last executing test programs: 1m12.169347695s ago: executing program 0 (id=286): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000540)=""/96, 0x60) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f00003cf000/0x4000)=nil, 0x4000, 0x300000e, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 1m11.329238813s ago: executing program 0 (id=301): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r5, 0x81}, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) 1m11.19096376s ago: executing program 0 (id=304): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) setsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000100)="9431b10402c260e949177d3f80afa507d0", 0x11) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x40000) (async) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x240408d1}, 0x30000000) 1m11.124828379s ago: executing program 0 (id=305): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x6, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x16, 0x17, 0x2, {0xd, './file0/file1'}}, 0x16) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x3f) ptrace(0x4208, r2) tkill(r2, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4095, 0xffffffffffffff9c}, {&(0x7f0000000000)=""/67, 0x50}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2000000}, 0x8000}], 0x1, 0x2129, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000004c0)=[r5, r5, r5, r5], &(0x7f0000000500)=[0x1], &(0x7f0000000200), &(0x7f00000003c0)=[0x5, 0x7, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x7, 0x25], 0x0, 0x1}) 1m11.054725032s ago: executing program 0 (id=306): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x8, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe0}, {0x1, 0xd}, {0xd, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x8, 0x28, [0xa, 0x2, 0xd118, 0x8], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000b"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m10.784220614s ago: executing program 0 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xf5, &(0x7f0000000280)=""/245, 0x41100, 0xa, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1m10.757464328s ago: executing program 32 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xf5, &(0x7f0000000280)=""/245, 0x41100, 0xa, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 4.410886362s ago: executing program 3 (id=1323): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f00000002c0)=""/133, 0x85}, &(0x7f0000000380), 0x75}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@setneightbl={0x0, 0x43, 0x800, 0x70bd25, 0x25dfdbfb, {0x7}, [@NDTA_THRESH1={0x0, 0x2, 0x2}, @NDTA_THRESH3={0x0, 0x4, 0x3}, @NDTA_THRESH1={0x0, 0x2, 0x5}, @NDTA_THRESH2={0x0, 0x3, 0xfffffc00}, @NDTA_NAME={0x0, 0x1, '.]Z\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xe9, "3bd946ffe60a1b48afe03c214b00beb5c4130c0bd4751d8292ac352d4015e0a73dbcdfae14147af7caee1e164579f69785435a35f9897ed887367c295a1fc387ece1e812e20c3b5f4c2ac9c258ff176492f5c95680540435beb9b7a301346df00e41f55a8760e2e55cc57a07a4afb5c617a5a17174d3ce4ca1c6ca573003174c73133bbe4a9981ab8d606fd980d2499c753b7e8d32240b463b625db2e0c5e8d130ac1f510e762bc62d5d0e3e8e30d8ed0a85859d4bd64b247d53a5897e5746e287e8c89ba74ca3c63b082d7cceaf19311820db39aa5cf17a878b5584351c091120e56a0b1befc8cd9c"}, &(0x7f0000000180)=0xf1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x9}, &(0x7f0000000240)=0x8) 4.407936455s ago: executing program 3 (id=1324): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f0000000080)={0x2, 0x200, &(0x7f0000000040)}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/4096) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001100)={0x2, 0x0, &(0x7f00000010c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001140)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001280)={&(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000012c0)={r1, r2, r3, 0xff, 0x400, 0x1, 0x4, 0x200, 0x4, 0x7, 0x5, 0x80}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000001380)={&(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340)=[{}], r1, 0x0, '\x00', 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000013c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001400)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000001480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000014c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001500)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000001540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000015c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000001680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001780)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000017c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001880)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000018c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001980)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000019c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001a00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001a80)={0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r0, 0xc0186449, &(0x7f0000001c40)={0x0, 0x0, {0x28, 0x6, &(0x7f0000001b40)=[{0x0, 0x40, 0x11b08b658f7d9400, 0x9, 0x0, {0x10, 0x2, &(0x7f0000001440)=[{0x0, r4, 0x1}, {0x1, r5, 0x9}]}}, {0x3a5f1b3d, 0x2754a308, 0x72ef40d2cfec7f40, 0x1cb, 0x0, {0x10, 0x7, &(0x7f0000001600)=[{0x80000000, r6, 0x1}, {0xff, r7, 0x2}, {0x80000000, r8, 0x2}, {0x0, 0x0, 0x10000}, {0x80000000, r9, 0x3ff}, {0x800000ff, r10, 0xb0}, {0x80000000, r11, 0x1}]}}, {0x8, 0xfd315018, 0x7c8e9f2cd9f5400, 0xe, 0x0, {0x10, 0x3, &(0x7f00000016c0)=[{0x0, r12, 0x8}, {0x80000000, 0x0, 0x101}, {0x1, 0x0, 0x40}]}}, {0x6, 0x94569780, 0x2332f92393a72ec0, 0x80000000, 0x0, {0x10, 0x6, &(0x7f0000001800)=[{0xff, r13, 0xc0}, {0x0, r14, 0xfffffffffffffff7}, {0x80000000, 0x0, 0x7}, {0x0, r15, 0x3}, {0xff, r16, 0xfffffffeffffffff}, {0x80000000, 0x0, 0x3}]}}, {0x8, 0xb022e490, 0xd438f0e4c453c540, 0x7, 0x0, {0x10, 0x3, &(0x7f0000001940)=[{0x1, r17, 0x80}, {0x1, r18, 0x80000001}, {0x1, r19, 0x5}]}}, {0x8, 0xa4b7f010, 0x8f5c7ec4d7530280, 0x2, 0x0, {0x10, 0x6, &(0x7f0000001ac0)=[{0x0, r20, 0x3}, {0xff, r21, 0x8b97}, {0x1, r22, 0xf}, {0x0, r23, 0x47}, {0x0, r24, 0x2000000}, {0x80000000, 0x0, 0x3}]}}]}}) 4.284483213s ago: executing program 3 (id=1329): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000640)) syz_80211_inject_frame(&(0x7f0000000680)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nodev\x00', &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 3.593314344s ago: executing program 3 (id=1337): r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x280842, 0x0) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) epoll_create1(0x0) (async) r5 = epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0xfff8, 0xfffd}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000580)={0xa0002008}) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x2, 0x30, 0x8a49, 0x1, 0x0, 0x6, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r9, &(0x7f0000000800)='file ?evio.c +', 0xe) 3.413925491s ago: executing program 3 (id=1338): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x4, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x0, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x81, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x1}, {0x4, 0x8, 0xf6, '\x00', 0x4}, {0x1, 0xff, 0xf5, '\x00', 0x2}, {0x4, 0x7, 0x8, '\x00', 0x5}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0x1, 0x42, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x4, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x46, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x7}, {0xf9, 0x5, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x8, '\x00', 0x5e}, {0x2, 0x9, 0xee, '\x00', 0x1}, {0xf, 0x4c, 0xf7, '\x00', 0x8}]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}, 0x1, 0x0, 0x0, 0x28040000}, 0x4000000) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022224a1c000000960111eb010003000000002a90a0753883c83e25031bddc940503a0c689329245129"], 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/95) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?/o\xdc\xea\x95\x9a\\\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf60d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xde75}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40ba3da8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0xf8}}, 0x40) (async) accept4$x25(r9, 0x0, 0x0, 0x80000) 2.854221563s ago: executing program 2 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) (async) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x8, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x8, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.85402458s ago: executing program 4 (id=1348): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x800, {0x7, 0x5, 0x1, 0x1}}}]}, 0x38}}, 0x0) 2.763253703s ago: executing program 4 (id=1350): prctl$PR_CAPBSET_DROP(0x18, 0xe) prctl$PR_CAPBSET_DROP(0x18, 0x3ff) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20201, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d19, &(0x7f0000000040)=0x23) (async) prctl$PR_CAPBSET_DROP(0x18, 0x28) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$FIONCLEX(r0, 0x5450) (async) prctl$PR_CAPBSET_DROP(0x18, 0x7) (async) r2 = open(&(0x7f0000000200)='./file0\x00', 0x109400, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000240)={{0x1, 0x7ffffdfe, 0x8, 0x41, 0x1, 0x7}, 0x274, [0x6, 0x6, 0xffff, 0x6, 0x10, 0x2, 0x5, 0x6, 0x7, 0xeeb, 0x85, 0x4, 0x4, 0x0, 0x7f, 0xc, 0xa0000, 0x9, 0x5, 0x2, 0xfffffff4, 0x8, 0x27a, 0xffffffff, 0x10001, 0x4, 0xffffffff, 0x1, 0x2a1, 0x1, 0x4, 0x9, 0x9, 0x8001, 0x1, 0x10000, 0xc, 0x7fffffff, 0x8, 0x7, 0x0, 0x7f, 0xc9bd, 0x8, 0xa048, 0x7, 0x5, 0x5, 0x4, 0x8000, 0x8, 0x3, 0x8, 0x8c73, 0x9, 0x8, 0x5, 0x8, 0x3, 0x9f, 0x800, 0x6, 0xf, 0x6, 0x8b, 0x4, 0x401, 0x0, 0x4, 0x33dd, 0x40, 0x1, 0x7, 0x400, 0x3a000000, 0x2, 0x7, 0xe29, 0x6, 0x1, 0x0, 0x1, 0x800, 0x3, 0x6, 0x42d, 0x0, 0x3ff, 0x4, 0x8c2, 0x10000, 0x0, 0x2, 0x0, 0x5, 0xb8, 0x0, 0x3, 0xab0, 0x100, 0xfffffffe, 0x7, 0x3, 0x10, 0x0, 0x8, 0xb, 0x10000, 0x5, 0x7, 0x80000001, 0x5, 0x42, 0x9, 0x7fff, 0x0, 0xb74, 0x6, 0x8, 0x9, 0x4, 0xae80, 0xe2a, 0xffffffd6, 0x9, 0x52ca, 0x2d, 0x7f, 0x7f, 0x2, 0x0, 0x53, 0x964, 0x1, 0x10001, 0x0, 0x7f, 0x1, 0x400, 0x1ff, 0x2, 0x6, 0xb3, 0x3ff, 0x4, 0x3, 0x5, 0xfffffffe, 0x5, 0x8, 0x7, 0x5, 0xb, 0x4, 0x5, 0x5, 0x5, 0x4e0, 0x9, 0xffff, 0x10, 0x7f, 0xa8fc0000, 0x9, 0x80000000, 0x3, 0xd, 0x9, 0x7, 0xb, 0x6, 0x1, 0x21b9, 0x44, 0x5, 0x5, 0x7, 0x1, 0x1000, 0x80000001, 0x0, 0x1, 0x1, 0x3, 0x0, 0x5, 0x58, 0xb97, 0x7, 0xffffffbd, 0x0, 0x7, 0x80000000, 0x5, 0x1, 0x9, 0x3, 0x3, 0x9, 0x1, 0x937, 0x0, 0x7, 0x45, 0x1, 0xa86, 0x7, 0xffff, 0x79d, 0x10000, 0x2, 0xc, 0xfff, 0xe, 0x1, 0x94, 0x989e, 0xc36, 0x6, 0x8, 0x49a0a6b4, 0xfff, 0x3, 0x9, 0xfffffe01, 0xfff, 0x7ff, 0x5, 0x80000001, 0x1c31, 0x5, 0x7, 0x1cb8, 0x8001, 0x3274583, 0xd0000, 0x10, 0xffff, 0x3ff, 0x7, 0xff, 0x9, 0x7fffffff, 0x2, 0x11f274aa, 0x4f0, 0x1, 0x165, 0xb, 0xc8, 0x8, 0x5, 0x3, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x0, 0x81, 0x0, 0x4, 0xd, 0x70a, 0x7, 0x382e, 0x7fff, 0x2, 0x1, 0x0, 0x56c4, 0x40, 0x1, 0x7a2e, 0xfff, 0x4c39, 0x0, 0x23, 0x10, 0xfffffff8, 0xfffffff9, 0x1, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x0, 0x8, 0x6, 0xe8, 0x1, 0x1, 0xe, 0xdc, 0x1, 0x9, 0x4, 0x9, 0xfffffff7, 0x6, 0x8001, 0xf, 0xd, 0x6, 0x3a588d30, 0x80000001, 0x1ff, 0x9, 0x3, 0x4, 0x0, 0x401, 0x7f, 0x4963e000, 0xe, 0x9, 0x80000001, 0x6, 0x7, 0x7, 0xf2c, 0x7, 0x677, 0xff, 0x4, 0xb7a0, 0x200, 0x3, 0x5, 0x8, 0x40, 0x4, 0xaced, 0xfb27, 0x5, 0xe9d, 0x77, 0x0, 0x2, 0x0, 0x8, 0x7, 0x7, 0x7, 0xf, 0xfff, 0x1, 0xfffffffa, 0x8, 0x4, 0x5, 0x401, 0x9, 0x8001, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffe6b, 0x1, 0x7, 0xcd, 0x94, 0x321, 0xfb6c, 0x9, 0x1, 0x0, 0x5, 0x5, 0xfffff800, 0x3, 0x8a6df00, 0x4, 0xfffffffa, 0x9, 0x8, 0x7, 0x80000000, 0x7, 0x5, 0x1000, 0x7, 0x4, 0x3ea, 0xffc00000, 0x4d9d, 0xe, 0x9, 0xfff, 0x6, 0x1, 0x8, 0x7e, 0x7fffffff, 0x0, 0x2, 0xe34, 0x7, 0xfffffff7, 0x7fff, 0x10, 0x10001, 0xaf, 0x6, 0x3, 0x478, 0x7fff, 0x6, 0x4, 0x63e3, 0x6, 0x7, 0xda2, 0xd, 0x9, 0x3, 0x0, 0x8, 0x4, 0x6, 0x7ff, 0x5, 0xffff0001, 0xfff, 0xa000000, 0x9, 0x7b657857, 0x10, 0x0, 0x3, 0x3, 0xf, 0x7, 0x1, 0xffff, 0x2, 0x6, 0xc, 0x1, 0x2, 0x9, 0x5, 0x5, 0x9, 0x7fff, 0x80000000, 0x4824, 0x7f, 0x8, 0x10001, 0x10000, 0x0, 0xeb6, 0xff, 0x2, 0x7, 0x8, 0x8000, 0x1959, 0x400, 0x0, 0x57, 0xa, 0x7, 0x2, 0x1, 0xf0, 0x7, 0x6, 0x7fffffff, 0x6, 0x400, 0x8, 0x8, 0x672, 0x7, 0x4, 0x400, 0x7, 0x3, 0x2, 0x80000000, 0x3, 0x8dd, 0x89, 0x5, 0xc, 0x7, 0x7, 0xbb, 0x4b7, 0xe00000, 0x1, 0x6, 0x1, 0x40, 0x3ff, 0x1000, 0xd, 0xa, 0x4, 0x7ff, 0x0, 0x5, 0x0, 0x2, 0xed, 0x1, 0x81, 0x5, 0xa000, 0xffffffb7, 0x3, 0x9, 0x8000, 0xfffffffc, 0x9, 0x0, 0x5, 0xe3, 0x401, 0x5, 0x3, 0x0, 0x6, 0x4, 0x3, 0x2, 0x7fffffff, 0x1, 0x10001, 0x0, 0x2, 0x10, 0x6, 0x3, 0x4, 0x89d8, 0xc, 0x80, 0x4, 0x7, 0xa533, 0xb, 0xe, 0x36f, 0x9, 0x5, 0xd, 0x8, 0x80000001, 0x8, 0x0, 0x40, 0x6, 0x7, 0x8728, 0x9, 0xc, 0x8, 0x101, 0x4, 0x1ff, 0xa, 0xb, 0xc3, 0x0, 0x81, 0x1, 0xffff, 0x10001, 0xf6, 0x6, 0xfd22, 0x1, 0x200, 0x0, 0xfffffffb, 0xfffffff0, 0x81, 0x4, 0x4, 0x0, 0x4, 0x200, 0xc, 0x9, 0x41cd, 0x8, 0x81, 0x6fc4, 0x2, 0x6, 0x5, 0x1000, 0x14, 0x5, 0x7, 0xff, 0x6, 0xbb8ab05, 0x19ea5e05, 0x40, 0x8, 0x3, 0x8001, 0x7fffffff, 0xfa, 0xf, 0x1, 0x9, 0x7f, 0x2, 0x3, 0x7, 0x200, 0x9b4e, 0x800, 0xf, 0x3ff, 0x0, 0x8cb0, 0x3, 0x2, 0x8, 0x4c, 0xa, 0xeba, 0x46, 0x4, 0x2, 0x8001, 0xc, 0xf, 0x10001, 0x3ff, 0x8001, 0x5, 0x8, 0xa, 0x7, 0x6, 0x6, 0x5, 0xf786, 0xe7a4, 0x10, 0x8, 0xf, 0x3ff, 0x5, 0x8000, 0xffff, 0x10, 0x8, 0x4, 0x0, 0xff, 0x3, 0x1, 0x3, 0xff, 0x3, 0x1, 0x8, 0x667, 0x3, 0x4, 0x1, 0x40, 0xf0d, 0x2d, 0x433e, 0x80000001, 0x8, 0x2, 0x800, 0x9, 0x9, 0x0, 0x274a3097, 0x6, 0x85, 0xffffb27d, 0x81, 0x8, 0x40, 0x5a4, 0x9004, 0x1ff, 0xb, 0x7, 0xf64, 0x7, 0xe6, 0xffffffff, 0x4, 0x3, 0x8, 0x2, 0xfffffffa, 0x2, 0x9, 0x101, 0x8, 0xe7, 0x401, 0x7823, 0x1, 0x7, 0x10, 0x6, 0x8, 0x8, 0xffffc23e, 0xc62, 0x800000, 0x1, 0x80, 0x8, 0x3, 0x7fff, 0xceb, 0x6, 0xfffffef8, 0x19, 0x7ff, 0x100, 0x3, 0xfffffff4, 0xffffff0b, 0x7, 0xc, 0x3, 0x8, 0x9, 0x80000000, 0x3, 0x0, 0x1, 0x9, 0xbc, 0x2, 0x10, 0xfffffffb, 0xeca8, 0x9, 0x200, 0x6, 0x7, 0x6, 0x3ff, 0x60e6, 0x2, 0x7, 0x8, 0x567, 0x7, 0x9, 0x8, 0x6, 0x101, 0x8, 0x1, 0x2, 0xf, 0x45, 0x7, 0x7, 0x5c3bd384, 0x2a5a, 0x8, 0x1, 0xd, 0x7, 0x2, 0x50, 0x7fff, 0x7, 0x5, 0x4, 0x5, 0x7, 0x3, 0x9, 0x1ff, 0x1, 0x2, 0x800, 0x0, 0x1, 0x80, 0x0, 0x1, 0x2, 0x1, 0x0, 0x7, 0x9, 0x3, 0x75800, 0xbc, 0x2000, 0x2, 0x2, 0x9c, 0x2, 0x5c8d, 0x5, 0x3, 0xd8e, 0x0, 0x5, 0x1, 0x4, 0x4, 0x3f4, 0x9, 0x2, 0x9, 0x21f, 0x200, 0xfffff15e, 0x6, 0x1, 0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x0, 0x4, 0x1000, 0x8, 0x8001, 0x4, 0x1, 0x40000000, 0xc05, 0x68c, 0x4, 0x6, 0x2, 0x40, 0x200, 0x9, 0x9, 0x7, 0x400000, 0x6, 0x9, 0x9, 0x62f, 0x1, 0x3, 0x4f, 0x0, 0x4, 0x1ff, 0x6, 0x10, 0x6, 0x35ea61a, 0x3, 0xffffff01, 0x2, 0x7f, 0xd, 0xffffffff, 0x4, 0x18000, 0x70c, 0xf11, 0x80000000, 0x0, 0x3, 0xe, 0x2, 0xf, 0x7, 0x80000001, 0x0, 0x6, 0x7, 0x80, 0x3f, 0x8, 0x323c, 0x0, 0x7, 0x9, 0x0, 0x8000, 0x6, 0xad, 0x9, 0x3, 0x6, 0x2, 0xa, 0x1, 0xb, 0x3, 0xffff, 0x7, 0x1, 0x3, 0x0, 0x400, 0xc, 0x8, 0x3, 0x7, 0x3, 0x4, 0x7ff, 0xffffffff, 0x156d, 0x3, 0x8001, 0x6, 0x80000001, 0x36, 0x8, 0x7, 0x1, 0xccfa, 0x0, 0x9, 0x3, 0xff, 0x2, 0x6, 0x8, 0x1000, 0x5c8c, 0x80, 0x2, 0x2, 0x20, 0x7, 0x8, 0x10001, 0x9, 0x10, 0x2, 0xffff, 0x2, 0x4, 0x6, 0xe, 0x2b4e0f90, 0x101, 0x7ff, 0x16, 0x1, 0xfffff0b7, 0x81, 0x4, 0x81, 0x9, 0x8, 0xa73, 0x3, 0x1, 0x6, 0x4, 0x4, 0xffffff81, 0x0, 0x7, 0x9, 0x1, 0x2c2, 0x1, 0x2, 0xfffff000, 0x1, 0x8, 0x8c3, 0x6, 0xf3, 0x82, 0x3e9c, 0xa4, 0x8000, 0x6, 0x7, 0x0, 0x81, 0x9, 0x8, 0x0, 0x200, 0xba0, 0x49, 0xfffffffa, 0x63, 0xfffffde9, 0x9, 0x8, 0x3b2, 0xcc, 0x8, 0x7, 0x15b2, 0x5, 0x7, 0x80000000, 0x4, 0xffffffcc, 0x9, 0x7, 0xfffffff8, 0x6, 0x7fffffff, 0x1, 0x6, 0x5, 0x100]}) (async) write$binfmt_aout(r2, &(0x7f0000001280)={{0x108, 0x2, 0x1, 0x17b, 0x2f4, 0x8, 0x217}, "629bb762ab1a0b5c70c4801a44cfd9b2f2dc56b9829f54302196f9c998a98b0e1684154f35020a0e64de67a36edd088cb59023e84c1ddbbd55c48afd84da3ef102072bfe519bdc51316596b22855dd4ec85408eb9a7996b5089f782e7f24eb94e54a4ffd5f761a682dc1e71a4f6a881e33416f35e46a30db302e53043df2a95f561d1715797a0363258043976f30345ffaff7c6088a308bf2073727e75f9a1134d86c7163e65c7fe46dd5a4bb003462161bc61ed2337657fbd35cdd35b6557d3c35040ba0341923886d288a3383ae29cfada737011ae42815852da85ddda3eacd060691ee928ec3a03", ['\x00', '\x00']}, 0x309) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@flushsa={0x38, 0x1c, 0x200, 0x70bd2b, 0x25dfdbfc, {0x92}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd26, 0x70bd29, 0x70bd25, 0x8, [0x7, 0x0]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x854) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000016c0)={'vlan0\x00', {0x2, 0x0, @dev}}) (async) connect$llc(r2, &(0x7f0000001700)={0x1a, 0x17, 0x7, 0x9, 0x9, 0x7}, 0x10) (async) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000001740)={0x2, 0x6, 0x7a03, 0x9, 0x4, 0x6}) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000001780)={0x0, {0x5, 0xfffffff8}}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000017c0)={0x2, 0x3, 0x1, {0x81, 0x40, 0x800, 0x401}}) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001800)={0x0, 0x4, 0x0, 0x75, 0xad, 0x100, 0x4, 0x5, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x7fffffff, 0x4a, 0x2, 0xdfc}}, &(0x7f00000018c0)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001900)={r4, 0x4, 0x10, 0x1, 0xfffffffffffffffc}, &(0x7f0000001940)=0x18) prctl$PR_CAPBSET_DROP(0x18, 0xc) (async) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000001980)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000019c0), &(0x7f0000001a00)=0x8) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000001a40)={0x4, 0x1, 0x0, {0x2, 0x4, 0x3, 0x8}}) connect$pptp(r2, &(0x7f0000001a80)={0x18, 0x2, {0x0, @empty}}, 0x1e) prctl$PR_CAPBSET_DROP(0x18, 0xc) (async) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000001ac0)={0xd95, 0xfffeffff, 0x5, 0x58d73b1, 0x80000000, 0x7}) (async) prctl$PR_CAPBSET_DROP(0x18, 0x8) 2.692710682s ago: executing program 4 (id=1353): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000001340)="06", 0x1) 2.69240724s ago: executing program 2 (id=1354): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x44801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1.413870796s ago: executing program 2 (id=1369): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) (async) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') (async) 1.407213527s ago: executing program 2 (id=1371): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB='trans?fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r4, 0x6}, 0xb) r5 = syz_open_dev$midi(&(0x7f0000000080), 0x9c, 0x2a140) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f00000000c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', r0}, 0x94) 1.334113041s ago: executing program 2 (id=1372): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8801}, 0x802) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001380)={[&(0x7f0000000080)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000001200)={[&(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x18) read(r1, &(0x7f0000001140)=""/4096, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@ipv6_newnexthop={0xc4, 0x68, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GROUP={0xc, 0x2, [{0x0, 0x80}]}, @NHA_ID={0x8}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x200}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc88}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffff7f}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x100}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xfffffff8}]}, @NHA_GROUP={0x24, 0x2, [{0x1, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) read$char_usb(r7, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) 1.222034285s ago: executing program 4 (id=1373): syz_emit_ethernet(0x23, &(0x7f0000000040)={@random="efb7f252d3df", @remote, @val={@void}, {@llc_tr={0x11, {@llc={0x42, 0x42, 'E', "97eb9a2254c6ab1014101a5aba50"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.221846972s ago: executing program 1 (id=1374): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xb146000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xb146000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) (async) 1.221496028s ago: executing program 4 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906", 0xa0}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000300)={0x15, 0x100, 0x8, 0x80000000, 0x10000}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_usb_disconnect(0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x109002, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r4) r6 = dup2(r5, r5) writev(r6, &(0x7f0000002400)=[{&(0x7f0000000180)="867878fa", 0x4}], 0x1) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffff86}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000002c0)=0x2c) write(r8, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 1.102708326s ago: executing program 1 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='/dev/kvm\x00', 0x410680, &(0x7f0000000040)={@align=0x1, {0x0, 0xe, 0x2, 0x1}}, 0x4c0, &(0x7f0000000080), &(0x7f00000000c0)}) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x0, 0x8, [0x200, 0xf2d, 0xef81, 0x6, 0x9, 0x8, 0xf8e6, 0x80]}, 0x18) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) 1.10136657s ago: executing program 1 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0x7, 0x72b) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x8}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {0x3, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x44840) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x40, 0x80, 0x3, 0x9d, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x65, 0x0, 0x72, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x14}, {[@lsrr={0x83, 0x17, 0xdb, [@empty, @loopback, @local, @rand_addr=0x64010100, @multicast1]}]}}}}}) r13 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r13], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1ac, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x30, r1, 0x15, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}}, 0x0) 1.07709717s ago: executing program 1 (id=1378): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.002718849s ago: executing program 1 (id=1379): syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @broadcast, {0x0, 0x7f}, @device_a, @value={0x2, 0x0, 0x3, 0x0, 0xf0}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x62, "d00e76c462646d5371a78ac435076ee6dc3f597613b18454b7be8fdb91e4f9f6d358ed1474a292773a1446a26812d71c4f7339e5bd793da3dd96efcaa0d5364f8578dcf7c5064864e4260e7ab33742a671b8ac7f4126aae020cb823becd92b28eeaf"}, {@broadcast, @broadcast}, {@device_b, @device_b, 0x6f, "eae57cd871eaf0f132190ecac43f05395efdfac16e6cbd5d8221d2ba55ddf1380181814c7b663a9773f351723233c59b1b50278836ac2ad84bd24d03ae960dc015038498202967283ef2a69eeb16102a0c7b617a9090769a21e3aebeb11c16732e3db2cdc3f95b0db99a68ae5a3c55"}]}, 0x124) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x54, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x69b}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4010) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000480)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xf}, @device_a, @random="753c49daa41a", @random="8a915cc7878b", {0x2, 0x9}}, @random="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"}, 0x41c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}}, 0x814) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100000000001c0012800100dfe8cad86d616373656300000c00028005000a00010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r6) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 443.717089ms ago: executing program 1 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0xfffffffc, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0x6}}}]}]}, 0x64}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x24200, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000680)={0x3, 0x0, 0x98, &(0x7f0000000580)={0x7ff, 0x864, 0xe}}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmmsg(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000640)="d160a7", 0x3}], 0x1}}], 0x1, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xfc, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xab, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r4}) socket$nl_xfrm(0x10, 0x3, 0x6) 304.614174ms ago: executing program 3 (id=1381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001340)="06", 0x1) 0s ago: executing program 2 (id=1382): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000580)={0x0, 0x5, 0x300, 0xffff, 0x0, 0x0, 0x0}) syz_usbip_server_init(0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket(0x15, 0xa, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000540)=[{0x10, 0x81, 0x1, 0xfd, @time={0x0, 0x25}, {0x10, 0x4a}, {0xe}, @raw8={"02003bab00000100"}}, {0x7, 0x1, 0xa, 0x9, @tick=0x7fff, {0xc8, 0x40}, {0x6, 0x3}, @ext={0x0, 0x0}}], 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=@newqdisc={0xca0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc74, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x80000001, 0x1, 0x80000001, 0xfffffffe, 0x3ff, 0x2, 0x4, 0x1, 0x95b9, 0xd, 0xd, 0x40, 0x8, 0xfffffffb, 0x0, 0x9, 0xfff, 0x2, 0x7, 0x5, 0x1ff, 0xc, 0x7, 0x7f, 0x8, 0x86e, 0x453d, 0xfffffffa, 0x9, 0x7c11, 0x7fff, 0x40, 0x5, 0x0, 0x8, 0x81, 0x5, 0x8001, 0x1, 0x9, 0x400, 0x401, 0xf8, 0x6, 0x5, 0xffffff5a, 0x58d, 0x8, 0x9, 0x6, 0xa40, 0x4, 0x8, 0x9, 0xe3, 0xfff, 0x4, 0x1, 0x71, 0x2, 0x80000000, 0x3, 0x3, 0xe5bf, 0x1, 0x0, 0x40, 0x56e51c23, 0x6, 0x5, 0x8, 0x5, 0x9, 0xc7c0, 0x7, 0x3, 0xc, 0x5, 0xfe13, 0x7, 0x5, 0x230, 0x100, 0x9, 0x80000001, 0x7, 0xf, 0x7f, 0x3, 0x81, 0x5, 0x4, 0x3, 0x5, 0xffffffff, 0x300, 0x151d, 0x8, 0x634, 0x101, 0x1, 0x9, 0x3, 0x7b13e7b4, 0x8, 0x2, 0x1, 0x8, 0x9, 0x7f, 0x8, 0x4, 0x5, 0xf, 0xcc6, 0x1, 0x3d4e8871, 0xfffffffd, 0x99ce, 0x9, 0x1, 0x3, 0x11, 0x0, 0x0, 0x6, 0x7, 0x3, 0x5e54, 0xffffffff, 0xffff, 0xc695, 0x7, 0x0, 0x1, 0x3ff, 0x6, 0xa16, 0x8, 0x80, 0x401, 0x6, 0x0, 0x6, 0x2, 0x26c38e28, 0x7, 0x200, 0x9, 0x9, 0xe9, 0x400, 0x713f3333, 0x5, 0x29, 0x8, 0x0, 0xfffffff7, 0x3, 0x62a, 0x9, 0x2, 0x36, 0x100, 0x1, 0x80000001, 0x4, 0x1, 0x8001, 0x6, 0x80000001, 0x40, 0x5, 0x9, 0x7, 0xfffffff8, 0x2, 0x9, 0x8, 0x7, 0x7, 0x8, 0x30b, 0x800, 0x9, 0x3ff, 0x10, 0x80, 0x69a7, 0xfff, 0x3, 0x6, 0x4, 0x3, 0xc9, 0x9, 0x6, 0x7, 0xfffff504, 0xffffffff, 0x10000, 0x1, 0xf, 0xff, 0x9, 0x5, 0x4, 0x5, 0x2278cb94, 0x0, 0x9, 0x400, 0x1000, 0x3, 0x1, 0x9, 0xd1a, 0x0, 0xf0, 0x9, 0x9, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x800, 0x40, 0x4, 0x9, 0xa, 0x8, 0x8, 0x5, 0x2, 0xfffffff7, 0x2800, 0x2, 0x0, 0x200, 0x800, 0x558, 0x6, 0xf, 0xfffffff8, 0x7, 0x6, 0x8, 0x2, 0x0, 0x2, 0x6, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x1, 0x1, 0x1, 0xf0b9, 0x33cd}, {0xf1, 0x0, 0x3, 0x95, 0xf3c3, 0x85}, 0x2, 0x0, 0xe2e}}, @TCA_TBF_RATE64={0xc, 0x4, 0xbb748052c90ec592}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x401, 0x1, 0x9, 0x2a50, 0x80, 0xfffffffe, 0x0, 0x8, 0x6, 0xfffffff7, 0x3, 0xffff9107, 0x6, 0x37, 0x9, 0x1, 0x4, 0x7, 0xfffff347, 0x9, 0x6, 0xffffffff, 0x3, 0x8, 0x7fff, 0x10, 0x345c, 0x5, 0x9, 0x1, 0x5594, 0x4, 0x0, 0x216386db, 0x4, 0x4, 0x4, 0x1, 0x5, 0x3da, 0x9, 0x7b71, 0x2, 0x8, 0x3, 0x7fff, 0x1, 0x9, 0xf, 0x6, 0x6, 0xa, 0x3, 0x4, 0x7, 0x4, 0x7f, 0xfffff800, 0x6c, 0x587e, 0x94f, 0x2, 0x6, 0x0, 0x1, 0xf0000000, 0x1, 0x7fffffff, 0x10000, 0x8, 0x933, 0x7, 0x61, 0x0, 0x5, 0x7fff, 0x40, 0xa61, 0xb4, 0xff, 0xf1, 0x99, 0x8, 0xab1, 0x0, 0xb, 0x9d, 0xffffffff, 0x1, 0xffffff3d, 0x7, 0xffffffff, 0x3, 0x8000, 0x182777d5, 0xc, 0x5, 0x3, 0x3, 0x787, 0x9, 0xd6f0, 0x34b7, 0x5, 0x7fff, 0x7ff, 0xffff, 0x8, 0x4, 0x3, 0x5, 0x2, 0x0, 0x10, 0x9, 0x2, 0x6, 0x9, 0x2, 0x4, 0x100, 0x3, 0x101, 0xc, 0x14, 0xffff, 0x7, 0x4, 0x2, 0xeef47d2, 0x0, 0x1, 0x8, 0x5, 0x0, 0xd900000, 0x6, 0x1, 0x9, 0x2, 0x9, 0x2, 0x5, 0xb, 0x400, 0x7, 0x84, 0x100, 0x9, 0x5, 0x100, 0xe, 0x7fff, 0x4, 0x8, 0x4, 0x80, 0xb, 0x1, 0x0, 0x3, 0x3, 0x79eb, 0x9, 0x4, 0x8, 0x5, 0x1, 0x9eb1, 0x2, 0x8, 0x7, 0xadf, 0xe, 0x0, 0x6, 0x100, 0x4, 0x10001, 0x7fffffff, 0x2, 0x7ff, 0x163, 0x7, 0x3006, 0xffff, 0xfffffff9, 0xe, 0xfffffffe, 0x1c2, 0x2, 0x1, 0x0, 0x1, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x100, 0x73, 0x1, 0x1, 0x1, 0x5, 0x5, 0xfffff3aa, 0x3, 0x80000001, 0x7ff, 0x1ff, 0x400000, 0x9, 0xc3c, 0x4, 0x0, 0x5, 0x7, 0x0, 0x8, 0x0, 0x8000, 0xfffffffb, 0x2, 0x9, 0x1907, 0x0, 0x1e, 0x8, 0xd721, 0x8, 0x80, 0x2, 0xffff, 0xfffffff6, 0x0, 0x2, 0x3, 0x0, 0x9, 0x9, 0x3613, 0x3, 0x3, 0xaa, 0x1cb76a18, 0x2, 0x2, 0x7ff, 0x8000, 0x1, 0x8001, 0x80000001, 0x3]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x405e36faabe1d6c4}, @TCA_TBF_PRATE64={0xc, 0x5, 0x45770214754a5fa9}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x6, 0x2, 0xfffffffa, 0x101, 0xe5, 0x467, 0x5, 0x6, 0x6, 0x8, 0x8b, 0x6eb, 0x2, 0xd, 0x0, 0x3740, 0xcb, 0x3, 0x3, 0x1, 0x91, 0x101, 0x7ff, 0xfffffff8, 0x7, 0x10001, 0x8, 0x8, 0x90, 0x0, 0x7f, 0x40, 0x2, 0x9, 0x33b, 0x3, 0x0, 0xffffffff, 0x9, 0x0, 0x1, 0x1, 0x3, 0x2, 0x208, 0x1, 0x8, 0x4, 0xfffffffb, 0x1, 0x1000, 0x6, 0x3, 0xfff, 0x4, 0xa8c6, 0x3ff, 0x1, 0x0, 0xe1e, 0x5, 0x8, 0x2, 0x7892, 0x0, 0x2, 0x8001, 0x4, 0x85, 0x7fff, 0x0, 0x3, 0x1ff, 0x8, 0x3fa2, 0x0, 0x4, 0x7, 0x1, 0x1, 0x7, 0xa32, 0x6, 0x9, 0x8, 0x10000, 0x4, 0x1, 0x2, 0x6, 0x9, 0x81, 0x5, 0x5, 0x2, 0x4, 0x1, 0x4, 0x1ff, 0x0, 0xb, 0x7, 0x6, 0x6f4, 0x0, 0x7, 0x0, 0x2, 0x2, 0x83, 0x2, 0x8, 0x6, 0x687a, 0x8e, 0x100, 0x10001, 0xf62, 0x7f, 0x7ff, 0x3, 0x9035, 0x3, 0x7f, 0x3, 0x7, 0x7768, 0x4, 0x3, 0x2a0, 0x5, 0x7addad3d, 0x7, 0x1, 0x7, 0x1, 0x81, 0x4, 0x0, 0x6, 0x4, 0x4, 0x79, 0x6, 0x400, 0x9, 0x2, 0x9, 0x8, 0x3, 0x297000, 0xd, 0x2, 0x1, 0x0, 0x2, 0xffffffff, 0x7, 0x5, 0x800, 0x7ff, 0x7, 0x9, 0x80000001, 0xc3, 0xaac, 0x9, 0x6, 0xa, 0x6, 0xb, 0x3ff, 0x8, 0x0, 0x6, 0x7, 0xc899, 0x101, 0x8, 0x4, 0x0, 0x80000001, 0x7fffffff, 0x101, 0x0, 0x7, 0x8, 0x8, 0x8, 0x6, 0x1, 0x51, 0x8, 0x0, 0xc8f3, 0x47, 0xc, 0x0, 0x4, 0x78, 0x5, 0x5, 0x9, 0x2000, 0x4, 0xbe, 0xc92, 0x7f, 0x4, 0x2, 0x7, 0x4271, 0x120, 0x25, 0x800, 0xd97, 0x7, 0x2, 0x3, 0x9, 0x2, 0x7fa5, 0x9, 0x6, 0x87, 0x2, 0x7, 0x1000000, 0xfffffffe, 0x0, 0x7c3b, 0xf4bd, 0xc44, 0x7, 0xcb0, 0xfe46, 0xffff, 0x27f0, 0x80000000, 0x6, 0x6, 0x4, 0x12, 0x5, 0x9, 0x8, 0x9, 0x9, 0x7, 0x2, 0xfffff3fa, 0xfffffff8, 0x421, 0x1, 0x3]}, @TCA_TBF_RATE64={0xc, 0x4, 0xf1ed5d5d77967845}, @TCA_TBF_RATE64={0xc, 0x4, 0x6b963488f9829577}]}}]}, 0xca0}, 0x1, 0x0, 0x0, 0x8001}, 0x40) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvfrom$inet_nvme(r1, &(0x7f0000000300)=""/176, 0xb0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0xfffe, 0x400, @loopback, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000740)=ANY=[], 0x18}}], 0x1, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 99.424986][ T8794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.473019][ T5750] Bluetooth: hci1: unexpected event for opcode 0x8000 [ 99.898677][ T5883] usb 6-1: USB disconnect, device number 14 [ 99.944947][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 99.944960][ T42] audit: type=1400 audit(2000000012.339:885): avc: denied { nlmsg_read } for pid=8802 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 100.586205][ T8814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8814 comm=syz.1.792 [ 101.329646][ T8773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.457554][ T8822] program syz.2.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.462965][ T8819] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 101.465183][ T8819] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.474300][ T8819] vhci_hcd vhci_hcd.0: Device attached [ 101.481741][ T42] audit: type=1400 audit(2000000013.879:886): avc: denied { bind } for pid=8824 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.503106][ T42] audit: type=1400 audit(2000000013.889:887): avc: denied { write } for pid=8820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.511841][ T8826] rdma_op ffff88805a4159f0 conn xmit_rdma 0000000000000000 [ 101.521021][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 101.537461][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 101.582680][ T42] audit: type=1400 audit(2000000013.979:888): avc: denied { write } for pid=8836 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.593278][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 101.605217][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 101.608783][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 101.614658][ T8823] vhci_hcd: connection closed [ 101.618036][ T12] vhci_hcd vhci_hcd.4: stop threads [ 101.625074][ T12] vhci_hcd vhci_hcd.4: release socket [ 101.629809][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 101.666619][ T6470] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 101.714788][ T42] audit: type=1400 audit(2000000014.109:889): avc: denied { write } for pid=8850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.732168][ T42] audit: type=1400 audit(2000000014.129:890): avc: denied { setattr } for pid=8853 comm="syz.2.802" name="/" dev="9p" ino=79691951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.754401][ T42] audit: type=1400 audit(2000000014.149:891): avc: denied { cmd } for pid=8853 comm="syz.2.802" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 101.770893][ T42] audit: type=1400 audit(2000000014.169:892): avc: denied { write } for pid=8861 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.826289][ T8867] netlink: 68 bytes leftover after parsing attributes in process `syz.3.805'. [ 101.871770][ T8876] Bluetooth: MGMT ver 1.23 [ 101.880952][ T42] audit: type=1400 audit(2000000014.269:893): avc: denied { write } for pid=8868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.888019][ T8876] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 101.942291][ T42] audit: type=1400 audit(2000000014.339:894): avc: denied { write } for pid=8878 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.229193][ T8917] netlink: 'syz.3.819': attribute type 21 has an invalid length. [ 102.234096][ T8917] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.275234][ T8916] tmpfs: Bad value for 'mpol' [ 102.278681][ T8916] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.817'. [ 102.281664][ T8916] veth0_to_bond: default FDB implementation only supports local addresses [ 102.411633][ T8940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 102.413758][ T8940] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.423617][ T8940] vhci_hcd vhci_hcd.0: Device attached [ 102.442683][ T8943] vhci_hcd: unknown pdu 2 [ 102.451832][ T5812] vhci_hcd vhci_hcd.1: stop threads [ 102.453533][ T5812] vhci_hcd vhci_hcd.1: release socket [ 102.456196][ T5812] vhci_hcd vhci_hcd.1: disconnect device [ 102.465240][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 102.477618][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 102.480726][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 102.515768][ T8959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=8959 comm=syz.4.829 [ 102.671210][ T8975] geneve2: entered promiscuous mode [ 102.672973][ T8975] geneve2: entered allmulticast mode [ 102.918618][ T8992] overlayfs: failed lookup in lower (newroot/142, name='bus', err=-40): overlapping layers [ 102.952459][ T9001] netlink: 'syz.4.844': attribute type 4 has an invalid length. [ 102.987205][ T9006] openvswitch: netlink: IP tunnel TTL not specified. [ 102.989870][ T9006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.031500][ T9009] syzkaller0: entered promiscuous mode [ 103.033346][ T9009] syzkaller0: entered allmulticast mode [ 103.163636][ T9019] SELinux: invalid class [ 103.168384][ T9019] SELinux: failed to load policy [ 103.232648][ T9024] tcpci 0-0050: Can't find connector node. [ 103.237002][ T9024] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 103.241023][ T9024] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 103.249355][ T9024] tcpci 1-0005: probe with driver tcpci failed with error -5 [ 103.252389][ T9024] i2c i2c-1: new_device: Instantiated device tcpci at 0x05 [ 103.255121][ T9024] tipc: Started in network mode [ 103.256800][ T9024] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 103.259172][ T9024] tipc: Enabled bearer , priority 10 [ 103.318225][ T9029] overlay: filesystem on ./file0 not supported as upperdir [ 103.319414][ T9028] ip6t_srh: unknown srh match flags 4000 [ 103.402821][ T9027] syz.1.852 (9027): drop_caches: 2 [ 103.454459][ T9035] netlink: 'syz.1.855': attribute type 21 has an invalid length. [ 103.515233][ T9039] syzkaller0: entered promiscuous mode [ 103.522521][ T5750] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 103.525923][ T5750] Bluetooth: hci1: Injecting HCI hardware error event [ 103.528590][ T9039] syzkaller0: entered allmulticast mode [ 103.533524][ T5750] Bluetooth: hci1: hardware error 0x00 [ 103.567607][ T9042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 103.570210][ T9042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.573932][ T9042] vhci_hcd vhci_hcd.0: Device attached [ 103.580341][ T9043] vhci_hcd: unknown pdu 2 [ 103.584000][ T12] vhci_hcd vhci_hcd.3: stop threads [ 103.591907][ T12] vhci_hcd vhci_hcd.3: release socket [ 103.597038][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 103.647690][ T9050] overlayfs: failed to resolve '/?': -2 [ 103.847364][ T9073] cgroup: name respecified [ 103.849118][ T9074] cgroup: name respecified [ 103.911128][ T9067] block nbd4: shutting down sockets [ 104.051801][ T9080] SELinux: context truncated [ 104.055875][ T9080] SELinux: invalid ocon [ 104.064224][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=9089 comm=syz.1.873 [ 104.068670][ T9089] netlink: 'syz.1.873': attribute type 34 has an invalid length. [ 104.090644][ T9089] bond3: option lacp_strict: invalid value (71) [ 104.095527][ T9089] bond3 (unregistering): Released all slaves [ 104.151201][ T9080] SELinux: failed to load policy [ 104.231357][ T9101] netlink: 'syz.2.879': attribute type 5 has an invalid length. [ 104.239768][ T9104] binder: 9103:9104 ioctl 4068aea3 200000000080 returned -22 [ 104.242814][ T9105] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 104.381264][ T5883] tipc: Node number set to 43690 [ 104.398862][ T5741] Bluetooth: hci2: connection err: -111 [ 104.647437][ T9159] tmpfs: Group quota block hardlimit too large. [ 104.949110][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 104.949125][ T42] audit: type=1400 audit(2000000017.349:922): avc: denied { write } for pid=9174 comm="syz.3.896" name="/" dev="9p" ino=79691951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.970385][ T42] audit: type=1400 audit(2000000017.369:923): avc: denied { write } for pid=9179 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.005893][ T42] audit: type=1400 audit(2000000017.399:924): avc: denied { setattr } for pid=9174 comm="syz.3.896" name="file1" dev="9p" ino=79691957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.015394][ T42] audit: type=1400 audit(2000000017.419:925): avc: denied { write } for pid=9174 comm="syz.3.896" name="/" dev="9p" ino=79691951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.059779][ T42] audit: type=1400 audit(2000000017.459:926): avc: denied { write } for pid=9184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.110572][ T42] audit: type=1400 audit(2000000017.509:927): avc: denied { write } for pid=9188 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.220693][ T9191] bridge2: entered promiscuous mode [ 105.222709][ T42] audit: type=1400 audit(2000000017.619:928): avc: denied { write } for pid=9192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.225421][ T9191] bridge2: entered allmulticast mode [ 105.268316][ T42] audit: type=1400 audit(2000000017.669:929): avc: denied { write } for pid=9196 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.433013][ T42] audit: type=1326 audit(2000000017.829:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9203 comm="syz.2.901" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f2639de99 code=0x0 [ 105.562461][ T9212] batadv0: entered promiscuous mode [ 105.570781][ T9212] macsec1: entered promiscuous mode [ 105.572678][ T9212] macsec1: entered allmulticast mode [ 105.574436][ T9212] batadv0: entered allmulticast mode [ 105.581270][ T9212] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 105.646588][ T42] audit: type=1400 audit(2000000018.039:931): avc: denied { write } for pid=9216 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.678135][ T5750] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 105.784363][ T9227] netlink: 'syz.4.907': attribute type 64 has an invalid length. [ 106.109345][ T9250] Can't find a SQUASHFS superblock on nullb0 [ 106.146840][ T9252] program syz.3.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.171650][ T9256] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 106.306463][ T1352] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 106.396497][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.456518][ T1352] usb 9-1: Using ep0 maxpacket: 32 [ 106.459739][ T1352] usb 9-1: config index 0 descriptor too short (expected 15270, got 18) [ 106.465327][ T1352] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 106.470046][ T1352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.473535][ T1352] usb 9-1: Product: syz [ 106.475293][ T1352] usb 9-1: Manufacturer: syz [ 106.477200][ T1352] usb 9-1: SerialNumber: syz [ 106.481074][ T1352] usb 9-1: config 0 descriptor?? [ 106.486063][ T1352] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 106.489849][ T1352] dvb-usb: bulk message failed: -22 (4/0) [ 106.494939][ T1352] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.499350][ T1352] dvb-usb: bulk message failed: -22 (5/0) [ 106.502645][ T1352] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.509674][ T1352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.513992][ T1352] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 106.517782][ T1352] usb 9-1: media controller created [ 106.531207][ T1352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.549797][ T1352] usb 9-1: selecting invalid altsetting 3 [ 106.554736][ T1352] ttusb2: set interface to alts=3 failed [ 106.566517][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 106.571332][ T9] usb 8-1: config 1 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 8 [ 106.574954][ T9] usb 8-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.578748][ T1352] DVB: Unable to find symbol tda10086_attach() [ 106.579916][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 106.582306][ T1352] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 106.583087][ T1352] dvb-usb: bulk message failed: -22 (4/0) [ 106.588053][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 106.588998][ T1352] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.591761][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.595287][ T1352] dvb-usb: bulk message failed: -22 (5/0) [ 106.599859][ T5088] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 106.600558][ T9] usb 8-1: Product: А [ 106.605703][ T1352] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.606917][ T9] usb 8-1: Manufacturer: ㏎㚢ᨲ灴䊎೦ヺ杈냊˗铬牧뻌邟줴ﵷꏥ淉横꼧뭖ᓱ梠졧橗挵榫䮷┏湣嫇 [ 106.609806][ T1352] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 106.618952][ T9253] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.628786][ T9253] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.692038][ T9248] dvb-usb: bulk message failed: -22 (7/0) [ 106.695334][ T9248] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 106.701240][ T9248] ttusb2: i2c transfer failed. [ 106.711844][ T5813] usb 9-1: USB disconnect, device number 5 [ 106.751829][ T5813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.767914][ T5088] usb 6-1: Using ep0 maxpacket: 32 [ 106.776983][ T5088] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 106.784146][ T5088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.793281][ T5088] usb 6-1: config 0 descriptor?? [ 106.808218][ T5088] as10x_usb: device has been detected [ 106.810451][ T5088] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 106.823379][ T5088] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 106.857658][ T9] usb 8-1: USB disconnect, device number 7 [ 106.876967][ T5088] as10x_usb: error during firmware upload part1 [ 106.881993][ T5088] Registered device nBox DVB-T Dongle [ 107.086547][ T1352] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 107.121059][ T5821] usb 6-1: USB disconnect, device number 15 [ 107.158136][ T5821] Unregistered device nBox DVB-T Dongle [ 107.160051][ T5821] as10x_usb: device has been disconnected [ 107.216488][ T1352] usb 7-1: device descriptor read/64, error -71 [ 107.456487][ T1352] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.587197][ T1352] usb 7-1: device descriptor read/64, error -71 [ 107.696968][ T1352] usb usb7-port1: attempt power cycle [ 107.757053][ T61] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 107.850921][ T6211] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 107.916803][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 107.921182][ T61] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 107.924667][ T61] usb 8-1: config 0 has no interface number 0 [ 107.928485][ T61] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.932467][ T61] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 107.937845][ T61] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 107.942437][ T61] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 107.946776][ T61] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.954070][ T61] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 107.957867][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.961066][ T61] usb 8-1: Product: syz [ 107.962825][ T61] usb 8-1: Manufacturer: syz [ 107.964792][ T61] usb 8-1: SerialNumber: syz [ 107.971851][ T61] usb 8-1: config 0 descriptor?? [ 107.975309][ T9299] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.983626][ T61] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input7 [ 107.995271][ T5130] usb 8-1: BOGUS urb xfer, pipe 1 != type 3 [ 108.036597][ T1352] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 108.057352][ T1352] usb 7-1: device descriptor read/8, error -71 [ 108.186855][ T61] usb 8-1: USB disconnect, device number 8 [ 108.296511][ T1352] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.317922][ T1352] usb 7-1: device descriptor read/8, error -71 [ 108.427731][ T1352] usb usb7-port1: unable to enumerate USB device [ 108.530245][ T5750] Bluetooth: Unexpected start frame (len 12) [ 108.537923][ T5750] Bluetooth: Wrong link type (-57) [ 108.766820][ T5821] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 108.816504][ T5813] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 108.916614][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 108.921687][ T9331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.922671][ T5821] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 108.933820][ T5821] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 108.937834][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.941314][ T5821] usb 6-1: Product: syz [ 108.943196][ T5821] usb 6-1: Manufacturer: syz [ 108.945211][ T5821] usb 6-1: SerialNumber: syz [ 108.956559][ T5813] usb 9-1: device descriptor read/64, error -71 [ 108.957016][ T5821] usb 6-1: config 0 descriptor?? [ 108.965164][ T5821] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 108.969211][ T5821] dvb-usb: bulk message failed: -22 (4/0) [ 108.971702][ T5821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 108.976073][ T5821] dvb-usb: bulk message failed: -22 (5/0) [ 108.978794][ T5821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 108.990727][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.995195][ T5821] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 108.998806][ T5821] usb 6-1: media controller created [ 109.010053][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.038556][ T5821] usb 6-1: selecting invalid altsetting 3 [ 109.043881][ T5821] ttusb2: set interface to alts=3 failed [ 109.073012][ T5821] DVB: Unable to find symbol tda10086_attach() [ 109.075585][ T5821] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 109.079639][ T5821] dvb-usb: bulk message failed: -22 (4/0) [ 109.081972][ T5821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.086195][ T5821] dvb-usb: bulk message failed: -22 (5/0) [ 109.088800][ T5821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.092832][ T5821] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 109.168889][ T9323] dvb-usb: bulk message failed: -22 (7/0) [ 109.171407][ T9323] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 109.175589][ T9323] ttusb2: i2c transfer failed. [ 109.182309][ T5821] usb 6-1: USB disconnect, device number 16 [ 109.207252][ T5813] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 109.212106][ T5821] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 109.266464][ T61] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 109.336513][ T5813] usb 9-1: device descriptor read/64, error -71 [ 109.420374][ T61] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.424115][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.427462][ T61] usb 8-1: Product: syz [ 109.429211][ T61] usb 8-1: Manufacturer: syz [ 109.431173][ T61] usb 8-1: SerialNumber: syz [ 109.447063][ T5813] usb usb9-port1: attempt power cycle [ 109.643048][ T61] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 109.646878][ T61] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 109.650085][ T61] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 109.655911][ T61] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 109.662415][ T61] usb 8-1: USB disconnect, device number 9 [ 109.798497][ T5813] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 109.817309][ T5813] usb 9-1: device descriptor read/8, error -71 [ 110.066577][ T5813] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 110.087083][ T5813] usb 9-1: device descriptor read/8, error -71 [ 110.196729][ T5813] usb usb9-port1: unable to enumerate USB device [ 110.269678][ T9355] __nla_validate_parse: 17 callbacks suppressed [ 110.269691][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 110.835160][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 110.835244][ T42] audit: type=1400 audit(2000000023.229:945): avc: denied { mount } for pid=9372 comm="syz.2.955" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.851219][ T42] audit: type=1400 audit(2000000023.249:946): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.888053][ T9379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9379 comm=syz.2.956 [ 110.893522][ T9379] netlink: 'syz.2.956': attribute type 21 has an invalid length. [ 110.895948][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 110.907685][ T9379] netlink: 'syz.2.956': attribute type 21 has an invalid length. [ 110.907711][ T5812] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.907751][ T5812] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.907778][ T5812] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.907800][ T5812] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.922774][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 110.930899][ T9379] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 110.974019][ T42] audit: type=1400 audit(2000000023.369:947): avc: denied { mount } for pid=9381 comm="syz.1.958" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 110.983230][ T42] audit: type=1400 audit(2000000023.369:948): avc: denied { write } for pid=9381 comm="syz.1.958" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.096642][ T42] audit: type=1400 audit(2000000023.499:949): avc: denied { read } for pid=9381 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.701401][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 111.794677][ T42] audit: type=1804 audit(2000000024.189:950): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.961" name="/newroot/177/file0" dev="tmpfs" ino=965 res=1 errno=0 [ 111.802392][ T9393] uprobe: syz.4.961:9393 failed to unregister, leaking uprobe [ 111.851654][ T9382] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 112.766054][ T42] audit: type=1400 audit(2000000025.159:951): avc: denied { create } for pid=9400 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.923601][ T9383] Set syz1 is full, maxelem 65536 reached [ 112.941738][ T42] audit: type=1400 audit(2000000025.339:952): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.972768][ T9410] netlink: 27 bytes leftover after parsing attributes in process `syz.1.966'. [ 113.036843][ T42] audit: type=1400 audit(2000000025.439:953): avc: denied { wake_alarm } for pid=9415 comm="syz.2.968" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.043556][ T42] audit: type=1400 audit(2000000025.439:954): avc: denied { bind } for pid=9415 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.095215][ T9418] /dev/sg0: Can't lookup blockdev [ 113.115963][ T9420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=9420 comm=syz.2.970 [ 113.130685][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 113.141575][ T9420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.970'. [ 113.221784][ T9349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.351831][ T9431] FAULT_INJECTION: forcing a failure. [ 113.351831][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 113.360159][ T9431] CPU: 3 UID: 0 PID: 9431 Comm: syz.1.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.360201][ T9431] Tainted: [L]=SOFTLOCKUP [ 113.360221][ T9431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.360231][ T9431] Call Trace: [ 113.360247][ T9431] [ 113.360254][ T9431] dump_stack_lvl+0x100/0x190 [ 113.360338][ T9431] should_fail_ex.cold+0x5/0xa [ 113.360361][ T9431] should_failslab+0xc2/0x120 [ 113.360394][ T9431] __kmalloc_noprof+0xfc/0x820 [ 113.360416][ T9431] ? bpf_test_init.isra.0+0x88/0x100 [ 113.360504][ T9431] bpf_test_init.isra.0+0x88/0x100 [ 113.360531][ T9431] bpf_prog_test_run_xdp+0x57e/0x1670 [ 113.360567][ T9431] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.360601][ T9431] ? fput+0x79/0x100 [ 113.360622][ T9431] ? __bpf_prog_get+0x97/0x2a0 [ 113.360650][ T9431] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.360677][ T9431] __sys_bpf+0x2a12/0x4e80 [ 113.360702][ T9431] ? __pfx___sys_bpf+0x10/0x10 [ 113.360720][ T9431] ? find_held_lock+0x2b/0x80 [ 113.360754][ T9431] ? get_pid_task+0xfc/0x250 [ 113.360781][ T9431] ? get_pid_task+0xfc/0x250 [ 113.360813][ T9431] ? find_held_lock+0x2b/0x80 [ 113.360842][ T9431] ? rcu_read_lock_any_held+0x6a/0xa0 [ 113.360861][ T9431] ? find_held_lock+0x2b/0x80 [ 113.360886][ T9431] ? ksys_write+0x190/0x250 [ 113.360911][ T9431] ? ksys_write+0x190/0x250 [ 113.360952][ T9431] ? fput+0x79/0x100 [ 113.360976][ T9431] ? __x64_sys_bpf+0xce/0x140 [ 113.360992][ T9431] __x64_sys_bpf+0xce/0x140 [ 113.361011][ T9431] ? do_syscall_64+0x90/0x870 [ 113.361100][ T9431] do_syscall_64+0x115/0x870 [ 113.361118][ T9431] ? clear_bhb_loop+0x40/0x90 [ 113.361140][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.361156][ T9431] RIP: 0033:0x7f8a1519de99 [ 113.361173][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.361188][ T9431] RSP: 002b:00007f8a1607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.361223][ T9431] RAX: ffffffffffffffda RBX: 00007f8a15425fa0 RCX: 00007f8a1519de99 [ 113.361235][ T9431] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 113.361246][ T9431] RBP: 00007f8a1607c090 R08: 0000000000000000 R09: 0000000000000000 [ 113.361257][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.361267][ T9431] R13: 00007f8a15426038 R14: 00007f8a15425fa0 R15: 00007fff3cd93af8 [ 113.361289][ T9431] [ 113.731131][ T9465] syzkaller0: left promiscuous mode [ 113.733075][ T9465] syzkaller0: left allmulticast mode [ 113.800792][ T9467] vlan2: entered promiscuous mode [ 113.802727][ T9467] hsr0: entered promiscuous mode [ 113.804729][ T9467] vlan2: entered allmulticast mode [ 113.808174][ T9467] hsr0: entered allmulticast mode [ 113.810381][ T9467] hsr_slave_0: entered allmulticast mode [ 113.812724][ T9467] hsr_slave_1: entered allmulticast mode [ 113.901709][ T9475] FAULT_INJECTION: forcing a failure. [ 113.901709][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 113.906677][ T9475] CPU: 2 UID: 0 PID: 9475 Comm: syz.1.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.906695][ T9475] Tainted: [L]=SOFTLOCKUP [ 113.906699][ T9475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.906705][ T9475] Call Trace: [ 113.906710][ T9475] [ 113.906714][ T9475] dump_stack_lvl+0x100/0x190 [ 113.906733][ T9475] should_fail_ex.cold+0x5/0xa [ 113.906750][ T9475] should_failslab+0xc2/0x120 [ 113.906765][ T9475] __kmalloc_noprof+0xfc/0x820 [ 113.906779][ T9475] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 113.906809][ T9475] kernfs_fop_write_iter+0x26a/0x5f0 [ 113.906826][ T9475] vfs_write+0x6ac/0x1050 [ 113.906844][ T9475] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 113.906861][ T9475] ? __pfx_vfs_write+0x10/0x10 [ 113.906888][ T9475] ksys_write+0x12a/0x250 [ 113.906905][ T9475] ? __pfx_ksys_write+0x10/0x10 [ 113.906927][ T9475] do_syscall_64+0x115/0x870 [ 113.906941][ T9475] ? clear_bhb_loop+0x40/0x90 [ 113.906954][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.906966][ T9475] RIP: 0033:0x7f8a1519de99 [ 113.906976][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.906988][ T9475] RSP: 002b:00007f8a1607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.907000][ T9475] RAX: ffffffffffffffda RBX: 00007f8a15425fa0 RCX: 00007f8a1519de99 [ 113.907007][ T9475] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 113.907013][ T9475] RBP: 00007f8a1607c090 R08: 0000000000000000 R09: 0000000000000000 [ 113.907019][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.907031][ T9475] R13: 00007f8a15426038 R14: 00007f8a15425fa0 R15: 00007fff3cd93af8 [ 113.907046][ T9475] [ 114.011483][ T9478] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.016103][ T9478] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 114.095676][ T9480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=9480 comm=syz.1.992 [ 114.208579][ T9487] openvswitch: netlink: Unknown key attributes 20 [ 114.369616][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 114.605788][ T9509] evm: overlay not supported [ 114.708748][ T9516] /dev/sr0: Can't open blockdev [ 114.715954][ T9522] FAULT_INJECTION: forcing a failure. [ 114.715954][ T9522] name failslab, interval 1, probability 0, space 0, times 0 [ 114.722532][ T9522] CPU: 2 UID: 0 PID: 9522 Comm: syz.3.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.722551][ T9522] Tainted: [L]=SOFTLOCKUP [ 114.722555][ T9522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.722561][ T9522] Call Trace: [ 114.722566][ T9522] [ 114.722570][ T9522] dump_stack_lvl+0x100/0x190 [ 114.722589][ T9522] should_fail_ex.cold+0x5/0xa [ 114.722604][ T9522] should_failslab+0xc2/0x120 [ 114.722619][ T9522] __kvmalloc_node_noprof+0x116/0x970 [ 114.722634][ T9522] ? bpf_test_run_xdp_live+0x13a/0x760 [ 114.722656][ T9522] bpf_test_run_xdp_live+0x13a/0x760 [ 114.722674][ T9522] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 114.722691][ T9522] ? __mutex_unlock_slowpath+0x35d/0x930 [ 114.722730][ T9522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.722744][ T9522] ? find_held_lock+0x2b/0x80 [ 114.722764][ T9522] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 114.722781][ T9522] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 114.722803][ T9522] ? bpf_dispatcher_xdp+0x800/0x1000 [ 114.722815][ T9522] ? bpf_dispatcher_xdp+0x800/0x1000 [ 114.722825][ T9522] ? bpf_dispatcher_xdp+0x800/0x1000 [ 114.722833][ T9522] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 114.722849][ T9522] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 114.722873][ T9522] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.722896][ T9522] ? fput+0x79/0x100 [ 114.722909][ T9522] ? __bpf_prog_get+0x97/0x2a0 [ 114.722924][ T9522] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.722943][ T9522] __sys_bpf+0x2a12/0x4e80 [ 114.722958][ T9522] ? __pfx___sys_bpf+0x10/0x10 [ 114.722969][ T9522] ? find_held_lock+0x2b/0x80 [ 114.722986][ T9522] ? get_pid_task+0xfc/0x250 [ 114.723003][ T9522] ? get_pid_task+0xfc/0x250 [ 114.723025][ T9522] ? find_held_lock+0x2b/0x80 [ 114.723045][ T9522] ? rcu_read_lock_any_held+0x6a/0xa0 [ 114.723057][ T9522] ? find_held_lock+0x2b/0x80 [ 114.723074][ T9522] ? ksys_write+0x190/0x250 [ 114.723091][ T9522] ? ksys_write+0x190/0x250 [ 114.723125][ T9522] ? fput+0x79/0x100 [ 114.723140][ T9522] ? __x64_sys_bpf+0xce/0x140 [ 114.723151][ T9522] __x64_sys_bpf+0xce/0x140 [ 114.723163][ T9522] ? do_syscall_64+0x90/0x870 [ 114.723176][ T9522] do_syscall_64+0x115/0x870 [ 114.723188][ T9522] ? clear_bhb_loop+0x40/0x90 [ 114.723202][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.723213][ T9522] RIP: 0033:0x7f581f79de99 [ 114.723224][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.723235][ T9522] RSP: 002b:00007f581d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.723247][ T9522] RAX: ffffffffffffffda RBX: 00007f581fa25fa0 RCX: 00007f581f79de99 [ 114.723254][ T9522] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 114.723260][ T9522] RBP: 00007f581d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.723267][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.723273][ T9522] R13: 00007f581fa26038 R14: 00007f581fa25fa0 R15: 00007ffec00f1078 [ 114.723287][ T9522] [ 114.774324][ T9530] xt_TCPMSS: Only works on TCP SYN packets [ 115.148837][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 115.255504][ T9558] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.265691][ T9558] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.275862][ T9558] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 115.284583][ T9558] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.296982][ T9558] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 115.448691][ T9569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.540553][ T9579] FAULT_INJECTION: forcing a failure. [ 115.540553][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 115.544600][ T9579] CPU: 3 UID: 0 PID: 9579 Comm: syz.3.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.544619][ T9579] Tainted: [L]=SOFTLOCKUP [ 115.544623][ T9579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.544630][ T9579] Call Trace: [ 115.544634][ T9579] [ 115.544639][ T9579] dump_stack_lvl+0x100/0x190 [ 115.544658][ T9579] should_fail_ex.cold+0x5/0xa [ 115.544672][ T9579] should_failslab+0xc2/0x120 [ 115.544688][ T9579] __kvmalloc_node_noprof+0x116/0x970 [ 115.544716][ T9579] ? bpf_test_run_xdp_live+0x16f/0x760 [ 115.544739][ T9579] bpf_test_run_xdp_live+0x16f/0x760 [ 115.544757][ T9579] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 115.544773][ T9579] ? __mutex_unlock_slowpath+0x35d/0x930 [ 115.544790][ T9579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.544803][ T9579] ? find_held_lock+0x2b/0x80 [ 115.544823][ T9579] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 115.544840][ T9579] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 115.544863][ T9579] ? bpf_dispatcher_xdp+0x800/0x1000 [ 115.544874][ T9579] ? bpf_dispatcher_xdp+0x800/0x1000 [ 115.544884][ T9579] ? bpf_dispatcher_xdp+0x800/0x1000 [ 115.544893][ T9579] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 115.544909][ T9579] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 115.544932][ T9579] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.544955][ T9579] ? fput+0x79/0x100 [ 115.544969][ T9579] ? __bpf_prog_get+0x97/0x2a0 [ 115.544984][ T9579] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.545002][ T9579] __sys_bpf+0x2a12/0x4e80 [ 115.545018][ T9579] ? __pfx___sys_bpf+0x10/0x10 [ 115.545029][ T9579] ? find_held_lock+0x2b/0x80 [ 115.545046][ T9579] ? get_pid_task+0xfc/0x250 [ 115.545063][ T9579] ? get_pid_task+0xfc/0x250 [ 115.545085][ T9579] ? find_held_lock+0x2b/0x80 [ 115.545106][ T9579] ? rcu_read_lock_any_held+0x6a/0xa0 [ 115.545117][ T9579] ? find_held_lock+0x2b/0x80 [ 115.545134][ T9579] ? ksys_write+0x190/0x250 [ 115.545151][ T9579] ? ksys_write+0x190/0x250 [ 115.545183][ T9579] ? fput+0x79/0x100 [ 115.545198][ T9579] ? __x64_sys_bpf+0xce/0x140 [ 115.545209][ T9579] __x64_sys_bpf+0xce/0x140 [ 115.545221][ T9579] ? do_syscall_64+0x90/0x870 [ 115.545234][ T9579] do_syscall_64+0x115/0x870 [ 115.545246][ T9579] ? clear_bhb_loop+0x40/0x90 [ 115.545260][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.545272][ T9579] RIP: 0033:0x7f581f79de99 [ 115.545282][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.545293][ T9579] RSP: 002b:00007f581d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.545305][ T9579] RAX: ffffffffffffffda RBX: 00007f581fa25fa0 RCX: 00007f581f79de99 [ 115.545312][ T9579] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 115.545319][ T9579] RBP: 00007f581d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.545326][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.545332][ T9579] R13: 00007f581fa26038 R14: 00007f581fa25fa0 R15: 00007ffec00f1078 [ 115.545346][ T9579] [ 115.766492][ T9590] mmap: syz.2.1025 (9590) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.830746][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 115.871836][ T9604] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 115.874474][ T9604] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1027'. [ 116.114984][ T9615] FAULT_INJECTION: forcing a failure. [ 116.114984][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 116.118080][ T9618] program syz.3.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.123290][ T9620] program syz.3.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.125784][ T9615] CPU: 0 UID: 0 PID: 9615 Comm: syz.1.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.125802][ T9615] Tainted: [L]=SOFTLOCKUP [ 116.125806][ T9615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.125813][ T9615] Call Trace: [ 116.125816][ T9615] [ 116.125821][ T9615] dump_stack_lvl+0x100/0x190 [ 116.125839][ T9615] should_fail_ex.cold+0x5/0xa [ 116.125854][ T9615] should_failslab+0xc2/0x120 [ 116.125869][ T9615] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 116.125884][ T9615] ? __kasan_kmalloc+0xaa/0xb0 [ 116.125897][ T9615] ? page_pool_create_percpu+0x7a/0xd50 [ 116.125931][ T9615] page_pool_create_percpu+0x7a/0xd50 [ 116.125946][ T9615] bpf_test_run_xdp_live+0x192/0x760 [ 116.125965][ T9615] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 116.125981][ T9615] ? __mutex_unlock_slowpath+0x35d/0x930 [ 116.125997][ T9615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.126010][ T9615] ? find_held_lock+0x2b/0x80 [ 116.126030][ T9615] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 116.126047][ T9615] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 116.126070][ T9615] ? bpf_dispatcher_xdp+0x800/0x1000 [ 116.126081][ T9615] ? bpf_dispatcher_xdp+0x800/0x1000 [ 116.126090][ T9615] ? bpf_dispatcher_xdp+0x800/0x1000 [ 116.126099][ T9615] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 116.126115][ T9615] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 116.126139][ T9615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 116.126161][ T9615] ? fput+0x79/0x100 [ 116.126174][ T9615] ? __bpf_prog_get+0x97/0x2a0 [ 116.126189][ T9615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 116.126207][ T9615] __sys_bpf+0x2a12/0x4e80 [ 116.126222][ T9615] ? __pfx___sys_bpf+0x10/0x10 [ 116.126233][ T9615] ? find_held_lock+0x2b/0x80 [ 116.126250][ T9615] ? get_pid_task+0xfc/0x250 [ 116.126268][ T9615] ? get_pid_task+0xfc/0x250 [ 116.126289][ T9615] ? find_held_lock+0x2b/0x80 [ 116.126310][ T9615] ? rcu_read_lock_any_held+0x6a/0xa0 [ 116.126335][ T9615] ? find_held_lock+0x2b/0x80 [ 116.126352][ T9615] ? ksys_write+0x190/0x250 [ 116.126369][ T9615] ? ksys_write+0x190/0x250 [ 116.126396][ T9615] ? fput+0x79/0x100 [ 116.126411][ T9615] ? __x64_sys_bpf+0xce/0x140 [ 116.126422][ T9615] __x64_sys_bpf+0xce/0x140 [ 116.126434][ T9615] ? do_syscall_64+0x90/0x870 [ 116.126447][ T9615] do_syscall_64+0x115/0x870 [ 116.126459][ T9615] ? clear_bhb_loop+0x40/0x90 [ 116.126473][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.126485][ T9615] RIP: 0033:0x7f8a1519de99 [ 116.126495][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.126506][ T9615] RSP: 002b:00007f8a1607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.126518][ T9615] RAX: ffffffffffffffda RBX: 00007f8a15425fa0 RCX: 00007f8a1519de99 [ 116.126525][ T9615] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 116.126531][ T9615] RBP: 00007f8a1607c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.126537][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.126544][ T9615] R13: 00007f8a15426038 R14: 00007f8a15425fa0 R15: 00007fff3cd93af8 [ 116.126562][ T9615] [ 116.334514][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 116.338273][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'. [ 116.339161][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 116.344714][ T9627] netlink: 'syz.2.1036': attribute type 30 has an invalid length. [ 116.370146][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 116.370159][ T42] audit: type=1400 audit(2000000028.769:963): avc: denied { read write } for pid=9628 comm="syz.3.1037" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 116.382040][ T42] audit: type=1400 audit(2000000028.769:964): avc: denied { open } for pid=9628 comm="syz.3.1037" path="/251/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 116.396119][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 116.399534][ T9633] netlink: 'syz.2.1036': attribute type 30 has an invalid length. [ 116.404582][ T42] audit: type=1400 audit(2000000028.779:965): avc: denied { ioctl } for pid=9628 comm="syz.3.1037" path="/251/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 116.419798][ T42] audit: type=1400 audit(2000000028.819:966): avc: denied { mounton } for pid=9634 comm="syz.1.1039" path="/269/dev_mnt" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 116.438888][ T9635] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 116.441823][ T9635] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 116.442164][ T9636] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.445394][ T9635] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 116.452513][ T9628] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 116.453743][ T9638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.469398][ T9636] overlayfs: failed to look up (cgroup.events) for ino (-13) [ 116.478219][ T9635] overlayfs: failed to look up (io.pressure) for ino (-13) [ 116.524657][ T9644] NILFS (nullb0): couldn't find nilfs on the device [ 116.564532][ T9653] FAULT_INJECTION: forcing a failure. [ 116.564532][ T9653] name failslab, interval 1, probability 0, space 0, times 0 [ 116.579763][ T9653] CPU: 3 UID: 0 PID: 9653 Comm: syz.1.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.579784][ T9653] Tainted: [L]=SOFTLOCKUP [ 116.579787][ T9653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.579794][ T9653] Call Trace: [ 116.579799][ T9653] [ 116.579803][ T9653] dump_stack_lvl+0x100/0x190 [ 116.579822][ T9653] should_fail_ex.cold+0x5/0xa [ 116.579837][ T9653] should_failslab+0xc2/0x120 [ 116.579853][ T9653] __kvmalloc_node_noprof+0x116/0x970 [ 116.579868][ T9653] ? page_pool_create_percpu+0x2e0/0xd50 [ 116.579884][ T9653] page_pool_create_percpu+0x2e0/0xd50 [ 116.579899][ T9653] bpf_test_run_xdp_live+0x192/0x760 [ 116.579919][ T9653] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 116.579936][ T9653] ? __mutex_unlock_slowpath+0x35d/0x930 [ 116.579953][ T9653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.579966][ T9653] ? find_held_lock+0x2b/0x80 [ 116.579985][ T9653] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 116.580002][ T9653] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 116.580025][ T9653] ? bpf_dispatcher_xdp+0x800/0x1000 [ 116.580036][ T9653] ? bpf_dispatcher_xdp+0x800/0x1000 [ 116.580046][ T9653] ? bpf_dispatcher_xdp+0x800/0x1000 [ 116.580054][ T9653] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 116.580071][ T9653] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 116.580094][ T9653] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 116.580116][ T9653] ? fput+0x79/0x100 [ 116.580144][ T9653] ? __bpf_prog_get+0x97/0x2a0 [ 116.580159][ T9653] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 116.580178][ T9653] __sys_bpf+0x2a12/0x4e80 [ 116.580193][ T9653] ? __pfx___sys_bpf+0x10/0x10 [ 116.580204][ T9653] ? find_held_lock+0x2b/0x80 [ 116.580221][ T9653] ? get_pid_task+0xfc/0x250 [ 116.580238][ T9653] ? get_pid_task+0xfc/0x250 [ 116.580260][ T9653] ? find_held_lock+0x2b/0x80 [ 116.580280][ T9653] ? rcu_read_lock_any_held+0x6a/0xa0 [ 116.580292][ T9653] ? find_held_lock+0x2b/0x80 [ 116.580309][ T9653] ? ksys_write+0x190/0x250 [ 116.580325][ T9653] ? ksys_write+0x190/0x250 [ 116.580353][ T9653] ? fput+0x79/0x100 [ 116.580368][ T9653] ? __x64_sys_bpf+0xce/0x140 [ 116.580379][ T9653] __x64_sys_bpf+0xce/0x140 [ 116.580391][ T9653] ? do_syscall_64+0x90/0x870 [ 116.580404][ T9653] do_syscall_64+0x115/0x870 [ 116.580416][ T9653] ? clear_bhb_loop+0x40/0x90 [ 116.580429][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.580441][ T9653] RIP: 0033:0x7f8a1519de99 [ 116.580451][ T9653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.580462][ T9653] RSP: 002b:00007f8a1607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.580474][ T9653] RAX: ffffffffffffffda RBX: 00007f8a15425fa0 RCX: 00007f8a1519de99 [ 116.580481][ T9653] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 116.580488][ T9653] RBP: 00007f8a1607c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.580494][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.580505][ T9653] R13: 00007f8a15426038 R14: 00007f8a15425fa0 R15: 00007fff3cd93af8 [ 116.580519][ T9653] [ 116.584856][ T9653] page_pool_create_percpu() gave up with errno -12 [ 116.656802][ T42] audit: type=1400 audit(2000000029.059:967): avc: denied { read } for pid=9658 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.733691][ T42] audit: type=1800 audit(2000000029.129:968): pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1049" name="max_speed" dev="configfs" ino=30219 res=0 errno=0 [ 116.800528][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 116.803384][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 116.806176][ T9672] netlink: 'syz.1.1052': attribute type 15 has an invalid length. [ 116.812435][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 116.818475][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 116.824658][ T9672] netlink: 'syz.1.1052': attribute type 15 has an invalid length. [ 116.829477][ T9672] trusted_key: encrypted_key: insufficient parameters specified [ 116.865231][ T42] audit: type=1400 audit(2000000029.259:969): avc: denied { ioctl } for pid=9666 comm="syz.2.1051" path="socket:[31337]" dev="sockfs" ino=31337 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.923590][ T9682] x_tables: duplicate underflow at hook 3 [ 116.936236][ T42] audit: type=1400 audit(2000000029.329:970): avc: denied { write } for pid=9690 comm="syz.2.1056" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.946063][ T9692] binder: BC_ATTEMPT_ACQUIRE not supported [ 116.950898][ T9692] binder: 9690:9692 ioctl c0306201 200000000000 returned -22 [ 116.999150][ T9699] FAULT_INJECTION: forcing a failure. [ 116.999150][ T9699] name failslab, interval 1, probability 0, space 0, times 0 [ 117.000666][ T42] audit: type=1400 audit(2000000029.399:971): avc: denied { connect } for pid=9696 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.005034][ T9699] CPU: 0 UID: 0 PID: 9699 Comm: syz.4.1058 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.005052][ T9699] Tainted: [L]=SOFTLOCKUP [ 117.005056][ T9699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.005063][ T9699] Call Trace: [ 117.005067][ T9699] [ 117.005072][ T9699] dump_stack_lvl+0x100/0x190 [ 117.005089][ T9699] should_fail_ex.cold+0x5/0xa [ 117.005104][ T9699] should_failslab+0xc2/0x120 [ 117.005120][ T9699] __kmalloc_cache_noprof+0x91/0x6c0 [ 117.005139][ T9699] ? __xa_alloc_cyclic+0x1f2/0x330 [ 117.005156][ T9699] ? __xdp_reg_mem_model+0x134/0x6a0 [ 117.005179][ T9699] __xdp_reg_mem_model+0x134/0x6a0 [ 117.005196][ T9699] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 117.005214][ T9699] ? page_pool_list+0x223/0x2a0 [ 117.005232][ T9699] xdp_reg_mem_model+0x22/0x70 [ 117.005249][ T9699] bpf_test_run_xdp_live+0x1cb/0x760 [ 117.005268][ T9699] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 117.005284][ T9699] ? __mutex_unlock_slowpath+0x35d/0x930 [ 117.005301][ T9699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.005317][ T9699] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 117.005334][ T9699] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 117.005356][ T9699] ? bpf_dispatcher_xdp+0x800/0x1000 [ 117.005367][ T9699] ? bpf_dispatcher_xdp+0x800/0x1000 [ 117.005377][ T9699] ? bpf_dispatcher_xdp+0x800/0x1000 [ 117.005386][ T9699] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 117.005402][ T9699] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 117.005425][ T9699] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 117.005447][ T9699] ? fput+0x79/0x100 [ 117.005461][ T9699] ? __bpf_prog_get+0x97/0x2a0 [ 117.005476][ T9699] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 117.005495][ T9699] __sys_bpf+0x2a12/0x4e80 [ 117.005510][ T9699] ? __pfx___sys_bpf+0x10/0x10 [ 117.005520][ T9699] ? find_held_lock+0x2b/0x80 [ 117.005538][ T9699] ? get_pid_task+0xfc/0x250 [ 117.005556][ T9699] ? get_pid_task+0xfc/0x250 [ 117.005596][ T9699] ? find_held_lock+0x2b/0x80 [ 117.005617][ T9699] ? rcu_read_lock_any_held+0x6a/0xa0 [ 117.005628][ T9699] ? find_held_lock+0x2b/0x80 [ 117.005646][ T9699] ? ksys_write+0x190/0x250 [ 117.005663][ T9699] ? ksys_write+0x190/0x250 [ 117.005690][ T9699] ? fput+0x79/0x100 [ 117.005706][ T9699] ? __x64_sys_bpf+0xce/0x140 [ 117.005716][ T9699] __x64_sys_bpf+0xce/0x140 [ 117.005728][ T9699] ? do_syscall_64+0x90/0x870 [ 117.005742][ T9699] do_syscall_64+0x115/0x870 [ 117.005754][ T9699] ? clear_bhb_loop+0x40/0x90 [ 117.005768][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.005780][ T9699] RIP: 0033:0x7f2eed39de99 [ 117.005790][ T9699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.005802][ T9699] RSP: 002b:00007f2eeb5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.005813][ T9699] RAX: ffffffffffffffda RBX: 00007f2eed625fa0 RCX: 00007f2eed39de99 [ 117.005820][ T9699] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 117.005827][ T9699] RBP: 00007f2eeb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.005833][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.005840][ T9699] R13: 00007f2eed626038 R14: 00007f2eed625fa0 R15: 00007ffdad9b4438 [ 117.005854][ T9699] [ 117.208622][ T9710] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 117.282113][ T9713] sch_fq: defrate 4294967295 ignored. [ 117.335889][ T9721] SELinux: policydb version 1339625472 does not match my version range 15-35 [ 117.339974][ T9721] SELinux: failed to load policy [ 117.383970][ T9721] input: syz1 as /devices/virtual/input/input8 [ 117.514574][ T9727] bridge_slave_1: left allmulticast mode [ 117.521729][ T9727] bridge_slave_1: left promiscuous mode [ 117.525575][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.531337][ T9727] bridge_slave_0: left allmulticast mode [ 117.533676][ T9727] bridge_slave_0: left promiscuous mode [ 117.536630][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.596672][ T42] audit: type=1400 audit(2000000029.989:972): avc: denied { ioctl } for pid=9732 comm="syz.4.1074" path="socket:[30336]" dev="sockfs" ino=30336 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.343912][ T9764] FAULT_INJECTION: forcing a failure. [ 118.343912][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.351909][ T9764] CPU: 3 UID: 0 PID: 9764 Comm: syz.1.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.351939][ T9764] Tainted: [L]=SOFTLOCKUP [ 118.351944][ T9764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.351955][ T9764] Call Trace: [ 118.351961][ T9764] [ 118.351969][ T9764] dump_stack_lvl+0x100/0x190 [ 118.351997][ T9764] should_fail_ex.cold+0x5/0xa [ 118.352020][ T9764] _copy_to_user+0x32/0xd0 [ 118.352062][ T9764] bpf_test_finish.isra.0+0x4aa/0x650 [ 118.352094][ T9764] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 118.352124][ T9764] ? bpf_dispatcher_xdp+0x800/0x1000 [ 118.352142][ T9764] ? bpf_dispatcher_xdp+0x800/0x1000 [ 118.352156][ T9764] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 118.352182][ T9764] bpf_prog_test_run_xdp+0xa70/0x1670 [ 118.352219][ T9764] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 118.352268][ T9764] ? fput+0x79/0x100 [ 118.352291][ T9764] ? __bpf_prog_get+0x97/0x2a0 [ 118.352314][ T9764] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 118.352340][ T9764] __sys_bpf+0x2a12/0x4e80 [ 118.352365][ T9764] ? __pfx___sys_bpf+0x10/0x10 [ 118.352382][ T9764] ? find_held_lock+0x2b/0x80 [ 118.352409][ T9764] ? get_pid_task+0xfc/0x250 [ 118.352437][ T9764] ? get_pid_task+0xfc/0x250 [ 118.352472][ T9764] ? find_held_lock+0x2b/0x80 [ 118.352503][ T9764] ? rcu_read_lock_any_held+0x6a/0xa0 [ 118.352520][ T9764] ? find_held_lock+0x2b/0x80 [ 118.352545][ T9764] ? ksys_write+0x190/0x250 [ 118.352576][ T9764] ? ksys_write+0x190/0x250 [ 118.352620][ T9764] ? fput+0x79/0x100 [ 118.352645][ T9764] ? __x64_sys_bpf+0xce/0x140 [ 118.352662][ T9764] __x64_sys_bpf+0xce/0x140 [ 118.352680][ T9764] ? do_syscall_64+0x90/0x870 [ 118.352704][ T9764] do_syscall_64+0x115/0x870 [ 118.352722][ T9764] ? clear_bhb_loop+0x40/0x90 [ 118.352744][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.352762][ T9764] RIP: 0033:0x7f8a1519de99 [ 118.352777][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.352793][ T9764] RSP: 002b:00007f8a1607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.352812][ T9764] RAX: ffffffffffffffda RBX: 00007f8a15425fa0 RCX: 00007f8a1519de99 [ 118.352824][ T9764] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 118.352834][ T9764] RBP: 00007f8a1607c090 R08: 0000000000000000 R09: 0000000000000000 [ 118.352844][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.352854][ T9764] R13: 00007f8a15426038 R14: 00007f8a15425fa0 R15: 00007fff3cd93af8 [ 118.352879][ T9764] [ 118.487008][ T9763] nbd0: detected capacity change from 0 to 63 [ 118.495648][ T65] block nbd0: Receive control failed (result -32) [ 118.499159][ T2254] block nbd0: Send control failed (result -32) [ 118.502180][ T2254] block nbd0: Request send failed, requeueing [ 118.512378][ T2254] block nbd0: Dead connection, failed to find a fallback [ 118.514906][ T2254] block nbd0: shutting down sockets [ 118.520177][ T2254] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.527370][ T2254] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.532619][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.540009][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 118.542731][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.545768][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 118.548528][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.551430][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 118.566749][ T1310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.569735][ T1310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.572244][ T1310] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 118.575247][ T1310] Buffer I/O error on dev nbd0, logical block 1, async page read [ 118.580812][ T1310] Buffer I/O error on dev nbd0, logical block 2, async page read [ 118.584310][ T1310] Buffer I/O error on dev nbd0, logical block 3, async page read [ 118.588414][ T1310] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.592128][ T1310] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.595244][ T1310] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.599619][ T1310] Buffer I/O error on dev nbd0, logical block 1, async page read [ 118.604822][ T1310] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 118.608923][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.612802][ T6211] ldm_validate_partition_table(): Disk read failed. [ 118.617004][ T6211] Dev nbd0: unable to read RDB block 0 [ 118.619627][ T6211] nbd0: unable to read partition table [ 118.631846][ T6211] ldm_validate_partition_table(): Disk read failed. [ 118.635764][ T9770] netlink: 'syz.1.1084': attribute type 14 has an invalid length. [ 118.635770][ T6211] Dev nbd0: unable to read RDB block 0 [ 118.639067][ T9770] netlink: 'syz.1.1084': attribute type 14 has an invalid length. [ 118.641255][ T6211] nbd0: unable to read partition table [ 118.697658][ T9785] xt_hashlimit: max too large, truncated to 1048576 [ 118.700384][ T9785] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.820927][ T9790] siw: device registration error -23 [ 118.968491][ T9803] input: syz0 as /devices/virtual/input/input9 [ 119.029909][ T9807] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 119.096504][ T5821] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 119.187885][ T9806] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 119.256442][ T5821] usb 7-1: Using ep0 maxpacket: 8 [ 119.260607][ T5821] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 119.264095][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 119.273688][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.279844][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 119.283514][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 119.286978][ T5821] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.291641][ T5821] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.294466][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.296082][ T9825] SELinux: security policydb version 18 (MLS) not backwards compatible [ 119.301153][ T9821] kvm: pic: non byte write [ 119.305864][ T9825] SELinux: failed to load policy [ 119.309461][ T9827] SELinux: security policydb version 18 (MLS) not backwards compatible [ 119.312434][ T9827] SELinux: failed to load policy [ 119.369824][ T9835] tmpfs: Group quota inode hardlimit too large. [ 119.494050][ T9837] FAULT_INJECTION: forcing a failure. [ 119.494050][ T9837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.498086][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.4.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.498103][ T9837] Tainted: [L]=SOFTLOCKUP [ 119.498107][ T9837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.498114][ T9837] Call Trace: [ 119.498118][ T9837] [ 119.498123][ T9837] dump_stack_lvl+0x100/0x190 [ 119.498142][ T9837] should_fail_ex.cold+0x5/0xa [ 119.498156][ T9837] _copy_to_user+0x32/0xd0 [ 119.498173][ T9837] bpf_test_finish.isra.0+0x4aa/0x650 [ 119.498195][ T9837] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 119.498214][ T9837] ? bpf_dispatcher_xdp+0x800/0x1000 [ 119.498225][ T9837] ? bpf_dispatcher_xdp+0x800/0x1000 [ 119.498234][ T9837] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 119.498250][ T9837] bpf_prog_test_run_xdp+0xa70/0x1670 [ 119.498277][ T9837] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 119.498299][ T9837] ? fput+0x79/0x100 [ 119.498313][ T9837] ? __bpf_prog_get+0x97/0x2a0 [ 119.498328][ T9837] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 119.498346][ T9837] __sys_bpf+0x2a12/0x4e80 [ 119.498361][ T9837] ? __pfx___sys_bpf+0x10/0x10 [ 119.498372][ T9837] ? find_held_lock+0x2b/0x80 [ 119.498390][ T9837] ? get_pid_task+0xfc/0x250 [ 119.498408][ T9837] ? get_pid_task+0xfc/0x250 [ 119.498429][ T9837] ? find_held_lock+0x2b/0x80 [ 119.498450][ T9837] ? rcu_read_lock_any_held+0x6a/0xa0 [ 119.498461][ T9837] ? find_held_lock+0x2b/0x80 [ 119.498478][ T9837] ? ksys_write+0x190/0x250 [ 119.498495][ T9837] ? ksys_write+0x190/0x250 [ 119.498522][ T9837] ? fput+0x79/0x100 [ 119.498542][ T9837] ? __x64_sys_bpf+0xce/0x140 [ 119.498553][ T9837] __x64_sys_bpf+0xce/0x140 [ 119.498564][ T9837] ? do_syscall_64+0x90/0x870 [ 119.498579][ T9837] do_syscall_64+0x115/0x870 [ 119.498591][ T9837] ? clear_bhb_loop+0x40/0x90 [ 119.498604][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.498616][ T9837] RIP: 0033:0x7f2eed39de99 [ 119.498627][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.498638][ T9837] RSP: 002b:00007f2eeb5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.498649][ T9837] RAX: ffffffffffffffda RBX: 00007f2eed625fa0 RCX: 00007f2eed39de99 [ 119.498657][ T9837] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 119.498663][ T9837] RBP: 00007f2eeb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.498670][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.498676][ T9837] R13: 00007f2eed626038 R14: 00007f2eed625fa0 R15: 00007ffdad9b4438 [ 119.498690][ T9837] [ 119.503744][ T5821] usb 7-1: GET_CAPABILITIES returned 0 [ 119.588659][ T5821] usbtmc 7-1:16.0: can't read capabilities [ 119.660902][ T9843] FAULT_INJECTION: forcing a failure. [ 119.660902][ T9843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.667022][ T9843] CPU: 3 UID: 0 PID: 9843 Comm: syz.4.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.667051][ T9843] Tainted: [L]=SOFTLOCKUP [ 119.667057][ T9843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.667069][ T9843] Call Trace: [ 119.667075][ T9843] [ 119.667083][ T9843] dump_stack_lvl+0x100/0x190 [ 119.667111][ T9843] should_fail_ex.cold+0x5/0xa [ 119.667135][ T9843] _copy_to_user+0x32/0xd0 [ 119.667161][ T9843] simple_read_from_buffer+0xcb/0x170 [ 119.667184][ T9843] proc_fail_nth_read+0x1af/0x230 [ 119.667212][ T9843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.667240][ T9843] ? rw_verify_area+0xce/0x6d0 [ 119.667263][ T9843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.667289][ T9843] vfs_read+0x1e4/0xb40 [ 119.667346][ T9843] ? __pfx_vfs_read+0x10/0x10 [ 119.667371][ T9843] ? __fget_files+0x215/0x3d0 [ 119.667394][ T9843] ? __fget_files+0x21f/0x3d0 [ 119.667419][ T9843] ksys_read+0x12a/0x250 [ 119.667445][ T9843] ? __pfx_ksys_read+0x10/0x10 [ 119.667479][ T9843] do_syscall_64+0x115/0x870 [ 119.667500][ T9843] ? clear_bhb_loop+0x40/0x90 [ 119.667523][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.667542][ T9843] RIP: 0033:0x7f2eed35e6ce [ 119.667557][ T9843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.667574][ T9843] RSP: 002b:00007f2eeb5d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.667610][ T9843] RAX: ffffffffffffffda RBX: 00007f2eeb5d56c0 RCX: 00007f2eed35e6ce [ 119.667622][ T9843] RDX: 000000000000000f RSI: 00007f2eeb5d50a0 RDI: 0000000000000009 [ 119.667633][ T9843] RBP: 00007f2eeb5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.667643][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.667653][ T9843] R13: 00007f2eed626128 R14: 00007f2eed626090 R15: 00007ffdad9b4438 [ 119.667684][ T9843] [ 119.751280][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 119.755489][ T9792] usbtmc 7-1:16.0: Unable to send data, error -71 [ 119.777878][ T9792] gfs2: error -5 reading superblock [ 119.782403][ T5821] usb 7-1: USB disconnect, device number 12 [ 120.051954][ T9851] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 120.092482][ T9853] efs: cannot read volume header [ 120.098891][ T9853] netlink: 'syz.4.1110': attribute type 64 has an invalid length. [ 120.104166][ T9853] trusted_key: encrypted_key: insufficient parameters specified [ 120.110387][ T9853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63122 sclass=netlink_route_socket pid=9853 comm=syz.4.1110 [ 120.191818][ T9857] FAULT_INJECTION: forcing a failure. [ 120.191818][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.197636][ T9857] CPU: 3 UID: 0 PID: 9857 Comm: syz.4.1112 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.197655][ T9857] Tainted: [L]=SOFTLOCKUP [ 120.197659][ T9857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.197666][ T9857] Call Trace: [ 120.197669][ T9857] [ 120.197674][ T9857] dump_stack_lvl+0x100/0x190 [ 120.197693][ T9857] should_fail_ex.cold+0x5/0xa [ 120.197722][ T9857] _copy_to_user+0x32/0xd0 [ 120.197739][ T9857] bpf_test_finish.isra.0+0x4db/0x650 [ 120.197761][ T9857] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 120.197780][ T9857] ? bpf_dispatcher_xdp+0x800/0x1000 [ 120.197791][ T9857] ? bpf_dispatcher_xdp+0x800/0x1000 [ 120.197800][ T9857] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 120.197817][ T9857] bpf_prog_test_run_xdp+0xa70/0x1670 [ 120.197841][ T9857] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.197863][ T9857] ? fput+0x79/0x100 [ 120.197877][ T9857] ? __bpf_prog_get+0x97/0x2a0 [ 120.197892][ T9857] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.197910][ T9857] __sys_bpf+0x2a12/0x4e80 [ 120.197935][ T9857] ? __pfx___sys_bpf+0x10/0x10 [ 120.197946][ T9857] ? find_held_lock+0x2b/0x80 [ 120.197964][ T9857] ? get_pid_task+0xfc/0x250 [ 120.197982][ T9857] ? get_pid_task+0xfc/0x250 [ 120.198004][ T9857] ? find_held_lock+0x2b/0x80 [ 120.198024][ T9857] ? rcu_read_lock_any_held+0x6a/0xa0 [ 120.198035][ T9857] ? find_held_lock+0x2b/0x80 [ 120.198052][ T9857] ? ksys_write+0x190/0x250 [ 120.198070][ T9857] ? ksys_write+0x190/0x250 [ 120.198097][ T9857] ? fput+0x79/0x100 [ 120.198112][ T9857] ? __x64_sys_bpf+0xce/0x140 [ 120.198123][ T9857] __x64_sys_bpf+0xce/0x140 [ 120.198135][ T9857] ? do_syscall_64+0x90/0x870 [ 120.198151][ T9857] do_syscall_64+0x115/0x870 [ 120.198163][ T9857] ? clear_bhb_loop+0x40/0x90 [ 120.198176][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.198188][ T9857] RIP: 0033:0x7f2eed39de99 [ 120.198198][ T9857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.198209][ T9857] RSP: 002b:00007f2eeb5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.198221][ T9857] RAX: ffffffffffffffda RBX: 00007f2eed625fa0 RCX: 00007f2eed39de99 [ 120.198228][ T9857] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 120.198235][ T9857] RBP: 00007f2eeb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.198241][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.198248][ T9857] R13: 00007f2eed626038 R14: 00007f2eed625fa0 R15: 00007ffdad9b4438 [ 120.198262][ T9857] [ 120.334056][ T9871] IPv6: addrconf: prefix option has invalid lifetime [ 120.382982][ T9874] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 120.657350][ T9889] FAULT_INJECTION: forcing a failure. [ 120.657350][ T9889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.662415][ T9889] CPU: 3 UID: 0 PID: 9889 Comm: syz.2.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.662444][ T9889] Tainted: [L]=SOFTLOCKUP [ 120.662450][ T9889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.662461][ T9889] Call Trace: [ 120.662469][ T9889] [ 120.662476][ T9889] dump_stack_lvl+0x100/0x190 [ 120.662505][ T9889] should_fail_ex.cold+0x5/0xa [ 120.662528][ T9889] _copy_to_user+0x32/0xd0 [ 120.662554][ T9889] bpf_test_finish.isra.0+0x4db/0x650 [ 120.662591][ T9889] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 120.662621][ T9889] ? 0xffffffffa0206200 [ 120.662638][ T9889] ? 0xffffffffa0206200 [ 120.662650][ T9889] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 120.662676][ T9889] bpf_prog_test_run_xdp+0xa70/0x1670 [ 120.662730][ T9889] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.662766][ T9889] ? fput+0x79/0x100 [ 120.662787][ T9889] ? __bpf_prog_get+0x97/0x2a0 [ 120.662811][ T9889] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.662839][ T9889] __sys_bpf+0x2a12/0x4e80 [ 120.662864][ T9889] ? __pfx___sys_bpf+0x10/0x10 [ 120.662881][ T9889] ? find_held_lock+0x2b/0x80 [ 120.662908][ T9889] ? get_pid_task+0xfc/0x250 [ 120.662935][ T9889] ? get_pid_task+0xfc/0x250 [ 120.662970][ T9889] ? find_held_lock+0x2b/0x80 [ 120.663002][ T9889] ? rcu_read_lock_any_held+0x6a/0xa0 [ 120.663019][ T9889] ? find_held_lock+0x2b/0x80 [ 120.663045][ T9889] ? ksys_write+0x190/0x250 [ 120.663071][ T9889] ? ksys_write+0x190/0x250 [ 120.663115][ T9889] ? fput+0x79/0x100 [ 120.663140][ T9889] ? __x64_sys_bpf+0xce/0x140 [ 120.663156][ T9889] __x64_sys_bpf+0xce/0x140 [ 120.663175][ T9889] ? do_syscall_64+0x90/0x870 [ 120.663199][ T9889] do_syscall_64+0x115/0x870 [ 120.663218][ T9889] ? clear_bhb_loop+0x40/0x90 [ 120.663239][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.663258][ T9889] RIP: 0033:0x7f8f2639de99 [ 120.663272][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.663289][ T9889] RSP: 002b:00007f8f271c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.663329][ T9889] RAX: ffffffffffffffda RBX: 00007f8f26625fa0 RCX: 00007f8f2639de99 [ 120.663341][ T9889] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 120.663352][ T9889] RBP: 00007f8f271c6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.663362][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.663372][ T9889] R13: 00007f8f26626038 R14: 00007f8f26625fa0 R15: 00007ffddb70aa38 [ 120.663397][ T9889] [ 120.948838][ T9903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.951935][ T9903] block device autoloading is deprecated and will be removed. [ 120.956760][ T9902] __nla_validate_parse: 7 callbacks suppressed [ 120.956771][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 121.225172][ T9915] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.389911][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 121.392858][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 121.396667][ T9923] [U] [ 121.398170][ T9923] [U] [ 121.399064][ T9923] [U] [ 121.399961][ T9923] [U] [ 121.401002][ T9923] [U] [ 121.401912][ T9923] [U] [ 121.402800][ T9923] [U] [ 121.403701][ T9923] [U] [ 121.404861][ T9923] [U] [ 121.405751][ T9923] [U] [ 121.406683][ T9923] [U] [ 121.407571][ T9923] [U] [ 121.409341][ T1368] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 121.409997][ T9923] [U] [ 121.412597][ T9923] [U] [ 121.413518][ T9923] [U] [ 121.414353][ T9923] [U] [ 121.415581][ T9922] [U] [ 121.427601][ T9928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1138'. [ 121.431808][ T9928] fuse: Bad value for 'fd' [ 121.520013][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 121.520029][ T42] audit: type=1400 audit(2000000033.919:981): avc: denied { create } for pid=9934 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 121.526821][ T9935] 9p: Unknown uid 00000000004294967295 [ 121.531502][ T42] audit: type=1400 audit(2000000033.919:982): avc: denied { getopt } for pid=9934 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 121.571243][ T1368] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 121.571792][ T42] audit: type=1400 audit(2000000033.969:983): avc: denied { write } for pid=9938 comm="syz.2.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.580916][ T1368] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x84 has invalid maxpacket 36118, setting to 64 [ 121.589161][ T1368] usb 6-1: config 0 interface 0 has no altsetting 0 [ 121.589466][ T9942] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1144'. [ 121.596107][ T1368] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.596123][ T1368] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.596134][ T1368] usb 6-1: Product: syz [ 121.596142][ T1368] usb 6-1: Manufacturer: syz [ 121.596150][ T1368] usb 6-1: SerialNumber: syz [ 121.601922][ T1368] usb 6-1: config 0 descriptor?? [ 121.602653][ T9907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.604879][ T1368] usb 6-1: selecting invalid altsetting 0 [ 121.803706][ T42] audit: type=1400 audit(2000000034.199:984): avc: denied { connect } for pid=9957 comm="syz.3.1150" lport=43036 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 121.811076][ T6470] usb 6-1: USB disconnect, device number 17 [ 122.027249][ T9976] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 122.112873][ T42] audit: type=1400 audit(2000000034.509:985): avc: denied { write } for pid=9981 comm="syz.2.1156" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.120608][ T42] audit: type=1400 audit(2000000034.509:986): avc: denied { open } for pid=9981 comm="syz.2.1156" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.140038][ T42] audit: type=1400 audit(2000000034.519:987): avc: denied { ioctl } for pid=9981 comm="syz.2.1156" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x4112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.180096][ T42] audit: type=1400 audit(2000000034.579:988): avc: denied { create } for pid=9983 comm="syz.2.1157" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 122.180863][ T42] audit: type=1400 audit(2000000034.579:989): avc: denied { associate } for pid=9983 comm="syz.2.1157" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 122.213144][ T9984] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1920234593.1668507183.1952540018), cmd(0) [ 122.218120][ T42] audit: type=1400 audit(2000000034.579:990): avc: denied { mounton } for pid=9983 comm="syz.2.1157" path="/308/bus" dev="tmpfs" ino=1695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 122.777515][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 122.834838][T10015] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.847395][T10015] afs: Unknown parameter '' [ 122.900454][T10013] syz_tun: refused to change device tx_queue_len [ 123.007507][T10022] netlink: 'syz.1.1164': attribute type 11 has an invalid length. [ 123.038115][T10021] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 123.072629][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 123.072961][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 123.072976][T10030] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.073550][T10028] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 123.077551][T10030] tmpfs: Unknown parameter '0x0000000000000000' [ 123.151883][T10036] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 123.311607][T10039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 123.313694][T10039] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.316117][T10039] vhci_hcd vhci_hcd.0: Device attached [ 123.501968][ T5821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 123.561157][T10040] vhci_hcd: connection closed [ 123.564095][ T5814] vhci_hcd vhci_hcd.1: stop threads [ 123.566513][ T5821] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 123.568151][ T5814] vhci_hcd vhci_hcd.1: release socket [ 123.572205][ T5814] vhci_hcd vhci_hcd.1: disconnect device [ 123.619814][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1171'. [ 123.694450][T10052] bond4: option downdelay: invalid value (18446744073709551615) [ 123.703630][T10052] bond4: option downdelay: allowed values 0 - 2147483647 [ 123.716060][T10052] bond4 (unregistering): Released all slaves [ 123.735413][T10056] loop5: detected capacity change from 0 to 7 [ 123.759487][T10056] loop5: p1 < > p3 p4 [ 123.761165][T10056] loop5: partition table partially beyond EOD, truncated [ 123.767177][T10056] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 123.779471][T10055] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 123.782663][T10055] overlayfs: missing 'lowerdir' [ 123.850827][ T6214] udevd[6214]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 123.852286][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 123.854999][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 123.858447][T10058] bond0: (slave bond_slave_0): Releasing backup interface [ 123.871380][T10058] bond0: (slave bond_slave_1): Releasing backup interface [ 123.891202][T10058] team0: Port device team_slave_0 removed [ 123.902885][T10058] team0: Port device team_slave_1 removed [ 123.910803][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.914336][T10058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.920857][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.923184][T10058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.927238][T10058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.943720][T10059] team0: Mode changed to "loadbalance" [ 123.968136][T10054] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 124.147590][T10078] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 124.202044][T10085] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.325176][T10100] configfs-gadget.g1 gadget.0: HOST MAC 06:9c:01:f3:ad:70 [ 124.329223][T10100] configfs-gadget.g1 gadget.0: MAC ba:ee:f0:a2:75:5f [ 124.370365][T10100] configfs-gadget.g1 gadget.0: HOST MAC 2e:2d:ee:2d:83:31 [ 124.376704][T10100] configfs-gadget.g1 gadget.0: MAC ce:98:da:cd:84:d3 [ 124.384980][ T1368] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/2 [ 124.393216][ T1368] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 124.626468][ T5813] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.716572][ T59] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 124.777679][ T5813] usb 5-1: Dual-Role OTG device on HNP port [ 124.780252][ T5813] usb 5-1: New USB device found, idVendor=0000, idProduct=0104, bcdDevice= 7.02 [ 124.784040][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.834480][T10142] No source specified [ 124.861039][ T5813] cdc_eem 5-1:1.1 usb2: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, fe:75:50:2e:08:58 [ 124.897539][ T59] usb 9-1: Using ep0 maxpacket: 16 [ 124.907394][ T59] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 124.910905][ T5813] rndis_host 5-1:1.2 usb3: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2e:2d:ee:2d:83:31 [ 124.916847][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.922817][ T59] usb 9-1: Product: syz [ 124.924159][ T59] usb 9-1: Manufacturer: syz [ 124.928025][ T59] usb 9-1: SerialNumber: syz [ 124.943013][ T59] usb 9-1: config 0 descriptor?? [ 125.078462][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 125.369785][ T59] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 125.402404][ T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.414391][ T59] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 125.420503][ T59] usb 9-1: media controller created [ 125.442100][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.570949][ T59] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.575364][ T59] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 125.581422][ T59] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 126.155903][ T59] usb 9-1: USB disconnect, device number 10 [ 126.206808][ T59] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 126.639415][T10162] Set syz1 is full, maxelem 65536 reached [ 126.738573][T10230] netlink: 'syz.1.1209': attribute type 5 has an invalid length. [ 126.759947][T10230] overlayfs: upper fs does not support file handles, falling back to index=off. [ 126.793948][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 126.793963][ T42] audit: type=1400 audit(2000000039.189:1040): avc: denied { bind } for pid=10229 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 126.832310][ T42] audit: type=1400 audit(2000000039.229:1041): avc: denied { create } for pid=10244 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.840967][ T42] audit: type=1400 audit(2000000039.239:1042): avc: denied { setopt } for pid=10244 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.848395][T10248] random: crng reseeded on system resumption [ 126.876252][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.890492][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.550862][T10264] syzkaller0: entered promiscuous mode [ 127.552765][T10264] syzkaller0: entered allmulticast mode [ 127.563845][T10264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.755638][T10273] erspan0: entered promiscuous mode [ 127.758668][T10273] erspan0: left promiscuous mode [ 127.779118][ T42] audit: type=1400 audit(2000000040.179:1043): avc: denied { shutdown } for pid=10272 comm="syz.4.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.796599][ T1368] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 127.907432][T10284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 127.909511][T10284] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.913153][T10284] vhci_hcd vhci_hcd.0: Device attached [ 127.919373][T10284] sch_tbf: peakrate 5005471797736005545 is lower than or equals to rate 7752441571471168887 ! [ 127.957198][ T1368] usb 6-1: Using ep0 maxpacket: 8 [ 127.966964][ T1368] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 127.972082][ T1368] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.978258][ T1368] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.981429][ T1368] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 127.984915][ T1368] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 127.997470][ T1368] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.001598][ T1368] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.004689][ T1368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.086819][ T5088] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 128.118750][T10285] vhci_hcd: connection closed [ 128.119687][ T5812] vhci_hcd vhci_hcd.3: stop threads [ 128.123098][ T5812] vhci_hcd vhci_hcd.3: release socket [ 128.128113][ T5812] vhci_hcd vhci_hcd.3: disconnect device [ 128.146455][ T5088] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 128.148921][ T5088] usb 43-1: enqueue for inactive port 0 [ 128.213609][ T1368] usb 6-1: GET_CAPABILITIES returned 0 [ 128.215478][ T1368] usbtmc 6-1:16.0: can't read capabilities [ 128.216508][ T5088] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 128.414478][T10289] e1000e 0000:00:02.0 eth1: removed PHC [ 128.415670][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 128.421048][T10266] usbtmc 6-1:16.0: Unable to send data, error -71 [ 128.430329][T10266] gfs2: error -5 reading superblock [ 128.435236][ T59] usb 6-1: USB disconnect, device number 18 [ 128.471634][ T42] audit: type=1400 audit(2000000040.869:1044): avc: denied { write } for pid=10290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.529499][ T42] audit: type=1400 audit(2000000040.929:1045): avc: denied { write } for pid=10294 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.576214][T10289] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 128.696064][ T42] audit: type=1400 audit(2000000041.089:1046): avc: denied { write } for pid=10301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.707563][ T5821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 128.754406][ T42] audit: type=1400 audit(2000000041.149:1047): avc: denied { map } for pid=10308 comm="syz.4.1229" path="socket:[34930]" dev="sockfs" ino=34930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.767345][ T42] audit: type=1400 audit(2000000041.149:1048): avc: denied { read } for pid=10308 comm="syz.4.1229" path="socket:[34930]" dev="sockfs" ino=34930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.786928][ T42] audit: type=1400 audit(2000000041.179:1049): avc: denied { write } for pid=10312 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.791156][T10314] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.824545][T10314] Bluetooth: hci0: invalid len left 7, exp >= 100 [ 128.836843][T10314] CIFS: VFS: UNC: path must begin with // or \\ [ 128.841923][T10314] Malformed UNC in devname [ 128.841923][T10314] [ 128.844093][T10314] CIFS: VFS: Malformed UNC in devname [ 128.877541][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 128.998988][T10299] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 129.033500][T10299] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 129.040998][T10299] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 129.045949][T10299] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 129.049832][T10299] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 129.052298][T10299] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 129.054847][T10299] pci 0000:00:02.0: enabling Extended Tags [ 129.109267][T10299] pci 0000:00:02.0: Adding to iommu group 2 [ 129.171641][T10334] netlink: 'syz.4.1235': attribute type 9 has an invalid length. [ 129.171657][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 129.173730][T10336] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 129.180995][T10336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 129.187171][T10299] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 129.191012][T10336] vhci_hcd vhci_hcd.0: Device attached [ 129.191887][T10299] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 129.195091][T10334] netlink: 'syz.4.1235': attribute type 9 has an invalid length. [ 129.198311][T10299] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 129.201934][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 129.203624][T10299] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 129.212337][T10299] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 129.217412][T10334] smc: net device vlan1 applied user defined pnetid SYZ2 [ 129.344938][T10299] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 129.436454][ T5821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 129.468689][T10299] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 129.506301][T10339] vhci_hcd: connection closed [ 129.509558][ T5812] vhci_hcd vhci_hcd.1: stop threads [ 129.512961][ T5812] vhci_hcd vhci_hcd.1: release socket [ 129.515553][ T5812] vhci_hcd vhci_hcd.1: disconnect device [ 129.592069][ T5821] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 129.611832][T10299] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 129.614667][T10299] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 129.617397][T10299] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 129.842385][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 129.937484][ T5813] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 130.010043][T10396] overlayfs: upper fs does not support file handles, falling back to index=off. [ 130.013037][T10396] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 130.020700][T10396] ucma_write: process 703 (syz.4.1249) changed security contexts after opening file descriptor, this is not allowed. [ 130.086685][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 130.091110][ T5813] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 130.094774][ T5447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.099335][ T5813] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 130.103630][ T5813] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.107539][ T5813] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 130.112901][ T5813] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 130.120024][ T5813] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.124990][ T5813] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.129246][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.129466][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1252'. [ 130.140332][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 130.355804][ T5813] usb 7-1: GET_CAPABILITIES returned 0 [ 130.358372][ T5813] usbtmc 7-1:16.0: can't read capabilities [ 130.408009][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 130.423607][T10431] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 130.426142][T10431] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.434771][T10431] vhci_hcd vhci_hcd.0: Device attached [ 130.439137][T10431] sch_tbf: peakrate 5005471797736005545 is lower than or equals to rate 7752441571471168887 ! [ 130.545593][T10433] vhci_hcd: connection closed [ 130.545938][ T5814] vhci_hcd vhci_hcd.4: stop threads [ 130.550433][ T5814] vhci_hcd vhci_hcd.4: release socket [ 130.554889][ T5814] vhci_hcd vhci_hcd.4: disconnect device [ 130.557497][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 130.558884][T10374] usbtmc 7-1:16.0: Unable to send data, error -71 [ 130.565605][ T5088] usb 7-1: USB disconnect, device number 13 [ 130.583406][ T5821] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 130.606663][ T5813] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 131.132931][T10452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 131.135118][T10452] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.141279][T10452] vhci_hcd vhci_hcd.0: Device attached [ 131.153847][T10452] sch_tbf: peakrate 5005471797736005545 is lower than or equals to rate 7752441571471168887 ! [ 131.256465][ T59] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 131.362473][T10453] vhci_hcd: connection closed [ 131.363735][ T5814] vhci_hcd vhci_hcd.4: stop threads [ 131.368191][ T5814] vhci_hcd vhci_hcd.4: release socket [ 131.369922][ T5814] vhci_hcd vhci_hcd.4: disconnect device [ 131.392962][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'. [ 131.396751][ T59] usb 6-1: device descriptor read/64, error -71 [ 131.421532][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 131.516798][ T5813] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 131.548262][T10470] loop3: detected capacity change from 0 to 7 [ 131.553529][ C0] blk_print_req_error: 102 callbacks suppressed [ 131.553553][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.558689][ C0] buffer_io_error: 138 callbacks suppressed [ 131.558697][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.565748][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.568913][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.573855][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.576993][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.580923][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.583951][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.586899][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.589993][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.595932][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.599144][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.602532][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.606264][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.609083][T10470] ldm_validate_partition_table(): Disk read failed. [ 131.613470][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.616558][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.620766][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.623773][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.627289][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.630298][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 131.633634][T10470] Dev loop3: unable to read RDB block 0 [ 131.636055][T10470] loop3: unable to read partition table [ 131.638362][T10470] loop3: partition table beyond EOD, truncated [ 131.640396][T10470] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 131.656674][ T59] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 131.786432][ T59] usb 6-1: device descriptor read/64, error -71 [ 131.829027][T10479] ipvlan0: entered promiscuous mode [ 131.830912][T10479] ipvlan0: entered allmulticast mode [ 131.832754][T10479] veth0_vlan: entered allmulticast mode [ 131.897876][ T59] usb usb6-port1: attempt power cycle [ 132.246624][ T59] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 132.266993][ T59] usb 6-1: device descriptor read/8, error -71 [ 132.310682][T10511] xfrm1: entered allmulticast mode [ 132.473844][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 132.473861][ T42] audit: type=1400 audit(2000000044.869:1069): avc: denied { write } for pid=10515 comm="syz.4.1283" name="g1" dev="configfs" ino=10870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.506426][ T59] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 132.527381][ T59] usb 6-1: device descriptor read/8, error -71 [ 132.637033][ T59] usb usb6-port1: unable to enumerate USB device [ 132.718442][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724163][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904507][T10534] support for cryptoloop has been removed. Use dm-crypt instead. [ 132.946590][ T59] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 132.959188][T10536] overlayfs: failed to resolve './file1': -2 [ 133.096472][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 133.099507][ T59] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 133.106063][ T59] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1926, setting to 1024 [ 133.113093][T10543] XFS (nbd2): SB validate failed with error -5. [ 133.129828][ T59] usb 9-1: config 0 interface 0 has no altsetting 0 [ 133.132853][ T59] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.139080][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.142988][ T59] usb 9-1: config 0 descriptor?? [ 133.145090][T10525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.208820][T10551] ufs: You didn't specify the type of your ufs filesystem [ 133.208820][T10551] [ 133.208820][T10551] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 133.208820][T10551] [ 133.208820][T10551] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 133.214669][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 133.219603][T10551] ufs: ufstype=old is supported read-only [ 133.230658][T10551] ufs: ufs_fill_super(): bad magic number [ 133.238798][ T42] audit: type=1400 audit(2000000045.639:1070): avc: denied { setopt } for pid=10550 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 133.322589][ T42] audit: type=1400 audit(2000000045.719:1071): avc: denied { connect } for pid=10555 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.324542][T10556] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 133.333568][T10556] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 133.342821][T10556] veth1_macvtap: left promiscuous mode [ 133.457618][T10563] netlink: 'syz.2.1298': attribute type 21 has an invalid length. [ 133.460190][T10563] netlink: 'syz.2.1298': attribute type 6 has an invalid length. [ 133.502174][ T42] audit: type=1400 audit(2000000045.899:1072): avc: denied { write } for pid=10565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.545168][T10568] "syz.2.1299" (10568) uses obsolete ecb(arc4) skcipher [ 133.554204][T10569] "syz.2.1299" (10569) uses obsolete ecb(arc4) skcipher [ 133.575698][ T42] audit: type=1400 audit(2000000045.969:1073): avc: denied { write } for pid=10575 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.644087][ T5447] veth1_macvtap: entered promiscuous mode [ 133.687809][ T59] usbhid 9-1:0.0: can't add hid device: -71 [ 133.689812][ T59] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 133.704633][ T59] usb 9-1: USB disconnect, device number 11 [ 133.748078][T10524] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 133.755865][ T42] audit: type=1400 audit(2000000046.149:1074): avc: denied { write } for pid=10583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.799485][ T42] audit: type=1400 audit(2000000046.199:1075): avc: denied { write } for pid=10586 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.856477][ T5821] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 134.006538][ T5821] usb 7-1: Using ep0 maxpacket: 8 [ 134.010194][ T5821] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 134.013518][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 134.018051][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.022075][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 134.026830][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 134.030828][ T5821] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.035941][ T5821] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.039732][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.155080][ T42] audit: type=1400 audit(2000000046.549:1076): avc: denied { read } for pid=10589 comm="syz.1.1301" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.249177][ T5821] usb 7-1: GET_CAPABILITIES returned 0 [ 134.251659][ T5821] usbtmc 7-1:16.0: can't read capabilities [ 134.398830][T10610] overlay: ./file0 is not a directory [ 134.450098][ T5821] usb 7-1: USB disconnect, device number 14 [ 134.541877][T10623] __nla_validate_parse: 2 callbacks suppressed [ 134.541895][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 134.550473][T10623] netlink: 'syz.3.1313': attribute type 21 has an invalid length. [ 134.553156][T10623] netlink: 'syz.3.1313': attribute type 6 has an invalid length. [ 134.556127][T10623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1313'. [ 134.651317][ T42] audit: type=1400 audit(2000000047.049:1077): avc: denied { accept } for pid=10628 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.708834][T10631] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 134.709136][T10632] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 134.725535][T10631] bond4: entered promiscuous mode [ 134.727611][T10631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.743561][T10632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.745904][T10632] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 134.749379][T10632] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 134.756656][T10632] bond4: (slave vti0): making interface the new active one [ 134.759481][T10632] vti0: entered promiscuous mode [ 134.762840][T10632] bond4: (slave vti0): Enslaving as an active interface with an up link [ 135.039944][T10652] syzkaller0: left promiscuous mode [ 135.041753][T10652] syzkaller0: left allmulticast mode [ 135.221105][T10672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10672 comm=syz.3.1329 [ 135.233330][T10672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.294224][T10672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.351486][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.428704][T10688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 135.453630][T10688] netlink: 'syz.2.1333': attribute type 21 has an invalid length. [ 135.456425][ T61] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 135.456667][T10688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1333'. [ 135.609088][ T42] audit: type=1326 audit(2000000048.009:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10697 comm="syz.2.1336" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f2639de99 code=0x0 [ 135.616621][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 135.620980][ T61] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 135.623663][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.627320][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.630502][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.634028][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.638129][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.642763][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.645654][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.836588][ T5821] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 135.852829][ T61] usb 6-1: GET_CAPABILITIES returned 0 [ 135.854671][ T61] usbtmc 6-1:16.0: can't read capabilities [ 135.988309][ T5821] usb 9-1: Using ep0 maxpacket: 8 [ 135.991571][ T5821] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.994216][ T5821] usb 9-1: config 0 has no interface number 0 [ 135.996185][ T5821] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.999662][ T5821] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 136.003242][ T5821] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.006872][ T5821] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.010921][ T5821] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 136.013748][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.017773][ T5821] usb 9-1: config 0 descriptor?? [ 136.024364][ T5821] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 136.058835][ T5813] usb 6-1: USB disconnect, device number 23 [ 136.246276][ T1368] usb 9-1: USB disconnect, device number 12 [ 136.261317][ T1368] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 136.504491][T10725] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 136.844934][T10774] [U] zͻi[27| [ 136.846528][T10774] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 136.850981][T10774] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 136.854180][T10774] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 136.866910][T10774] [U] 8)X)YvxRĻbmbN@ox;JD, [ 136.869137][T10774] [U] *Cn3v7KEXgt_3 [ 136.871201][T10774] [U] D/QazҬEHgE1$_ks=R@ [ 136.873058][T10774] [U] ϼcEv @ [ 136.874261][T10774] [U] a% [ 136.875311][T10774] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 136.881339][T10774] [U] f1p3 [ 136.882417][T10774] [U] N0[L;a_l&kMC [ 136.884016][T10774] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 136.888070][T10773] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 139.872872][ T5447] RSP: 0018:ffffc900030f6f20 EFLAGS: 00010206 [ 139.874724][ T5447] RAX: dffffc0000000000 RBX: ffff888031df1610 RCX: ffffffff87d1359f [ 139.877092][ T5447] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 139.879559][ T5447] RBP: ffff88802b4583b0 R08: 0000000000000005 R09: 0000000000000005 [ 139.881963][ T5447] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b458c00 [ 139.884408][ T5447] R13: ffff888031df1600 R14: ffff88802b4583a8 R15: 0000000000000000 [ 139.886709][ T5447] FS: 00007fe8e1d1b780(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 139.889395][ T5447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.891339][ T5447] CR2: 0000564aeb824da8 CR3: 0000000025c12000 CR4: 0000000000352ef0 [ 139.893629][ T5447] Call Trace: [ 139.894625][ T5447] [ 139.895516][ T5447] usb_ep_queue+0xfa/0x3c0 [ 139.896822][ T5447] eth_start_xmit+0x684/0x1390 [ 139.898366][ T5447] dev_hard_start_xmit+0x121/0x760 [ 139.899964][ T5447] sch_direct_xmit+0x1b2/0xc70 [ 139.901403][ T5447] ? lock_acquire+0x1b9/0x370 [ 139.902783][ T5447] ? __pfx_sch_direct_xmit+0x10/0x10 [ 139.904392][ T5447] ? do_raw_spin_lock+0x200/0x260 [ 139.905893][ T5447] __dev_queue_xmit+0x27ac/0x4970 [ 139.907407][ T5447] ? ip6mr_fib_lookup+0x133/0x1a0 [ 139.908999][ T5447] ? __pfx___dev_queue_xmit+0x10/0x10 [ 139.910672][ T5447] ? __lock_acquire+0x49f/0x1a40 [ 139.912242][ T5447] ip6_finish_output2+0xfd4/0x1ce0 [ 139.913841][ T5447] __ip6_finish_output+0x357/0xdf0 [ 139.915382][ T5447] ip6_output+0x2aa/0xa60 [ 139.916681][ T5447] ? __pfx_ip6_output+0x10/0x10 [ 139.918145][ T5447] ? __pfx_ip6_finish_output+0x10/0x10 [ 139.919854][ T5447] ? __flow_hash_from_keys+0xa2/0x4f0 [ 139.921482][T10915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1383'. [ 139.921550][ T5447] ip6_mr_output+0x233/0x1180 [ 139.926114][ T5447] ? netlbl_enabled+0x54/0x70 [ 139.927611][ T5447] ? __pfx_ip6_mr_output+0x10/0x10 [ 139.929171][ T5447] ? __ip6_local_out+0x38c/0xaf0 [ 139.930621][ T5447] ? __pfx_dst_output+0x10/0x10 [ 139.932098][ T5447] ? __pfx_ip6_mr_output+0x10/0x10 [ 139.933646][ T5447] ? ip6_local_out+0x1ad/0x1f0 [ 139.935147][ T5447] ip6_local_out+0x1ad/0x1f0 [ 139.936620][ T5447] ip6_send_skb+0x112/0x430 [ 139.938092][ T5447] ip6_push_pending_frames+0x3b/0x50 [ 139.939728][ T5447] rawv6_sendmsg+0x2d0c/0x4420 [ 139.941194][ T5447] ? find_held_lock+0x2b/0x80 [ 139.942604][ T5447] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 139.944239][ T5447] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 139.946118][ T5447] ? __pfx_sock_has_perm+0x10/0x10 [ 139.947724][ T5447] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 139.949232][ T5447] ? inet_sendmsg+0x11c/0x140 [ 139.950614][ T5447] inet_sendmsg+0x11c/0x140 [ 139.951966][ T5447] ____sys_sendmsg+0x9c9/0xbe0 [ 139.953407][ T5447] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.954966][ T5447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.956574][ T5447] ___sys_sendmsg+0x190/0x1e0 [ 139.958063][ T5447] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.959705][ T5447] ? __pfx_sock_read_iter+0x10/0x10 [ 139.961337][ T5447] ? __pfx_sock_read_iter+0x10/0x10 [ 139.962949][ T5447] __sys_sendmsg+0x160/0x210 [ 139.964380][ T5447] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.965911][ T5447] do_syscall_64+0x115/0x870 [ 139.967356][ T5447] ? clear_bhb_loop+0x40/0x90 [ 139.968875][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.970695][ T5447] RIP: 0033:0x7fe8e1da5407 [ 139.972052][ T5447] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 139.977956][ T5447] RSP: 002b:00007ffd675bb4a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 139.980444][ T5447] RAX: ffffffffffffffda RBX: 00007fe8e1d1b780 RCX: 00007fe8e1da5407 [ 139.982900][ T5447] RDX: 0000000000000000 RSI: 00007ffd675cb650 RDI: 000000000000000d [ 139.985280][ T5447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.987737][ T5447] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd675db880 [ 139.990217][ T5447] R13: 0000000000000002 R14: 0000000000000010 R15: 00007ffd675cb650 [ 139.992587][ T5447] [ 139.993535][ T5447] Modules linked in: [ 139.995271][ T5447] ---[ end trace 0000000000000000 ]--- [ 139.997027][ T5447] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 139.998665][ T5447] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 140.004549][ T5447] RSP: 0018:ffffc900030f6f20 EFLAGS: 00010206 [ 140.006440][ T5447] RAX: dffffc0000000000 RBX: ffff888031df1610 RCX: ffffffff87d1359f [ 140.008977][ T5447] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 140.011448][ T5447] RBP: ffff88802b4583b0 R08: 0000000000000005 R09: 0000000000000005 [ 140.013815][ T5447] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b458c00 [ 140.016381][ T5447] R13: ffff888031df1600 R14: ffff88802b4583a8 R15: 0000000000000000 [ 140.018829][ T5447] FS: 00007fe8e1d1b780(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 140.021541][ T5447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.023575][ T5447] CR2: 0000564aeb824da8 CR3: 0000000025c12000 CR4: 0000000000352ef0 [ 140.025983][ T5447] Kernel panic - not syncing: Fatal exception in interrupt [ 140.028700][ T5447] Kernel Offset: disabled [ 140.030029][ T5447] Rebooting in 86400 seconds..