935] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.438589][ T8937] random: crng reseeded on system resumption [ 130.477241][ T8937] syzkaller0: entered promiscuous mode [ 130.480892][ T8937] syzkaller0: entered allmulticast mode [ 130.487011][ T8937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8937 comm=syz.4.722 [ 130.530291][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.723'. [ 130.545796][ T8951] geneve2: entered promiscuous mode [ 130.547970][ T8951] geneve2: entered allmulticast mode [ 130.632711][ T5745] Bluetooth: hci4: command tx timeout [ 130.676057][ T8973] openvswitch: netlink: IP tunnel dst address not specified [ 130.711619][ T8971] comedi comedi2: board detection failed [ 130.857324][ T8981] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 130.867429][ T8991] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 130.873496][ T8991] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 130.930411][ T9001] __nla_validate_parse: 2 callbacks suppressed [ 130.930425][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.740'. [ 131.147494][ T9020] program syz.4.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.208364][ T9017] SELinux: context truncated [ 131.210903][ T9017] SELinux: invalid ocon [ 131.281927][ T9017] SELinux: failed to load policy [ 131.283578][ T9020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9020 comm=syz.4.743 [ 131.331068][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.747'. [ 131.375307][ T9039] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 131.490780][ T847] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 131.652481][ T847] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 131.655466][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.664894][ T847] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 015 [ 131.863007][ T847] (null): failure reading functionality [ 132.064266][ T847] i2c i2c-2: failure reading functionality [ 132.069735][ T847] i2c i2c-2: connected i2c-tiny-usb device [ 132.077747][ T5845] usb 7-1: USB disconnect, device number 15 [ 132.720594][ T5745] Bluetooth: hci4: command tx timeout [ 132.792295][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794211][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.412599][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 134.412618][ T42] audit: type=1400 audit(1786095302.779:1067): avc: denied { write } for pid=9054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.485740][ T42] audit: type=1400 audit(1786095302.849:1068): avc: denied { write } for pid=9057 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.790578][ T5745] Bluetooth: hci4: command tx timeout [ 135.562947][ T42] audit: type=1400 audit(1786095303.929:1069): avc: denied { write } for pid=9060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.618453][ T42] audit: type=1400 audit(1786095303.979:1070): avc: denied { write } for pid=9063 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.897555][ T42] audit: type=1400 audit(1786095304.259:1071): avc: denied { write } for pid=9066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.952056][ T42] audit: type=1400 audit(1786095304.319:1072): avc: denied { write } for pid=9069 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.870085][ T5745] Bluetooth: hci4: command tx timeout [ 139.295833][ T42] audit: type=1400 audit(1786095307.660:1073): avc: denied { write } for pid=9072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.344963][ T42] audit: type=1400 audit(1786095307.710:1074): avc: denied { write } for pid=9075 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.869677][ T1305] block nbd0: Possible stuck request ffff88802961e000: control (read@0,4096B). Runtime 60 seconds [ 147.131851][ T5148] udevd[5148]: worker [5747] /devices/virtual/block/nbd0 is taking a long time [ 149.104042][ T9099] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 149.221766][ T9111] netlink: 14 bytes leftover after parsing attributes in process `syz.4.762'. [ 149.284932][ T42] audit: type=1400 audit(1786095317.651:1075): avc: denied { setattr } for pid=9114 comm="syz.6.764" path="socket:[28208]" dev="sockfs" ino=28208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.688005][ T9137] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.774458][ T9145] netlink: 45 bytes leftover after parsing attributes in process `syz.2.774'. [ 149.785041][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x002e instead [ 149.789186][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0006 instead [ 149.792530][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x7504 instead [ 149.796005][ T9145] jffs2: Empty flash at 0x00000070 ends at 0x00000074 [ 149.798872][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000074: 0xffff instead [ 149.802302][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000078: 0x0500 instead [ 149.805580][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0x2000 instead [ 149.809019][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000140: 0x0500 instead [ 149.812732][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000144: 0x2000 instead [ 149.820744][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000340: 0x0001 instead [ 149.824827][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000348: 0x1000 instead [ 149.828205][ T9145] jffs2: Further such events for this erase block will not be printed [ 149.831715][ T9145] jffs2: Empty flash at 0x00000350 ends at 0x00000354 [ 149.834518][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001444: 0x2000 instead [ 149.837771][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001448: 0x0010 instead [ 149.841315][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001460: 0x0180 instead [ 149.844611][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001464: 0x2000 instead [ 149.847838][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001468: 0x0058 instead [ 149.851875][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d80: 0x002e instead [ 149.855111][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d84: 0x0008 instead [ 149.858334][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d88: 0x7525 instead [ 149.863257][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d9c: 0x0001 instead [ 149.866562][ T9145] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001da0: 0x0103 instead [ 149.871482][ T9145] jffs2: Further such events for this erase block will not be printed [ 149.881213][ T9145] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 149.884101][ T9145] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 149.925062][ T9162] program syz.5.778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.941814][ T42] audit: type=1400 audit(1786095318.311:1076): avc: denied { accept } for pid=9161 comm="syz.2.779" laddr=fe80::13 lport=55672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.970881][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 149.976479][ T9166] netlink: 'syz.5.780': attribute type 49 has an invalid length. [ 149.980863][ T9166] bond0: (slave bond_slave_0): Releasing backup interface [ 150.023166][ T9166] bond_slave_0: entered promiscuous mode [ 150.025046][ T9166] bond_slave_0: entered allmulticast mode [ 150.031810][ T9168] program syz.2.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.035072][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 150.046956][ T9171] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 150.049381][ T9171] UDF-fs: Scanning with blocksize 2048 failed [ 150.056006][ T9171] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 150.062005][ T9171] UDF-fs: Scanning with blocksize 4096 failed [ 150.115046][ T9175] fuse: Bad value for 'fd' [ 150.115322][ T9179] sit1: entered promiscuous mode [ 150.156055][ T42] audit: type=1400 audit(1786095318.521:1077): avc: denied { write } for pid=9181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.241659][ T42] audit: type=1400 audit(1786095318.611:1078): avc: denied { write } for pid=9194 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.281841][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 150.286292][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 150.303881][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.791'. [ 150.372219][ T42] audit: type=1400 audit(1786095318.741:1079): avc: denied { write } for pid=9209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.435672][ T42] audit: type=1400 audit(1786095318.801:1080): avc: denied { write } for pid=9219 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.481977][ T9225] netlink: 'syz.4.796': attribute type 2 has an invalid length. [ 150.488273][ T9225] netlink: 224 bytes leftover after parsing attributes in process `syz.4.796'. [ 150.521267][ T42] audit: type=1400 audit(1786095318.891:1081): avc: denied { write } for pid=9230 comm="syz.5.797" name="usb_gadget" dev="configfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.538718][ T9231] pim6reg9: entered allmulticast mode [ 150.542937][ T42] audit: type=1400 audit(1786095318.911:1082): avc: denied { write } for pid=9230 comm="syz.5.797" name="functions" dev="configfs" ino=29006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.562462][ T42] audit: type=1800 audit(1786095318.911:1083): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.797" name="c_mute_present" dev="configfs" ino=29014 res=0 errno=0 [ 150.578371][ T42] audit: type=1400 audit(1786095318.911:1084): avc: denied { mounton } for pid=9230 comm="syz.5.797" path="/36/my_config" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.702351][ T9242] printk: legacy console [ttyGS0] disabled [ 150.871332][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.805'. [ 150.947570][ T9280] program syz.5.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.987711][ T9282] netlink: 156 bytes leftover after parsing attributes in process `syz.5.813'. [ 151.677391][ T9296] loop5: detected capacity change from 0 to 7 [ 151.685148][ T9296] loop5: [POWERTEC] p1 p2 [ 151.689782][ T9296] loop5: p1 start 1110023002 is beyond EOD, truncated [ 151.694102][ T9296] loop5: p2 start 942735360 is beyond EOD, truncated [ 151.809547][ T9302] netlink: 'syz.6.820': attribute type 2 has an invalid length. [ 151.812112][ T9302] netlink: 'syz.6.820': attribute type 2 has an invalid length. [ 151.893529][ T9310] fuse: Unknown parameter 'Ðd' [ 152.240734][ T9323] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 152.254831][ T9323] CPU: 3 UID: 0 PID: 9323 Comm: syz.4.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.254858][ T9323] Tainted: [L]=SOFTLOCKUP [ 152.254864][ T9323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.254879][ T9323] Call Trace: [ 152.254892][ T9323] [ 152.254897][ T9323] dump_stack_lvl+0x100/0x190 [ 152.254977][ T9323] sysfs_warn_dup.cold+0x1c/0x28 [ 152.255023][ T9323] sysfs_create_dir_ns+0x24b/0x2b0 [ 152.255054][ T9323] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 152.255066][ T9323] ? find_held_lock+0x2b/0x80 [ 152.255095][ T9323] ? kobject_add_internal+0x25f/0x930 [ 152.255171][ T9323] ? kobject_add_internal+0x25f/0x930 [ 152.255196][ T9323] ? class_dir_child_ns_type+0xd/0x60 [ 152.255269][ T9323] kobject_add_internal+0x2c8/0x930 [ 152.255304][ T9323] kobject_add+0x16a/0x1e0 [ 152.255315][ T9323] ? __pfx_kobject_add+0x10/0x10 [ 152.255328][ T9323] ? get_device_parent+0x1b3/0x4c0 [ 152.255351][ T9323] ? kobject_put+0xb9/0x640 [ 152.255383][ T9323] device_add+0x294/0x1970 [ 152.255409][ T9323] ? lockdep_init_map_type+0x5c/0x250 [ 152.255435][ T9323] ? __pfx_device_add+0x10/0x10 [ 152.255452][ T9323] ? lockdep_init_map_type+0x5c/0x250 [ 152.255469][ T9323] ? __init_waitqueue_head+0xca/0x150 [ 152.255492][ T9323] tty_register_device_attr+0x388/0x7f0 [ 152.255520][ T9323] ? lockdep_init_map_type+0x5c/0x250 [ 152.255536][ T9323] ? __pfx_tty_register_device_attr+0x10/0x10 [ 152.255557][ T9323] ? tty_port_init+0x156/0x1c0 [ 152.255580][ T9323] gsm_activate_mux+0x155/0x2a0 [ 152.255613][ T9323] gsmld_ioctl+0xbbc/0x15c0 [ 152.255637][ T9323] ? __pfx_gsmld_ioctl+0x10/0x10 [ 152.255661][ T9323] ? __ldsem_down_read_nested+0xf3/0x890 [ 152.255684][ T9323] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 152.255709][ T9323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.255738][ T9323] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 152.255761][ T9323] ? __pfx_gsmld_ioctl+0x10/0x10 [ 152.255787][ T9323] tty_ioctl+0x11b4/0x1640 [ 152.255810][ T9323] ? __pfx_tty_ioctl+0x10/0x10 [ 152.255831][ T9323] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 152.255906][ T9323] ? __fget_files+0x215/0x3d0 [ 152.255930][ T9323] ? hook_file_ioctl_common+0x140/0x440 [ 152.255957][ T9323] ? selinux_file_ioctl+0x13b/0x290 [ 152.255970][ T9323] ? selinux_file_ioctl+0xb6/0x290 [ 152.255983][ T9323] ? __pfx_tty_ioctl+0x10/0x10 [ 152.256006][ T9323] __x64_sys_ioctl+0x18e/0x210 [ 152.256026][ T9323] do_syscall_64+0x115/0x870 [ 152.256071][ T9323] ? clear_bhb_loop+0x70/0xc0 [ 152.256092][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.256105][ T9323] RIP: 0033:0x7f95a459e0d9 [ 152.256118][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.256132][ T9323] RSP: 002b:00007f95a54bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.256146][ T9323] RAX: ffffffffffffffda RBX: 00007f95a4826090 RCX: 00007f95a459e0d9 [ 152.256155][ T9323] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 152.256162][ T9323] RBP: 00007f95a4635024 R08: 0000000000000000 R09: 0000000000000000 [ 152.256169][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.256176][ T9323] R13: 00007f95a4826128 R14: 00007f95a4826090 R15: 00007ffecbf3f1e8 [ 152.256191][ T9323] [ 152.256252][ T9323] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 152.780819][ T9360] netlink: 'syz.5.833': attribute type 29 has an invalid length. [ 152.996216][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe20100004900 [ 153.025474][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7900 [ 153.074157][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.109247][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.143760][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.183362][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.217769][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.254222][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.273812][ T9403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9403 comm=syz.6.845 [ 153.283122][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.316848][ T9384] kvm: kvm [9382]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 153.497767][ T9413] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 153.501435][ T9413] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 153.516085][ T9413] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 153.680219][ T9427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9427 comm=syz.4.854 [ 153.714869][ T9432] random: crng reseeded on system resumption [ 153.736485][ T13] nci: nci_rx_work: unknown MT 0x1 [ 154.198731][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 154.370345][ T34] usb 11-1: unable to get BOS descriptor or descriptor too short [ 154.374635][ T34] usb 11-1: config index 0 descriptor too short (expected 26224, got 110) [ 154.377455][ T34] usb 11-1: config 116 has too many interfaces: 95, using maximum allowed: 32 [ 154.383921][ T34] usb 11-1: config 116 has 0 interfaces, different from the descriptor's value: 95 [ 154.392976][ T34] usb 11-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=42.26 [ 154.397169][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.400017][ T34] usb 11-1: Product: syz [ 154.401417][ T34] usb 11-1: Manufacturer: syz [ 154.403036][ T34] usb 11-1: SerialNumber: syz [ 154.451852][ T9421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.466228][ T9450] netlink: 'syz.5.859': attribute type 11 has an invalid length. [ 154.476959][ T9450] __nla_validate_parse: 7 callbacks suppressed [ 154.476971][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.859'. [ 154.609973][ C3] raw-gadget.0 gadget.6: ignoring, device is not running [ 154.612415][ C3] raw-gadget.0 gadget.6: ignoring, device is not running [ 154.617270][ T34] usb 11-1: USB disconnect, device number 2 [ 154.663249][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 154.663276][ T42] audit: type=1400 audit(1786095323.032:1105): avc: denied { setattr } for pid=9467 comm="syz.2.863" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 154.675424][ T1135] ata1.00: exception Emask 0x0 SAct 0x8 SErr 0x0 action 0x6 [ 154.680407][ T1135] ata1.00: waking up from sleep [ 154.682143][ T1135] ata1: hard resetting link [ 154.685561][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 154.692962][ T9470] ip6erspan0: entered allmulticast mode [ 154.693518][ T9474] configfs: Unknown parameter 'mode' [ 154.694801][ T42] audit: type=1400 audit(1786095323.062:1106): avc: denied { remount } for pid=9471 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 154.704918][ T9470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9470 comm=syz.4.864 [ 154.729648][ T9478] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 154.751232][ T9478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.760986][ T9478] bond1: (slave geneve2): Opening slave failed [ 154.821600][ T9476] vmw_vmci 0000:00:03.0: Using capabilities 0x1c [ 154.824638][ T9476] vmw_vmci 0000:00:03.0: VMCI device unable to register notification bitmap with PPN 0xfffff [ 155.022477][ T1135] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 155.029005][ T1135] ata1.00: configured for UDMA/100 [ 155.031429][ T1135] ata1: EH complete [ 155.149823][ T9495] syz.6.871 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.149991][ T9496] netlink: 'syz.6.871': attribute type 15 has an invalid length. [ 155.397786][ T5846] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 155.458481][ T9526] netlink: 144 bytes leftover after parsing attributes in process `syz.6.881'. [ 155.483707][ T9528] device-mapper: ioctl: Invalid target message parameters. [ 155.517664][ T5744] Bluetooth: hci1: sending frame failed (-49) [ 155.523249][ T5745] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 155.578358][ T5846] usb 7-1: Using ep0 maxpacket: 16 [ 155.580648][ T42] audit: type=1400 audit(1786095323.952:1107): avc: denied { watch watch_reads } for pid=9531 comm="syz.6.883" path="pipe:[25421]" dev="pipefs" ino=25421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 155.594317][ T5846] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.598237][ T5846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.603019][ T5846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.604348][ T9528] netlink: 'syz.5.882': attribute type 1 has an invalid length. [ 155.606813][ T5846] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.615478][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.883'. [ 155.616824][ T5846] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.622716][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.625954][ T5846] usb 7-1: SerialNumber: syz [ 155.638405][ T5846] hub 7-1:1.0: bad descriptor, ignoring hub [ 155.641063][ T5846] hub 7-1:1.0: probe with driver hub failed with error -5 [ 155.647971][ T5846] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 155.683934][ T9537] syzkaller0: entered promiscuous mode [ 155.685855][ T9537] syzkaller0: entered allmulticast mode [ 156.177908][ T5846] usb 7-1: USB disconnect, device number 16 [ 156.178300][ T9578] binder: 9577:9578 ioctl c0306201 200000000080 returned -22 [ 156.189417][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.5.895'. [ 156.221389][ T9580] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 156.396662][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.898'. [ 156.495025][ T42] audit: type=1400 audit(1786095324.862:1108): avc: denied { view } for pid=9591 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 157.248014][ T9623] netlink: 232 bytes leftover after parsing attributes in process `syz.2.910'. [ 157.254826][ T9621] batman_adv: batadv0: Adding interface: macvtap1 [ 157.257342][ T9621] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.267657][ T9621] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 157.371843][ T42] audit: type=1326 audit(1786095325.742:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.2.915" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd703b9e0d9 code=0x0 [ 157.407657][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 157.432075][ T9640] zram0: detected capacity change from 0 to 8 [ 157.481083][ T9645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.484821][ T9645] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.488252][ T9645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.497070][ T9645] wireguard: wg0: Could not create IPv4 socket [ 157.499948][ T9645] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 157.513495][ T9651] input: syz1 as /devices/virtual/input/input14 [ 157.534013][ T9655] netlink: 'syz.2.921': attribute type 6 has an invalid length. [ 157.538535][ T9655] tmpfs: Bad value for 'huge' [ 157.545922][ T42] audit: type=1400 audit(1786095325.912:1110): avc: denied { write } for pid=9654 comm="syz.2.921" name="subsystems" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.558084][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 157.562895][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.920'. [ 157.570663][ T34] usb 11-1: config 1 has an invalid interface number: 239 but max is 1 [ 157.575829][ T34] usb 11-1: config 1 has an invalid interface number: 24 but max is 1 [ 157.586007][ T9663] kAFS: Invalid Command on /proc/fs/afs/cells file [ 157.587664][ T34] usb 11-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.592506][ T34] usb 11-1: config 1 has no interface number 0 [ 157.594966][ T34] usb 11-1: config 1 has no interface number 1 [ 157.597774][ T34] usb 11-1: config 1 interface 239 altsetting 246 endpoint 0x7 has invalid maxpacket 1022, setting to 64 [ 157.602137][ T34] usb 11-1: config 1 interface 239 altsetting 246 endpoint 0x4 has an invalid bInterval 247, changing to 7 [ 157.606426][ T34] usb 11-1: config 1 interface 239 altsetting 246 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 157.611415][ T34] usb 11-1: config 1 interface 24 altsetting 6 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 157.615408][ T34] usb 11-1: config 1 interface 24 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 157.621455][ T34] usb 11-1: config 1 interface 24 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 157.625578][ T34] usb 11-1: config 1 interface 24 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 157.630210][ T34] usb 11-1: config 1 interface 24 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 64 [ 157.634446][ T34] usb 11-1: config 1 interface 24 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 157.638966][ T34] usb 11-1: config 1 interface 24 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 157.643234][ T34] usb 11-1: config 1 interface 24 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 157.647286][ T34] usb 11-1: config 1 interface 239 has no altsetting 0 [ 157.650661][ T34] usb 11-1: config 1 interface 24 has no altsetting 0 [ 157.655714][ T34] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b7.94 [ 157.657308][ T42] audit: type=1400 audit(1786095326.022:1111): avc: denied { create } for pid=9671 comm="syz.4.926" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.659767][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.659785][ T34] usb 11-1: Product: 䖷㵶å©ï¦Œé¾½ã‚Ä·å¶îªŽì¿¶á™ŽæµŒä¡€Ô»æ·‹ [ 157.659799][ T34] usb 11-1: Manufacturer: à ’ [ 157.659811][ T34] usb 11-1: SerialNumber: à ‡ [ 157.681945][ T42] audit: type=1400 audit(1786095326.042:1112): avc: denied { unlink } for pid=6097 comm="syz-executor" name="file0" dev="tmpfs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.712826][ T9679] netlink: 68 bytes leftover after parsing attributes in process `syz.5.928'. [ 157.719948][ T42] audit: type=1400 audit(1786095326.092:1113): avc: denied { ioctl } for pid=9672 comm="syz.2.925" path="socket:[31164]" dev="sockfs" ino=31164 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.842283][ T9689] netlink: 32 bytes leftover after parsing attributes in process `syz.5.931'. [ 157.889687][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.893442][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.898634][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.903188][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.906837][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.910696][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.914470][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.917364][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.045037][ T9701] input: syz1 as /devices/virtual/input/input15 [ 158.066010][ T9701] vlan2: entered allmulticast mode [ 158.068444][ T9701] macsec0: entered allmulticast mode [ 158.135384][ T34] legousbtower 11-1:1.239: interrupt endpoints not found [ 158.339899][ T34] legousbtower 11-1:1.24: interrupt endpoints not found [ 158.350315][ T34] usb 11-1: USB disconnect, device number 3 [ 158.357725][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 158.487563][ T10] usb 10-1: device descriptor read/64, error -71 [ 158.727860][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 158.741275][ T42] audit: type=1400 audit(1786095327.112:1114): avc: denied { write } for pid=9715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.858374][ T10] usb 10-1: device descriptor read/64, error -71 [ 158.897817][ T5550] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.942757][ T9743] ucma_write: process 192 (syz.6.946) changed security contexts after opening file descriptor, this is not allowed. [ 158.968888][ T10] usb usb10-port1: attempt power cycle [ 159.021412][ T9757] binder: 9756:9757 ioctl c0306201 200000000080 returned -14 [ 159.021721][ T9758] fuse: Bad value for 'fd' [ 159.033579][ T9757] binder: 9756:9757 ioctl c0306201 2000000003c0 returned -14 [ 159.307392][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 159.328210][ T10] usb 10-1: device descriptor read/8, error -71 [ 159.567393][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 159.588073][ T10] usb 10-1: device descriptor read/8, error -71 [ 159.622000][ T9792] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 159.626938][ T9792] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 159.697659][ T10] usb usb10-port1: unable to enumerate USB device [ 159.720794][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 159.720806][ T42] audit: type=1400 audit(1786095328.092:1121): avc: denied { execute } for pid=9797 comm="syz.6.963" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 159.820502][ T9805] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 159.858608][ T9805] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 160.024216][ T9818] overlayfs: conflicting options: userxattr,metacopy=on [ 160.407234][ T42] audit: type=1400 audit(1786095328.772:1122): avc: denied { map } for pid=9832 comm="syz.2.973" path="socket:[29599]" dev="sockfs" ino=29599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.416688][ T42] audit: type=1400 audit(1786095328.782:1123): avc: denied { read write } for pid=9832 comm="syz.2.973" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.427359][ T42] audit: type=1400 audit(1786095328.782:1124): avc: denied { open } for pid=9832 comm="syz.2.973" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.784796][ T9835] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.873933][ T9835] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.950443][ T9835] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.104049][ T9838] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 161.104049][ T9838] Please contact the netfilter-devel mailing list or update your nftables rules. [ 161.148793][ T9845] mmap: syz.4.977 (9845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.155485][ T9846] __nla_validate_parse: 1 callbacks suppressed [ 161.155502][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.176480][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.189960][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.198688][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.203446][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.210637][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.220063][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.239096][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.242023][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.250749][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 161.347520][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.350637][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.353445][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.356088][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.425114][ T42] audit: type=1400 audit(1786095329.792:1125): avc: denied { accept } for pid=9865 comm="syz.2.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.511488][ T9871] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 161.557074][ T42] audit: type=1400 audit(1786095329.922:1126): avc: denied { write } for pid=9890 comm="syz.2.990" name="configs" dev="configfs" ino=29007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.564296][ T42] audit: type=1400 audit(1786095329.932:1127): avc: denied { write } for pid=9890 comm="syz.2.990" name="functions" dev="configfs" ino=29006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.572413][ T42] audit: type=1400 audit(1786095329.932:1128): avc: denied { write } for pid=9890 comm="syz.2.990" name="ep.0" dev="configfs" ino=33058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.621325][ T9897] overlay: ./file0/file0 is not a directory [ 161.667464][ T42] audit: type=1400 audit(1786095330.032:1129): avc: denied { write } for pid=9895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.727126][ T42] audit: type=1400 audit(1786095330.092:1130): avc: denied { write } for pid=9909 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.865897][ T9922] nvme nvme0: rdma connection establishment failed (-104) [ 161.977038][ T5846] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 162.021779][ T9944] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 162.027030][ T9944] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.037602][ T9944] CIFS mount error: No usable UNC path provided in device string! [ 162.037602][ T9944] [ 162.041433][ T9944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.049624][ T9944] fuse: Bad value for 'fd' [ 162.052635][ T9944] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 162.127563][ T5846] usb 9-1: Using ep0 maxpacket: 8 [ 162.131838][ T5846] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 162.137024][ T5846] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 162.140508][ T5846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.143608][ T5846] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 162.147647][ T5846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 162.150782][ T5846] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.154802][ T5846] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.155558][ T9952] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.158512][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.374020][ T5846] usb 9-1: GET_CAPABILITIES returned 0 [ 162.375827][ T5846] usbtmc 9-1:16.0: can't read capabilities [ 162.634426][ T9987] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -71 [ 162.741148][ T9988] rdma_rxe: Failed to create IPv4 UDP tunnel [ 162.760095][ T5846] usb 9-1: USB disconnect, device number 7 [ 162.773043][ T9988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 163.555627][T10025] netlink: 'syz.2.1020': attribute type 2 has an invalid length. [ 163.737396][ T1044] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 163.896841][ T1044] usb 9-1: Using ep0 maxpacket: 8 [ 163.909561][ T1044] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.920388][ T1044] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.928138][ T1044] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 163.940269][ T1044] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 163.943949][T10035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10035 comm=syz.5.1028 [ 163.948105][ T1044] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 163.952189][ T1044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.961391][ T1044] hub 9-1:1.0: bad descriptor, ignoring hub [ 163.968779][ T1044] hub 9-1:1.0: probe with driver hub failed with error -5 [ 163.974911][ T1044] cdc_wdm 9-1:1.0: skipping garbage [ 163.976607][ T1044] cdc_wdm 9-1:1.0: skipping garbage [ 163.993339][ T1044] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 163.995848][ T1044] cdc_wdm 9-1:1.0: Unknown control protocol [ 164.542196][T10048] VFS: Mount too revealing [ 166.476849][ T55] usb 9-1: USB disconnect, device number 8 [ 166.488119][T10020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.557998][T10085] 8021q: VLANs not supported on ip_vti0 [ 166.581609][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 166.581622][ T42] audit: type=1400 audit(1786095334.953:1139): avc: denied { map } for pid=10088 comm="syz.4.1036" path="pipe:[35051]" dev="pipefs" ino=35051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.595238][ T42] audit: type=1400 audit(1786095334.963:1140): avc: denied { create } for pid=10080 comm="syz.6.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.599694][T10091] netlink: 'syz.5.1037': attribute type 3 has an invalid length. [ 166.605144][T10091] netlink: 'syz.5.1037': attribute type 1 has an invalid length. [ 166.608477][T10091] __nla_validate_parse: 60 callbacks suppressed [ 166.608492][T10091] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1037'. [ 166.614580][T10091] NCSI netlink: No device for ifindex 0 [ 166.653369][ T42] audit: type=1400 audit(1786095335.023:1141): avc: denied { write } for pid=10097 comm="syz.5.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 166.786524][ T24] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 166.926504][ T55] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 166.968443][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 166.972043][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 166.975658][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 166.981351][ T24] usb 7-1: string descriptor 0 read error: -22 [ 166.983948][ T24] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 166.987343][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.992268][T10083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.994919][T10083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.002982][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.078602][ T55] usb 9-1: unable to get BOS descriptor or descriptor too short [ 167.082174][ T55] usb 9-1: config 5 has an invalid interface number: 17 but max is 0 [ 167.084800][ T55] usb 9-1: config 5 has no interface number 0 [ 167.087425][ T55] usb 9-1: config 5 interface 17 has no altsetting 0 [ 167.091109][ T55] usb 9-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.40 [ 167.094090][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.096815][ T55] usb 9-1: Product: syz [ 167.098133][ T55] usb 9-1: Manufacturer: syz [ 167.099690][ T55] usb 9-1: SerialNumber: syz [ 167.219902][ T5825] usb 7-1: USB disconnect, device number 17 [ 167.311693][ T55] pl2303 9-1:5.17: required endpoints missing [ 167.317843][ T55] usb 9-1: USB disconnect, device number 9 [ 167.685388][ T1495] hid (null): global environment stack underflow [ 167.696390][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1047'. [ 167.704634][ T1495] hid-generic 616F:20C2607D:F72986D9.0002: global environment stack underflow [ 167.709432][ T1495] hid-generic 616F:20C2607D:F72986D9.0002: item 0 1 1 11 parsing failed [ 167.712859][ T1495] hid-generic 616F:20C2607D:F72986D9.0002: probe with driver hid-generic failed with error -22 [ 167.752959][T10121] netlink: 11396 bytes leftover after parsing attributes in process `syz.6.1048'. [ 167.757115][T10121] netlink: 'syz.6.1048': attribute type 4 has an invalid length. [ 167.759585][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1048'. [ 167.763000][ T42] audit: type=1400 audit(1786095336.133:1142): avc: denied { map } for pid=10120 comm="syz.6.1048" path="socket:[34044]" dev="sockfs" ino=34044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.765113][T10123] fuse: fd is not a fuse device [ 167.869012][ T42] audit: type=1400 audit(1786095336.243:1143): avc: denied { map } for pid=10135 comm="syz.2.1054" path="socket:[34063]" dev="sockfs" ino=34063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.880932][ T42] audit: type=1400 audit(1786095336.243:1144): avc: denied { read } for pid=10135 comm="syz.2.1054" path="socket:[34063]" dev="sockfs" ino=34063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.884440][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 167.944104][T10144] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 167.959380][T10144] bond4: entered promiscuous mode [ 167.961375][T10144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.975897][T10144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 167.980643][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 168.013393][T10144] bond4: (slave bridge2): making interface the new active one [ 168.013409][T10144] bridge2: entered promiscuous mode [ 168.014207][T10144] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 168.058284][ T42] audit: type=1400 audit(1786095336.433:1145): avc: denied { audit_control } for pid=10149 comm="syz.2.1058" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 168.141240][T10165] bond0: (slave bridge0): Releasing backup interface [ 168.146093][T10165] bridge_slave_0: left allmulticast mode [ 168.149725][T10165] bridge_slave_0: left promiscuous mode [ 168.152081][T10165] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.162514][T10165] bridge_slave_1: left allmulticast mode [ 168.164392][T10165] bridge_slave_1: left promiscuous mode [ 168.166583][T10165] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.171798][T10165] bond0: (slave bond_slave_0): Releasing backup interface [ 168.175890][T10165] bond0: (slave bond_slave_1): Releasing backup interface [ 168.181028][T10165] team0: Port device team_slave_0 removed [ 168.184061][T10165] team0: Port device team_slave_1 removed [ 168.186546][T10165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.195394][T10165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.199193][T10172] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 168.201483][T10172] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 168.203906][ T42] audit: type=1400 audit(1786095336.573:1146): avc: denied { create } for pid=10170 comm="syz.2.1064" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.211172][T10165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.216478][ T42] audit: type=1400 audit(1786095336.583:1147): avc: denied { read append open } for pid=10170 comm="syz.2.1064" path="/258/file0/cpuset.effective_cpus" dev="9p" ino=78395539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.226845][T10172] vhci_hcd vhci_hcd.0: Device attached [ 168.253064][T10173] vhci_hcd: connection closed [ 168.254980][ T5816] vhci_hcd vhci_hcd.4: stop threads [ 168.259677][ T5816] vhci_hcd vhci_hcd.4: release socket [ 168.261794][ T5816] vhci_hcd vhci_hcd.4: disconnect device [ 168.420732][ T42] audit: type=1400 audit(1786095336.793:1148): avc: denied { append } for pid=10180 comm="syz.6.1067" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.505325][T10193] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 168.528004][T10193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.803821][T10210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 168.805999][T10210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.810385][T10210] vhci_hcd vhci_hcd.0: Device attached [ 168.819181][T10211] vhci_hcd: connection closed [ 168.820796][ T13] vhci_hcd vhci_hcd.4: stop threads [ 168.825009][ T13] vhci_hcd vhci_hcd.4: release socket [ 168.827386][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 168.968570][T10214] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1075'. [ 169.522698][T10234] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 169.760982][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 169.888293][T10248] tipc: Failed to remove unknown binding: 66,0,0/2886997162:952616580/952616582 [ 169.891361][T10248] tipc: Failed to remove unknown binding: 66,0,0/2886997162:952616580/952616581 [ 169.894746][T10248] tipc: Failed to remove unknown binding: 66,0,0/2886997162:952616580/952616582 [ 169.897979][T10248] tipc: Failed to remove unknown binding: 66,0,0/2886997162:952616580/952616581 [ 169.904145][T10249] coredump: 817(syz.2.1086): Core dump to core aborted: cannot preserve file permissions [ 170.263354][T10283] could not allocate digest TFM handle sha224-arm64 [ 170.265582][T10288] could not allocate digest TFM handle sha224-arm64 [ 170.513943][T10326] evm: overlay not supported [ 171.011825][T10332] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1105'. [ 171.058123][T10335] netlink: 'syz.6.1106': attribute type 12 has an invalid length. [ 171.098462][T10340] syzkaller0: entered promiscuous mode [ 171.100281][T10340] syzkaller0: entered allmulticast mode [ 173.426513][T10313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.507151][T10352] netlink: 'syz.4.1110': attribute type 9 has an invalid length. [ 173.517063][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 173.517082][ T42] audit: type=1400 audit(1786095341.894:1160): avc: denied { append } for pid=10354 comm="syz.6.1112" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.659475][ T42] audit: type=1400 audit(1786095342.034:1161): avc: denied { map } for pid=10359 comm="syz.6.1113" path="/proc/344" dev="proc" ino=33664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 173.747124][ T34] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 173.899403][ T34] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 173.902229][ T34] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 173.904799][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 173.907806][ T34] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 173.911287][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 173.914701][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 173.917776][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 173.925682][ T34] usb 7-1: string descriptor 0 read error: -22 [ 173.927713][ T34] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 173.930632][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.934775][ T34] usb 7-1: config 0 descriptor?? [ 173.938575][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 173.940627][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 173.946148][ T34] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input18 [ 174.254169][ T24] usb 7-1: USB disconnect, device number 18 [ 174.425000][T10387] __nla_validate_parse: 1 callbacks suppressed [ 174.425017][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1119'. [ 174.430749][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1119'. [ 174.463333][T10390] loop5: detected capacity change from 0 to 2640 [ 174.474239][T10390] buffer_io_error: 10 callbacks suppressed [ 174.474260][T10390] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 174.479047][T10390] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 174.481717][T10390] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 174.484293][T10390] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 174.487140][T10390] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 174.489860][T10390] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 174.492483][T10390] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 174.495231][T10390] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 174.497783][T10390] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 174.500384][T10390] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 174.537345][T10392] netlink: 'syz.6.1121': attribute type 1 has an invalid length. [ 174.540117][T10392] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1121'. [ 174.573344][ T42] audit: type=1400 audit(1786095342.944:1162): avc: denied { setopt } for pid=10396 comm="syz.6.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.579579][ T42] audit: type=1400 audit(1786095342.954:1163): avc: denied { listen } for pid=10396 comm="syz.6.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.591970][T10397] netlink: NAT attribute has 5 unknown bytes [ 174.594424][T10397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.744747][T10406] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.749398][T10406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1124'. [ 174.768780][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 174.772530][ T42] audit: type=1400 audit(1786095343.144:1164): avc: denied { write } for pid=10405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.778397][T10410] netlink: 'syz.4.1125': attribute type 2 has an invalid length. [ 174.779333][ T42] audit: type=1400 audit(1786095343.154:1165): avc: denied { connect } for pid=10398 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 174.819539][ T42] audit: type=1400 audit(1786095343.194:1166): avc: denied { write } for pid=10414 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.989840][T10419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10419 comm=syz.4.1125 [ 174.993855][T10419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10419 comm=syz.4.1125 [ 175.509840][T10399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.601492][ T42] audit: type=1400 audit(1786095343.974:1167): avc: denied { write } for pid=10425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.653926][ T42] audit: type=1400 audit(1786095344.024:1168): avc: denied { write } for pid=10435 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.718872][ T42] audit: type=1400 audit(1786095344.094:1169): avc: denied { execute } for pid=10438 comm="syz.6.1130" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 175.731225][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1130'. [ 175.734133][T10439] tipc: Invalid UDP bearer configuration [ 175.734160][T10439] tipc: Enabling of bearer rejected, failed to enable media [ 175.899275][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1134'. [ 175.943927][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1135'. [ 175.977271][T10469] fuse: fd is not a fuse device [ 176.133427][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1139'. [ 176.144662][ T34] bridge0: entered promiscuous mode [ 176.245840][T10482] input: syz1 as /devices/virtual/input/input19 [ 176.608121][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1142'. [ 176.675005][T10486] 9p: Invalid gid '0x00000000ffffffff' [ 176.679288][T10486] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1142'. [ 176.748407][T10494] vlan2: entered promiscuous mode [ 176.750717][T10494] hsr0: entered promiscuous mode [ 176.753223][T10494] vlan2: entered allmulticast mode [ 176.755495][T10494] hsr0: entered allmulticast mode [ 176.757964][T10494] hsr_slave_0: entered allmulticast mode [ 176.760439][T10494] hsr_slave_1: entered allmulticast mode [ 176.772939][T10494] fuse: Bad value for 'fd' [ 176.960024][ T1305] block nbd0: Possible stuck request ffff88802961e000: control (read@0,4096B). Runtime 90 seconds [ 177.553939][T10526] netlink: 'syz.4.1152': attribute type 4 has an invalid length. [ 177.871121][ T55] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 178.025212][ T55] usb 11-1: Using ep0 maxpacket: 8 [ 178.029571][ T55] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 178.032829][ T55] usb 11-1: config 0 has no interface number 0 [ 178.036428][ T55] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.040989][ T55] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 178.046092][ T55] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.050609][ T55] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 178.054657][ T55] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.060869][ T55] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.064746][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.071158][ T55] usb 11-1: config 0 descriptor?? [ 178.079006][ T55] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 178.285845][T10531] ldusb 11-1:0.55: Couldn't submit interrupt_in_urb -90 [ 178.291440][ T34] usb 11-1: USB disconnect, device number 4 [ 178.302752][ T34] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 179.770197][T10577] Process accounting resumed [ 179.802244][T10579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10579 comm=syz.2.1167 [ 179.838868][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 179.838887][ T42] audit: type=1400 audit(1786095348.215:1195): avc: denied { ioctl } for pid=10580 comm="syz.2.1168" path="socket:[33789]" dev="sockfs" ino=33789 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 180.026695][T10591] Failed to initialize the IGMP autojoin socket (err -2) [ 180.081228][T10592] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 180.092032][T10592] team0: Port device dummy0 added [ 180.178763][T10594] futex_wake_op: syz.2.1172 tries to shift op by 144; fix this program [ 180.184041][T10594] futex_wake_op: syz.2.1172 tries to shift op by 144; fix this program [ 181.525892][T10601] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.700700][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 181.789364][T10615] fuse: fd is not a fuse device [ 181.909997][T10557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.996540][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 181.996683][ T42] audit: type=1400 audit(1786095350.375:1196): avc: denied { listen } for pid=10632 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.997794][T10635] netlink: 'syz.5.1186': attribute type 1 has an invalid length. [ 182.011686][ T42] audit: type=1400 audit(1786095350.375:1197): avc: denied { read } for pid=10632 comm="syz.2.1184" path="socket:[38017]" dev="sockfs" ino=38017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.015622][T10635] bond1: entered promiscuous mode [ 182.024419][T10635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.035343][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'. [ 182.039036][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'. [ 182.068521][T10635] bond1: (slave bridge1): making interface the new active one [ 182.071750][T10635] bridge1: entered promiscuous mode [ 182.077192][T10635] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 182.087907][T10635] bridge2: entered promiscuous mode [ 182.133596][T10648] macvtap2: entered promiscuous mode [ 182.135582][T10648] macvtap2: entered allmulticast mode [ 182.177150][T10658] syzkaller0: entered promiscuous mode [ 182.179025][T10658] syzkaller0: entered allmulticast mode [ 182.364670][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1198'. [ 182.401533][T10683] netlink: 'syz.4.1203': attribute type 13 has an invalid length. [ 182.405904][ T42] audit: type=1400 audit(1786095350.785:1198): avc: denied { accept } for pid=10682 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.579353][T10688] erspan0: left promiscuous mode [ 182.650482][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x002e instead [ 182.654615][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0006 instead [ 182.658633][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x7504 instead [ 182.662758][T10690] jffs2: Empty flash at 0x00000070 ends at 0x00000074 [ 182.665646][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000074: 0xffff instead [ 182.669530][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000078: 0x0500 instead [ 182.673505][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0x2000 instead [ 182.677779][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000140: 0x0500 instead [ 182.681788][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000144: 0x2000 instead [ 182.685740][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000340: 0x0001 instead [ 182.689302][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000348: 0x1000 instead [ 182.693008][T10690] jffs2: Further such events for this erase block will not be printed [ 182.696548][T10690] jffs2: Empty flash at 0x00000350 ends at 0x00000354 [ 182.699658][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001444: 0x2000 instead [ 182.703448][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001448: 0x0010 instead [ 182.707710][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001460: 0x0180 instead [ 182.711446][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001464: 0x2000 instead [ 182.715500][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001468: 0x0058 instead [ 182.719614][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d80: 0x002e instead [ 182.723493][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d84: 0x0008 instead [ 182.727471][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d88: 0x7525 instead [ 182.731234][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d9c: 0x0001 instead [ 182.735125][T10690] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001da0: 0x0103 instead [ 182.738752][T10690] jffs2: Further such events for this erase block will not be printed [ 182.750534][T10690] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 182.753979][T10690] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 182.757952][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x002e instead [ 182.763309][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0006 instead [ 182.767253][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x7504 instead [ 182.770403][T10692] jffs2: Empty flash at 0x00000070 ends at 0x00000074 [ 182.772623][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000074: 0xffff instead [ 182.776305][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000078: 0x0500 instead [ 182.779831][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0x2000 instead [ 182.783501][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000140: 0x0500 instead [ 182.787177][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000144: 0x2000 instead [ 182.790692][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000340: 0x0001 instead [ 182.794706][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000348: 0x1000 instead [ 182.798469][T10692] jffs2: Further such events for this erase block will not be printed [ 182.801686][T10692] jffs2: Empty flash at 0x00000350 ends at 0x00000354 [ 182.804717][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001444: 0x2000 instead [ 182.808547][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001448: 0x0010 instead [ 182.812662][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001460: 0x0180 instead [ 182.816923][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001464: 0x2000 instead [ 182.820630][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001468: 0x0058 instead [ 182.825187][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d80: 0x002e instead [ 182.828748][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d84: 0x0008 instead [ 182.832142][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d88: 0x7525 instead [ 182.836278][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001d9c: 0x0001 instead [ 182.840063][T10692] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001da0: 0x0103 instead [ 182.843856][T10692] jffs2: Further such events for this erase block will not be printed [ 182.855906][T10692] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 182.859275][T10692] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 182.942460][T10700] netlink: 'syz.4.1209': attribute type 10 has an invalid length. [ 182.946468][T10700] ipvlan0: entered allmulticast mode [ 182.948550][T10700] veth0_vlan: entered allmulticast mode [ 182.951683][T10700] team0: Device ipvlan0 failed to register rx_handler [ 183.021724][ T42] audit: type=1400 audit(1786095351.395:1199): avc: denied { mount } for pid=10701 comm="syz.4.1210" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 183.059993][T10708] overlay: filesystem on ./file0 not supported as upperdir [ 183.062946][T10708] overlay: filesystem on ./file0 not supported as upperdir [ 183.066319][T10708] overlay: filesystem on ./file0 not supported as upperdir [ 183.069391][T10708] overlay: filesystem on ./file0 not supported as upperdir [ 183.072979][T10708] overlay: filesystem on ./file0 not supported as upperdir [ 183.110671][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 183.229301][ T42] audit: type=1400 audit(1786095351.605:1200): avc: denied { ioctl } for pid=10715 comm="syz.4.1213" path="socket:[35767]" dev="sockfs" ino=35767 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.280077][T10720] Failed to initialize the IGMP autojoin socket (err -2) [ 183.291041][ T42] audit: type=1400 audit(1786095351.665:1201): avc: denied { write } for pid=10717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.356188][ T42] audit: type=1400 audit(1786095351.735:1202): avc: denied { write } for pid=10722 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.369286][ T42] audit: type=1400 audit(1786095351.745:1203): avc: denied { module_load } for pid=10726 comm="syz.4.1215" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 183.369725][T10727] kernel read not supported for file /policy (pid: 10727 comm: syz.4.1215) [ 183.459254][T10735] CIFS: Attempting to mount //127.0.0.1/share [ 183.465759][T10735] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 183.472637][T10735] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 183.475793][T10735] CIFS: VFS: Error connecting to socket. Aborting operation. [ 183.479061][T10735] CIFS: VFS: cifs_mount failed w/return code = -2 [ 184.488641][T10746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.492908][T10746] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.499203][T10746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.508983][T10746] wireguard: wg0: Could not create IPv4 socket [ 184.513028][T10746] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 184.550333][T10748] fuse: fd is not a fuse device [ 184.550333][ T42] audit: type=1400 audit(1786095352.925:1204): avc: denied { mounton } for pid=10747 comm="syz.4.1222" path="/339/file0" dev="tmpfs" ino=1882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 184.556193][T10748] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 184.569307][T10748] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22 [ 185.139587][T10651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.207633][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 185.254366][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 185.254378][ T42] audit: type=1400 audit(1786095353.625:1208): avc: denied { write } for pid=10770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.308198][ T42] audit: type=1400 audit(1786095353.685:1209): avc: denied { write } for pid=10786 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.405269][ T42] audit: type=1400 audit(1786095353.785:1210): avc: denied { write } for pid=10792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.471885][ T42] audit: type=1400 audit(1786095353.845:1211): avc: denied { write } for pid=10797 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.640213][ T42] audit: type=1400 audit(1786095354.005:1212): avc: denied { validate_trans } for pid=10812 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.889898][T10820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.957747][ T42] audit: type=1400 audit(1786095354.335:1213): avc: denied { listen } for pid=10821 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.075722][T10826] futex_wake_op: syz.4.1244 tries to shift op by 32; fix this program [ 186.292560][T10857] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 186.382766][T10855] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1252'. [ 186.843582][T10785] Set syz1 is full, maxelem 65536 reached [ 186.877664][ T42] audit: type=1400 audit(1786095355.255:1214): avc: denied { append } for pid=10861 comm="syz.5.1254" name="uprobe_events" dev="tracefs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 187.144707][ T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 187.315873][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 187.319228][ T34] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 187.324478][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.327244][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.329632][ T34] usb 10-1: Product: syz [ 187.330916][ T34] usb 10-1: Manufacturer: syz [ 187.332394][ T34] usb 10-1: SerialNumber: syz [ 187.544784][ T34] cdc_ncm 10-1:1.0: bind() failure [ 187.548863][ T34] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 187.551044][ T34] cdc_ncm 10-1:1.1: bind() failure [ 187.554901][ T34] usb 10-1: USB disconnect, device number 8 [ 187.867181][T10874] No buffer was provided with the request [ 188.156105][T10877] ============================================================================= [ 188.157718][T10877] [ 188.157724][T10877] ====================================================== [ 188.157729][T10877] WARNING: possible circular locking dependency detected [ 188.157736][T10877] syzkaller #0 Tainted: G L [ 188.157743][T10877] ------------------------------------------------------ [ 188.157747][T10877] syz.2.1258/10877 is trying to acquire lock: [ 188.157753][T10877] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 188.157905][T10877] [ 188.157905][T10877] but task is already holding lock: [ 188.157909][T10877] ffff8880368a2d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 188.157955][T10877] [ 188.157955][T10877] which lock already depends on the new lock. [ 188.157955][T10877] [ 188.157959][T10877] [ 188.157959][T10877] the existing dependency chain (in reverse order) is: [ 188.157962][T10877] [ 188.157962][T10877] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 188.157984][T10877] lock_acquire+0x1b9/0x370 [ 188.157998][T10877] _raw_spin_lock_irqsave+0x3a/0x60 [ 188.158057][T10877] __refill_objects_node+0x120/0xaa0 [ 188.158067][T10877] refill_objects+0x58/0x410 [ 188.158077][T10877] __pcs_replace_empty_main+0x376/0x680 [ 188.158094][T10877] __kmalloc_noprof+0x66d/0x820 [ 188.158106][T10877] tty_buffer_alloc+0x29f/0x320 [ 188.158159][T10877] __tty_buffer_request_room+0x129/0x2c0 [ 188.158172][T10877] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 188.158185][T10877] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 188.158200][T10877] pty_write+0xd2/0x100 [ 188.158210][T10877] n_tty_write+0xa9e/0x1160 [ 188.158231][T10877] file_tty_write.isra.0+0x4d2/0x890 [ 188.158244][T10877] vfs_write+0x6ac/0x1050 [ 188.158265][T10877] ksys_write+0x12a/0x250 [ 188.158273][T10877] do_syscall_64+0x115/0x870 [ 188.158286][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.158308][T10877] [ 188.158308][T10877] -> #2 (&port->lock#2){-...}-{3:3}: [ 188.158326][T10877] lock_acquire+0x1b9/0x370 [ 188.158338][T10877] _raw_spin_lock_irqsave+0x3a/0x60 [ 188.158349][T10877] tty_port_tty_get+0x21/0x100 [ 188.158365][T10877] tty_port_default_wakeup+0x15/0x60 [ 188.158383][T10877] serial8250_tx_chars+0x68f/0x860 [ 188.158401][T10877] __start_tx+0x3e4/0x490 [ 188.158417][T10877] serial8250_start_tx+0x368/0x540 [ 188.158436][T10877] __uart_start+0x295/0x510 [ 188.158448][T10877] uart_write+0x211/0xb20 [ 188.158461][T10877] n_tty_write+0x431/0x1160 [ 188.158475][T10877] file_tty_write.isra.0+0x4d2/0x890 [ 188.158487][T10877] redirected_tty_write+0xd4/0x120 [ 188.158499][T10877] vfs_write+0x6ac/0x1050 [ 188.158514][T10877] ksys_write+0x12a/0x250 [ 188.158521][T10877] do_syscall_64+0x115/0x870 [ 188.158533][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.158544][T10877] [ 188.158544][T10877] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 188.158558][T10877] lock_acquire+0x1b9/0x370 [ 188.158569][T10877] _raw_spin_lock_irqsave+0x3a/0x60 [ 188.158584][T10877] serial8250_console_write+0x177/0x1a50 [ 188.158600][T10877] console_flush_one_record+0x790/0xe50 [ 188.158618][T10877] console_unlock+0x103/0x260 [ 188.158633][T10877] vprintk_emit+0x407/0x6b0 [ 188.158648][T10877] _printk+0xcf/0x110 [ 188.158657][T10877] register_console.cold+0xc0/0x248 [ 188.158668][T10877] univ8250_console_init+0x6f/0x80 [ 188.158719][T10877] console_init+0x3d5/0x5b0 [ 188.158743][T10877] start_kernel+0x314/0x490 [ 188.158758][T10877] x86_64_start_reservations+0x24/0x30 [ 188.158774][T10877] x86_64_start_kernel+0x12b/0x130 [ 188.158789][T10877] common_startup_64+0x13e/0x158 [ 188.158811][T10877] [ 188.158811][T10877] -> #0 (console_owner){-.-.}-{0:0}: [ 188.158824][T10877] check_prev_add+0xeb/0xe60 [ 188.158835][T10877] __lock_acquire+0x136c/0x1a40 [ 188.158847][T10877] lock_acquire+0x1b9/0x370 [ 188.158859][T10877] console_lock_spinning_enable+0x72/0x80 [ 188.158874][T10877] console_flush_one_record+0x739/0xe50 [ 188.158890][T10877] console_unlock+0x103/0x260 [ 188.158906][T10877] vprintk_emit+0x407/0x6b0 [ 188.158921][T10877] _printk+0xcf/0x110 [ 188.158930][T10877] __slab_bug+0x4f/0xb0 [ 188.158952][T10877] slab_bug+0x5d/0x80 [ 188.158961][T10877] __kmem_cache_shutdown.cold+0x39/0x177 [ 188.158974][T10877] kmem_cache_destroy+0x73/0x190 [ 188.159000][T10877] virtio_gpu_free_vbufs+0x38/0x80 [ 188.159023][T10877] virtio_gpu_release+0x5c/0x1c0 [ 188.159037][T10877] drm_dev_put.part.0+0xbd/0x140 [ 188.159060][T10877] drm_dev_put+0x1f/0x30 [ 188.159078][T10877] virtio_dev_remove+0xb8/0x170 [ 188.159095][T10877] device_remove+0xcb/0x180 [ 188.159127][T10877] device_release_driver_internal+0x44e/0x620 [ 188.159147][T10877] bus_remove_device+0x2bc/0x560 [ 188.159160][T10877] device_del+0x376/0x9b0 [ 188.159174][T10877] device_unregister+0x1d/0xe0 [ 188.159188][T10877] unregister_virtio_device+0x39/0x60 [ 188.159204][T10877] virtio_pci_remove+0x7c/0x110 [ 188.159216][T10877] pci_device_remove+0xb2/0x1d0 [ 188.159250][T10877] device_remove+0xcb/0x180 [ 188.159263][T10877] device_release_driver_internal+0x44e/0x620 [ 188.159279][T10877] pci_stop_bus_device+0x120/0x160 [ 188.159294][T10877] pci_stop_and_remove_bus_device+0x58/0xa0 [ 188.159307][T10877] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 188.159324][T10877] remove_store+0x123/0x140 [ 188.159345][T10877] dev_attr_store+0x58/0x80 [ 188.159359][T10877] sysfs_kf_write+0xf2/0x150 [ 188.159381][T10877] kernfs_fop_write_iter+0x3e0/0x5f0 [ 188.159396][T10877] vfs_write+0x6ac/0x1050 [ 188.159413][T10877] ksys_write+0x12a/0x250 [ 188.159422][T10877] do_syscall_64+0x115/0x870 [ 188.159435][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.159445][T10877] [ 188.159445][T10877] other info that might help us debug this: [ 188.159445][T10877] [ 188.159449][T10877] Chain exists of: [ 188.159449][T10877] console_owner --> &port->lock#2 --> &n->list_lock [ 188.159449][T10877] [ 188.159467][T10877] Possible unsafe locking scenario: [ 188.159467][T10877] [ 188.159470][T10877] CPU0 CPU1 [ 188.159473][T10877] ---- ---- [ 188.159475][T10877] lock(&n->list_lock); [ 188.159482][T10877] lock(&port->lock#2); [ 188.159491][T10877] lock(&n->list_lock); [ 188.159498][T10877] lock(console_owner); [ 188.159504][T10877] [ 188.159504][T10877] *** DEADLOCK *** [ 188.159504][T10877] [ 188.159507][T10877] 11 locks held by syz.2.1258/10877: [ 188.159513][T10877] #0: ffff888026480b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 188.159544][T10877] #1: ffff888041d9e450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 188.159587][T10877] #2: ffff88805d76e080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 188.159627][T10877] #3: ffffffff8f86ce60 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 188.159660][T10877] #4: ffff8880366e81f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 188.159693][T10877] #5: ffff88803672c1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 188.159724][T10877] #6: ffffffff8ea7a230 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 188.159755][T10877] #7: ffffffff8ed88280 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 188.159784][T10877] #8: ffff8880368a2d98 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 188.159810][T10877] #9: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 188.159833][T10877] #10: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 188.159862][T10877] [ 188.159862][T10877] stack backtrace: [ 188.159871][T10877] CPU: 3 UID: 0 PID: 10877 Comm: syz.2.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.159886][T10877] Tainted: [L]=SOFTLOCKUP [ 188.159919][T10877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.159936][T10877] Call Trace: [ 188.159946][T10877] [ 188.159951][T10877] dump_stack_lvl+0x100/0x190 [ 188.159976][T10877] print_circular_bug.cold+0x178/0x1c7 [ 188.159997][T10877] check_noncircular+0x146/0x160 [ 188.160013][T10877] check_prev_add+0xeb/0xe60 [ 188.160028][T10877] __lock_acquire+0x136c/0x1a40 [ 188.160045][T10877] lock_acquire+0x1b9/0x370 [ 188.160059][T10877] ? console_lock_spinning_enable+0x61/0x80 [ 188.160077][T10877] ? console_lock_spinning_enable+0x4a/0x80 [ 188.160095][T10877] console_lock_spinning_enable+0x72/0x80 [ 188.160111][T10877] ? console_lock_spinning_enable+0x61/0x80 [ 188.160127][T10877] console_flush_one_record+0x739/0xe50 [ 188.160144][T10877] ? __pfx_console_flush_one_record+0x10/0x10 [ 188.160162][T10877] ? is_printk_cpu_sync_owner+0x32/0x40 [ 188.160174][T10877] console_unlock+0x103/0x260 [ 188.160189][T10877] ? __pfx_console_unlock+0x10/0x10 [ 188.160205][T10877] ? do_raw_spin_unlock+0x145/0x1e0 [ 188.160221][T10877] ? _printk+0xcf/0x110 [ 188.160231][T10877] vprintk_emit+0x407/0x6b0 [ 188.160247][T10877] ? __pfx_vprintk_emit+0x10/0x10 [ 188.160265][T10877] _printk+0xcf/0x110 [ 188.160274][T10877] ? __pfx__printk+0x10/0x10 [ 188.160285][T10877] ? do_raw_spin_lock+0x128/0x260 [ 188.160302][T10877] __slab_bug+0x4f/0xb0 [ 188.160313][T10877] slab_bug+0x5d/0x80 [ 188.160324][T10877] __kmem_cache_shutdown.cold+0x39/0x177 [ 188.160338][T10877] kmem_cache_destroy+0x73/0x190 [ 188.160355][T10877] virtio_gpu_free_vbufs+0x38/0x80 [ 188.160366][T10877] ? __pfx_virtio_gpu_release+0x10/0x10 [ 188.160380][T10877] virtio_gpu_release+0x5c/0x1c0 [ 188.160393][T10877] ? __pfx_virtio_gpu_release+0x10/0x10 [ 188.160407][T10877] drm_dev_put.part.0+0xbd/0x140 [ 188.160421][T10877] drm_dev_put+0x1f/0x30 [ 188.160433][T10877] virtio_dev_remove+0xb8/0x170 [ 188.160448][T10877] ? __pfx_virtio_dev_remove+0x10/0x10 [ 188.160463][T10877] device_remove+0xcb/0x180 [ 188.160476][T10877] device_release_driver_internal+0x44e/0x620 [ 188.160493][T10877] bus_remove_device+0x2bc/0x560 [ 188.160506][T10877] ? __pfx_bus_remove_device+0x10/0x10 [ 188.160518][T10877] ? __pfx_device_remove_attrs+0x10/0x10 [ 188.160531][T10877] device_del+0x376/0x9b0 [ 188.160545][T10877] ? __pfx_device_del+0x10/0x10 [ 188.160557][T10877] ? __pfx___might_resched+0x10/0x10 [ 188.160580][T10877] ? __pfx_pci_device_is_present+0x10/0x10 [ 188.160597][T10877] device_unregister+0x1d/0xe0 [ 188.160610][T10877] unregister_virtio_device+0x39/0x60 [ 188.160625][T10877] virtio_pci_remove+0x7c/0x110 [ 188.160637][T10877] pci_device_remove+0xb2/0x1d0 [ 188.160650][T10877] ? __pfx_pci_device_remove+0x10/0x10 [ 188.160662][T10877] device_remove+0xcb/0x180 [ 188.160677][T10877] device_release_driver_internal+0x44e/0x620 [ 188.160696][T10877] pci_stop_bus_device+0x120/0x160 [ 188.160711][T10877] pci_stop_and_remove_bus_device+0x58/0xa0 [ 188.160725][T10877] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 188.160738][T10877] remove_store+0x123/0x140 [ 188.160752][T10877] ? __pfx_remove_store+0x10/0x10 [ 188.160766][T10877] ? find_held_lock+0x2b/0x80 [ 188.160775][T10877] ? sysfs_file_kobj+0xe4/0x290 [ 188.160790][T10877] ? sysfs_file_kobj+0xe4/0x290 [ 188.160805][T10877] ? __pfx_remove_store+0x10/0x10 [ 188.160818][T10877] dev_attr_store+0x58/0x80 [ 188.160834][T10877] ? __pfx_dev_attr_store+0x10/0x10 [ 188.160848][T10877] sysfs_kf_write+0xf2/0x150 [ 188.160865][T10877] kernfs_fop_write_iter+0x3e0/0x5f0 [ 188.160879][T10877] ? __pfx_sysfs_kf_write+0x10/0x10 [ 188.160895][T10877] vfs_write+0x6ac/0x1050 [ 188.160910][T10877] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 188.160924][T10877] ? __pfx_vfs_write+0x10/0x10 [ 188.160943][T10877] ksys_write+0x12a/0x250 [ 188.160951][T10877] ? __pfx_ksys_write+0x10/0x10 [ 188.160962][T10877] do_syscall_64+0x115/0x870 [ 188.160975][T10877] ? clear_bhb_loop+0x70/0xc0 [ 188.160987][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.160997][T10877] RIP: 0033:0x7fd703b9e0d9 [ 188.161007][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.161017][T10877] RSP: 002b:00007fd704b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.161028][T10877] RAX: ffffffffffffffda RBX: 00007fd703e25fa0 RCX: 00007fd703b9e0d9 [ 188.161035][T10877] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 188.161041][T10877] RBP: 00007fd703c35024 R08: 0000000000000000 R09: 0000000000000000 [ 188.161047][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.161053][T10877] R13: 00007fd703e26038 R14: 00007fd703e25fa0 R15: 00007ffde300d648 [ 188.161062][T10877] [ 188.543285][T10877] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 188.546651][T10877] ----------------------------------------------------------------------------- [ 188.546651][T10877] [ 188.550151][T10877] Object 0xffff888059bbac08 @offset=3080 [ 188.551926][T10877] Object 0xffff888059bbad20 @offset=3360 [ 188.553599][T10877] Slab 0xffffea000166ee80 objects=29 used=2 fp=0xffff888059bba000 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 188.557978][T10877] ------------[ cut here ]------------ [ 188.559744][T10877] 1 [ 188.559751][T10877] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#3: syz.2.1258/10877 [ 188.563184][T10877] Modules linked in: [ 188.564442][T10877] CPU: 3 UID: 0 PID: 10877 Comm: syz.2.1258 Tainted: G B L syzkaller #0 PREEMPT(full) [ 188.567751][T10877] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 188.569524][T10877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.572534][T10877] RIP: 0010:__slab_err+0x15/0x20 [ 188.574010][T10877] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 188.579736][T10877] RSP: 0018:ffffc90005c1f738 EFLAGS: 00010046 [ 188.581569][T10877] RAX: 0000000000080000 RBX: ffffc90005c1f788 RCX: ffffc90007161000 [ 188.583993][T10877] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88803aba2540 [ 188.586453][T10877] RBP: ffff8880368a2d98 R08: 0000000000000007 R09: 0000000000000000 [ 188.588982][T10877] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 188.591472][T10877] R13: ffff888059bbbfb8 R14: ffff8880368a2d80 R15: ffffea000166ee80 [ 188.593945][T10877] FS: 00007fd704b276c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 188.596734][T10877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.598825][T10877] CR2: 0000200000000100 CR3: 0000000055969000 CR4: 0000000000352ef0 [ 188.601342][T10877] Call Trace: [ 188.602432][T10877] [ 188.603452][T10877] __kmem_cache_shutdown.cold+0x16e/0x177 [ 188.605259][T10877] kmem_cache_destroy+0x73/0x190 [ 188.606829][T10877] virtio_gpu_free_vbufs+0x38/0x80 [ 188.608483][T10877] ? __pfx_virtio_gpu_release+0x10/0x10 [ 188.610250][T10877] virtio_gpu_release+0x5c/0x1c0 [ 188.611817][T10877] ? __pfx_virtio_gpu_release+0x10/0x10 [ 188.613564][T10877] drm_dev_put.part.0+0xbd/0x140 [ 188.615131][T10877] drm_dev_put+0x1f/0x30 [ 188.616493][T10877] virtio_dev_remove+0xb8/0x170 [ 188.618006][T10877] ? __pfx_virtio_dev_remove+0x10/0x10 [ 188.619723][T10877] device_remove+0xcb/0x180 [ 188.621148][T10877] device_release_driver_internal+0x44e/0x620 [ 188.623017][T10877] bus_remove_device+0x2bc/0x560 [ 188.624555][T10877] ? __pfx_bus_remove_device+0x10/0x10 [ 188.626164][T10877] ? __pfx_device_remove_attrs+0x10/0x10 [ 188.627929][T10877] device_del+0x376/0x9b0 [ 188.629345][T10877] ? __pfx_device_del+0x10/0x10 [ 188.630904][T10877] ? __pfx___might_resched+0x10/0x10 [ 188.632587][T10877] ? __pfx_pci_device_is_present+0x10/0x10 [ 188.634423][T10877] device_unregister+0x1d/0xe0 [ 188.635951][T10877] unregister_virtio_device+0x39/0x60 [ 188.637652][T10877] virtio_pci_remove+0x7c/0x110 [ 188.639242][T10877] pci_device_remove+0xb2/0x1d0 [ 188.640810][T10877] ? __pfx_pci_device_remove+0x10/0x10 [ 188.642525][T10877] device_remove+0xcb/0x180 [ 188.643975][T10877] device_release_driver_internal+0x44e/0x620 [ 188.645891][T10877] pci_stop_bus_device+0x120/0x160 [ 188.647502][T10877] pci_stop_and_remove_bus_device+0x58/0xa0 [ 188.649404][T10877] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 188.651462][T10877] remove_store+0x123/0x140 [ 188.652928][T10877] ? __pfx_remove_store+0x10/0x10 [ 188.654517][T10877] ? find_held_lock+0x2b/0x80 [ 188.656009][T10877] ? sysfs_file_kobj+0xe4/0x290 [ 188.657570][T10877] ? sysfs_file_kobj+0xe4/0x290 [ 188.659167][T10877] ? __pfx_remove_store+0x10/0x10 [ 188.660783][T10877] dev_attr_store+0x58/0x80 [ 188.662222][T10877] ? __pfx_dev_attr_store+0x10/0x10 [ 188.663856][T10877] sysfs_kf_write+0xf2/0x150 [ 188.665330][T10877] kernfs_fop_write_iter+0x3e0/0x5f0 [ 188.666980][T10877] ? __pfx_sysfs_kf_write+0x10/0x10 [ 188.668669][T10877] vfs_write+0x6ac/0x1050 [ 188.670059][T10877] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 188.671904][T10877] ? __pfx_vfs_write+0x10/0x10 [ 188.673409][T10877] ksys_write+0x12a/0x250 [ 188.674777][T10877] ? __pfx_ksys_write+0x10/0x10 [ 188.676325][T10877] do_syscall_64+0x115/0x870 [ 188.677802][T10877] ? clear_bhb_loop+0x70/0xc0 [ 188.679325][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.681200][T10877] RIP: 0033:0x7fd703b9e0d9 [ 188.682608][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.688613][T10877] RSP: 002b:00007fd704b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.691206][T10877] RAX: ffffffffffffffda RBX: 00007fd703e25fa0 RCX: 00007fd703b9e0d9 [ 188.693681][T10877] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 188.696134][T10877] RBP: 00007fd703c35024 R08: 0000000000000000 R09: 0000000000000000 [ 188.698615][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.701107][T10877] R13: 00007fd703e26038 R14: 00007fd703e25fa0 R15: 00007ffde300d648 [ 188.703509][T10877] [ 188.704506][T10877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.706774][T10877] CPU: 3 UID: 0 PID: 10877 Comm: syz.2.1258 Tainted: G B L syzkaller #0 PREEMPT(full) [ 188.710191][T10877] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 188.711930][T10877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.715091][T10877] Call Trace: [ 188.716162][T10877] [ 188.717102][T10877] dump_stack_lvl+0x100/0x190 [ 188.718629][T10877] vpanic+0x552/0x970 [ 188.719932][T10877] ? __pfx_vpanic+0x10/0x10 [ 188.721366][T10877] ? lock_release+0x24d/0x310 [ 188.722856][T10877] panic+0xd1/0xe0 [ 188.724058][T10877] ? __pfx_panic+0x10/0x10 [ 188.725464][T10877] check_panic_on_warn.cold+0x19/0x34 [ 188.727144][T10877] ? __slab_err+0x15/0x20 [ 188.728541][T10877] __warn.cold+0x191/0x318 [ 188.729974][T10877] __report_bug+0x30f/0x440 [ 188.731425][T10877] ? __slab_err+0x15/0x20 [ 188.732787][T10877] ? __pfx___report_bug+0x10/0x10 [ 188.734422][T10877] ? irq_work_queue+0xce/0x100 [ 188.735957][T10877] ? __wake_up_klogd+0xe2/0x140 [ 188.737472][T10877] ? vprintk_emit+0x1c9/0x6b0 [ 188.738987][T10877] ? __pfx_vprintk_emit+0x10/0x10 [ 188.740608][T10877] ? __slab_err+0x15/0x20 [ 188.741963][T10877] report_bug+0xb2/0x220 [ 188.743340][T10877] ? __slab_err+0x15/0x20 [ 188.744716][T10877] handle_bug+0x16a/0x2a0 [ 188.746070][T10877] exc_invalid_op+0x17/0x50 [ 188.747407][T10877] asm_exc_invalid_op+0x1a/0x20 [ 188.748918][T10877] RIP: 0010:__slab_err+0x15/0x20 [ 188.750384][T10877] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 188.756134][T10877] RSP: 0018:ffffc90005c1f738 EFLAGS: 00010046 [ 188.758036][T10877] RAX: 0000000000080000 RBX: ffffc90005c1f788 RCX: ffffc90007161000 [ 188.760589][T10877] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff88803aba2540 [ 188.763068][T10877] RBP: ffff8880368a2d98 R08: 0000000000000007 R09: 0000000000000000 [ 188.765366][T10877] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 188.767673][T10877] R13: ffff888059bbbfb8 R14: ffff8880368a2d80 R15: ffffea000166ee80 [ 188.770175][T10877] ? add_taint+0x6d/0xb0 [ 188.771505][T10877] ? __slab_err+0x14/0x20 [ 188.772821][T10877] __kmem_cache_shutdown.cold+0x16e/0x177 [ 188.774598][T10877] kmem_cache_destroy+0x73/0x190 [ 188.776095][T10877] virtio_gpu_free_vbufs+0x38/0x80 [ 188.777672][T10877] ? __pfx_virtio_gpu_release+0x10/0x10 [ 188.779341][T10877] virtio_gpu_release+0x5c/0x1c0 [ 188.780766][T10877] ? __pfx_virtio_gpu_release+0x10/0x10 [ 188.782510][T10877] drm_dev_put.part.0+0xbd/0x140 [ 188.784076][T10877] drm_dev_put+0x1f/0x30 [ 188.785406][T10877] virtio_dev_remove+0xb8/0x170 [ 188.786927][T10877] ? __pfx_virtio_dev_remove+0x10/0x10 [ 188.788657][T10877] device_remove+0xcb/0x180 [ 188.790106][T10877] device_release_driver_internal+0x44e/0x620 [ 188.792011][T10877] bus_remove_device+0x2bc/0x560 [ 188.793592][T10877] ? __pfx_bus_remove_device+0x10/0x10 [ 188.795211][T10877] ? __pfx_device_remove_attrs+0x10/0x10 [ 188.796941][T10877] device_del+0x376/0x9b0 [ 188.798324][T10877] ? __pfx_device_del+0x10/0x10 [ 188.799948][T10877] ? __pfx___might_resched+0x10/0x10 [ 188.801614][T10877] ? __pfx_pci_device_is_present+0x10/0x10 [ 188.803474][T10877] device_unregister+0x1d/0xe0 [ 188.805003][T10877] unregister_virtio_device+0x39/0x60 [ 188.806689][T10877] virtio_pci_remove+0x7c/0x110 [ 188.808225][T10877] pci_device_remove+0xb2/0x1d0 [ 188.809782][T10877] ? __pfx_pci_device_remove+0x10/0x10 [ 188.811488][T10877] device_remove+0xcb/0x180 [ 188.812995][T10877] device_release_driver_internal+0x44e/0x620 [ 188.814892][T10877] pci_stop_bus_device+0x120/0x160 [ 188.816503][T10877] pci_stop_and_remove_bus_device+0x58/0xa0 [ 188.818358][T10877] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 188.820463][T10877] remove_store+0x123/0x140 [ 188.821902][T10877] ? __pfx_remove_store+0x10/0x10 [ 188.823510][T10877] ? find_held_lock+0x2b/0x80 [ 188.825011][T10877] ? sysfs_file_kobj+0xe4/0x290 [ 188.826545][T10877] ? sysfs_file_kobj+0xe4/0x290 [ 188.828090][T10877] ? __pfx_remove_store+0x10/0x10 [ 188.829722][T10877] dev_attr_store+0x58/0x80 [ 188.831177][T10877] ? __pfx_dev_attr_store+0x10/0x10 [ 188.832846][T10877] sysfs_kf_write+0xf2/0x150 [ 188.834310][T10877] kernfs_fop_write_iter+0x3e0/0x5f0 [ 188.835981][T10877] ? __pfx_sysfs_kf_write+0x10/0x10 [ 188.837893][T10877] vfs_write+0x6ac/0x1050 [ 188.839428][T10877] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 188.841287][T10877] ? __pfx_vfs_write+0x10/0x10 [ 188.843039][T10877] ksys_write+0x12a/0x250 [ 188.844858][T10877] ? __pfx_ksys_write+0x10/0x10 [ 188.846913][T10877] do_syscall_64+0x115/0x870 [ 188.848606][T10877] ? clear_bhb_loop+0x70/0xc0 [ 188.850113][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.851963][T10877] RIP: 0033:0x7fd703b9e0d9 [ 188.853391][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.859355][T10877] RSP: 002b:00007fd704b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.861940][T10877] RAX: ffffffffffffffda RBX: 00007fd703e25fa0 RCX: 00007fd703b9e0d9 [ 188.864445][T10877] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 188.866895][T10877] RBP: 00007fd703c35024 R08: 0000000000000000 R09: 0000000000000000 [ 188.869383][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.871835][T10877] R13: 00007fd703e26038 R14: 00007fd703e25fa0 R15: 00007ffde300d648 [ 188.874201][T10877] [ 188.875785][T10877] Kernel Offset: disabled [ 188.877059][T10877] Rebooting in 86400 seconds..