last executing test programs: 2m33.70214507s ago: executing program 2 (id=211): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x9ef96000) r3 = syz_io_uring_setup(0x5621, &(0x7f0000000340)={0x0, 0x6c61, 0x80, 0x3, 0x117}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6465636f646573206e6fee6500"], 0xd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000080)={r1, 0x3, 0x5, 0x0, 0xd1}, 0x1) 2m30.663250034s ago: executing program 2 (id=243): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x15, 0x33, 0x40, @remote, @local, {[], "3b010000000004d200000001000000000001000000"}}}, 0x3d) 2m30.522431247s ago: executing program 2 (id=245): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = msgget(0x3, 0x8) msgctl$IPC_RMID(r9, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x9, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x80000) sendto(r6, &(0x7f0000000040)="2b6c64173e9cb32b240c795b66c8a7e4ec7d48f8c122626898c746c1ba8091374dcfe283dc0fc21d28dd503b5327ce148aebbed438f49c1213b31ad4cbcf53ee199df685805e595ce19f0765d99acc521ade5de208bd3a4be7069a33f939d87f003a6036313c4b71e9d21321144dc7488d19e7902d033f931b45703cd661840db1151e9ad24b5de328146cb4c011196386998cb84a3faf81752604fc99bae85ee68a4928802bf8f20435da64a8cd", 0xae, 0x48011, &(0x7f0000000140)=@sco, 0x80) 2m29.611367284s ago: executing program 2 (id=253): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x200) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='11', 0x2) 2m28.99344247s ago: executing program 2 (id=255): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000700)={"0300", 0x9, 0x6, 0xff, 0x0, 0x8, "f700194000", "e3ffffff", "083d5a16", '\x00', ["39000000000400030800", "800400", "1c436d743c97c443084000"]}) syz_emit_vhci(&(0x7f0000001340)=ANY=[@ANYBLOB="02c83013000f0001000b7f0400b2"], 0x18) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x200013, 0x0) 2m28.294433623s ago: executing program 2 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 2m28.262978298s ago: executing program 32 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 2m13.57268972s ago: executing program 0 (id=433): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb204}, 0x48) 2m13.313108871s ago: executing program 0 (id=434): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/1000, 0xfdef) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2, 0x80000000, 0x0, 0xd, 0x11, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x5, 0xff, 0x0, 0x5, [0xffffffff, 0x1]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000003f00000008000500", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m13.122787259s ago: executing program 0 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffff25d8, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x3f, 0x7f, 0x10, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x80, 0x40, 0x8, 0x338c4432}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0017d20000004abe3c47000000000000", @ANYRES32=0x1, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="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"], 0x44}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000004c0)={0x28, 0x0, r8, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xa000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="b805000000b9001800000f01d93e66c9b805000000b9f07f00000f01c18f895001ea3e0f005300470f07c4217ee658a2f30fa6d0420f320f01f8", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r8, r8, 0xf, 0xfffffffffffffff8, 0x3fff}) 2m12.74380317s ago: executing program 0 (id=442): r0 = syz_ublk_setup_io_uring(0x124, &(0x7f0000000240)={0x0, 0xba8c, 0x2000, 0x1, 0x371}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r1 = io_uring_setup(0x5ace, &(0x7f0000000180)={0x0, 0x10, 0x40000, 0x0, 0xff, 0x0, r0}) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r5, &(0x7f00000004c0)='\x00', 0x1) (async) write$dsp(r5, &(0x7f00000004c0)='\x00', 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 2m12.593666853s ago: executing program 0 (id=445): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfffffffd, 0x12, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x40601) ioctl$TIOCCONS(r3, 0x541d) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.42837276s ago: executing program 0 (id=450): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@local, 0xa, 0x20}]}, 0x38}}, 0x40408c0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48401) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000340)=ANY=[@ANYBLOB='\r\x00\x00\x00\b']) r3 = inotify_init() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close(0xffffffffffffffff) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xd) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x66a42, 0x16a) inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0x850003d1) 1m59.182955075s ago: executing program 3 (id=586): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x48) 1m58.953666521s ago: executing program 3 (id=589): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async, rerun: 64) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (rerun: 64) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xf) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) (async, rerun: 32) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a", @ANYRESOCT=r8, @ANYRESOCT=r9], 0x0, 0x5, 0x1f, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0xf3a, 0x0) (async) write$binfmt_misc(r11, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r11, 0x0, 0x81, 0x2) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee50150305870ca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x24048800) 1m58.853926231s ago: executing program 3 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x2000, 0xa0363159}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ed) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/idVendor\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r4, &(0x7f0000000380)={0xffffffffffffffe2, 0xb57, 0xe9c8ac96b48f8ff4, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/Loopback.usb0\x00') 1m58.743602208s ago: executing program 3 (id=593): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x8000, @multicast2}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000700)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000d4b000/0x18000)=nil, &(0x7f0000000bc0)=[@text16={0x10, &(0x7f0000000240)="2ef32ed9ff0f060fb0c10f9303f466b8a5f6af0e0f23c00f21f8663500000c000f23f8f30fc7300f20d86635080000000f22d8f20f78f2e91836660f3828874477", 0x41}], 0x1, 0x60, &(0x7f0000000c00), 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) ptrace$poke(0x5, r7, &(0x7f0000000000), 0xfffffffefffffffd) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$MEMWRITEOOB64(r8, 0xc0184d15, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x0, 0x0, {{0x14, 0x4, 0x2, 0x33, 0x50, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @loopback, {[@generic={0x44, 0x9, "83b09394e4e8d1"}, @rr={0x7, 0xf, 0xa2, [@broadcast, @empty, @empty]}, @rr={0x7, 0x7, 0xa7, [@private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x6, [{@multicast1, 0x9}, {@rand_addr=0x64010100}, {@rand_addr=0x4, 0xb6b}]}]}}}}}) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x12) 1m58.614485929s ago: executing program 3 (id=595): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e0000002000000020000000400000000d470028c0f4296e4430e4150"], 0x0) timerfd_create(0x7, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)='8', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x33) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r1], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450e00280064000007069078e0000002ac1414bb4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="507800276ce7104824f210d1f820ff81bf0064cf2730e8"], 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r7, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r9, &(0x7f0000000040)="0d2bc7e48314bf370cfc1ec8bd0e32276439c51982262c56cf410930d6e02b", 0x1f) read(r8, &(0x7f0000000000)=""/256, 0x100) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000480)) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m58.26588237s ago: executing program 3 (id=596): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x280500, 0x80) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x40002) close_range(0xffffffffffffffff, r1, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x8) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x1}, 0xfe}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@remote, 0x1, 0x0, 0x30, 0x0, [{@multicast2}, {@remote}, {}]}}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f00000003c0)={{&(0x7f00000001c0)=[{0x3ff, 0x3, 0xd6, {0x1, 0x4}, 0x8, 0x0, 0x5}, {0x81, 0x2, 0x3, {0x101, 0x80000000}, 0x3, 0x5, 0xa}, {0x10000, 0x8, 0x8, {0xe, 0x7fff}, 0x6, 0x0, 0x7}], 0x3, 0x40, 0x1aa, 0x1}, {&(0x7f0000000280)=[{0x2, 0x84a}, {0x401, 0x5f7}, {0xffffffffffffffff, 0xfffffffffffff019}], 0x3, 0x10, 0xfff, 0xfffffffffffffff8}, {&(0x7f00000002c0)=[0x48, 0x100, 0x5, 0xfffffffeffffffff, 0xffffffffd5e2931c, 0x1645b1d5], 0x6, 0x8, 0x0, 0x98}, {&(0x7f0000000300)=[{0x5, 0x31a6bddd, 0x6, 0xc, 0x2}, {0x3, 0x800, 0x6, 0x6, 0x1}], 0x2, 0x28, 0x5, 0xe0}, {&(0x7f0000000380)=[0xc3ef, 0x4, 0x54c, 0x9, 0xffffffffffffffff, 0x4], 0x6, 0x8, 0x0, 0x8}}) write$P9_RWSTAT(r0, &(0x7f0000000440)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000480)={'\x00', 0x1000}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) r4 = openat$cgroup_devices(r0, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000500)={'a', ' *:* ', 'm\x00'}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) close_range(r3, r1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x8, 0xffff, 0x7, 0x1, 0x20000, 0x1, 0x5, '\x00', r2, r4, 0x5, 0x0, 0x3}, 0x50) close_range(r3, r7, 0x0) recvmmsg(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/33, 0x21}, {&(0x7f00000007c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)=""/248, 0xf8}, {&(0x7f0000000a80)=""/108, 0x6c}, {&(0x7f0000000b00)=""/238, 0xee}], 0x8, &(0x7f0000000c80)=""/9, 0x9}, 0x9}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)=""/8, 0x8}, {&(0x7f0000000d00)=""/51, 0x33}, {&(0x7f0000000d40)=""/216, 0xd8}, {&(0x7f0000000e40)=""/194, 0xc2}, {&(0x7f0000000f40)=""/60, 0x3c}, {&(0x7f0000000f80)=""/190, 0xbe}, {&(0x7f0000001040)=""/74, 0x4a}, {&(0x7f00000010c0)=""/39, 0x27}, {&(0x7f0000001100)=""/8, 0x8}], 0x9, &(0x7f0000001200)=""/152, 0x98}, 0x6}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/210, 0xd2}, {&(0x7f00000013c0)=""/236, 0xec}, {&(0x7f00000014c0)=""/97, 0x61}], 0x3, &(0x7f0000001580)=""/207, 0xcf}, 0x114}, {{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=""/166, 0xa6}}], 0x4, 0x100, &(0x7f0000001880)={0x77359400}) io_uring_register$IORING_REGISTER_QUERY(r5, 0x23, &(0x7f0000001b00)=[{&(0x7f0000001a80)={&(0x7f0000001980)={0x0, &(0x7f00000018c0)="b52487ed7cd08231f49e728eedbd097d966c0f596bce0214bb1dcf001d11c914f3b129de7ee187578d47a2f669c3a50c79c22eadd52a01f8fce9e8871e4d004cb21518db327612e57948750c83d046a152582acf16e0cf4e3a691030bef53d707d608fe3d3acb72bfc14eedb108b8a3b2a13240b8a72cecc8e16bd3a87e4a347dbc8", 0x0, 0x82}, &(0x7f00000019c0)="05042460601079b9018ff8b2dd31f7e28e5d64e04e76a0a8b6e5c40c9e6ad8e470ae8b990edf83ee9a3ae833645c02e5e110082990f8a89f80afa80a62c8f76acc3b06754865cbc8c885afbef62b9069ea0f7195465ae6d29fb4814d054f851618c5e8c5a848556c5a1095170a30a8f97dd2560ded1810fe79d48be70a237e271c41a8a455398e80ca53d2e749eb031a567e30ec5843d7a25fdc8935d084f6bca8", 0x0, 0xa1}, &(0x7f0000001ac0)="b868ff327e1b817b8ec54dba587c4b73fd6b5ac6c0197e73dc556df0c18a34bf1e8b2ae3fe3a", 0x1, 0x26}], 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000001b40)={'ip6gretap0\x00', {0x2, 0x0, @initdev}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$cgroup_devices(r8, &(0x7f0000001bc0)={'a', ' *:* ', 'wm\x00'}, 0x9) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000001c00)={@empty, @multicast1}, &(0x7f0000001c40)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x558}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001d80), 0x14000, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r7, 0xc0105872, &(0x7f0000001dc0)={0x4, 0x1}) 1m58.174494202s ago: executing program 33 (id=596): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x280500, 0x80) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x40002) close_range(0xffffffffffffffff, r1, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x8) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x1}, 0xfe}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@remote, 0x1, 0x0, 0x30, 0x0, [{@multicast2}, {@remote}, {}]}}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f00000003c0)={{&(0x7f00000001c0)=[{0x3ff, 0x3, 0xd6, {0x1, 0x4}, 0x8, 0x0, 0x5}, {0x81, 0x2, 0x3, {0x101, 0x80000000}, 0x3, 0x5, 0xa}, {0x10000, 0x8, 0x8, {0xe, 0x7fff}, 0x6, 0x0, 0x7}], 0x3, 0x40, 0x1aa, 0x1}, {&(0x7f0000000280)=[{0x2, 0x84a}, {0x401, 0x5f7}, {0xffffffffffffffff, 0xfffffffffffff019}], 0x3, 0x10, 0xfff, 0xfffffffffffffff8}, {&(0x7f00000002c0)=[0x48, 0x100, 0x5, 0xfffffffeffffffff, 0xffffffffd5e2931c, 0x1645b1d5], 0x6, 0x8, 0x0, 0x98}, {&(0x7f0000000300)=[{0x5, 0x31a6bddd, 0x6, 0xc, 0x2}, {0x3, 0x800, 0x6, 0x6, 0x1}], 0x2, 0x28, 0x5, 0xe0}, {&(0x7f0000000380)=[0xc3ef, 0x4, 0x54c, 0x9, 0xffffffffffffffff, 0x4], 0x6, 0x8, 0x0, 0x8}}) write$P9_RWSTAT(r0, &(0x7f0000000440)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000480)={'\x00', 0x1000}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) r4 = openat$cgroup_devices(r0, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000500)={'a', ' *:* ', 'm\x00'}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) close_range(r3, r1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x8, 0xffff, 0x7, 0x1, 0x20000, 0x1, 0x5, '\x00', r2, r4, 0x5, 0x0, 0x3}, 0x50) close_range(r3, r7, 0x0) recvmmsg(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/33, 0x21}, {&(0x7f00000007c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)=""/248, 0xf8}, {&(0x7f0000000a80)=""/108, 0x6c}, {&(0x7f0000000b00)=""/238, 0xee}], 0x8, &(0x7f0000000c80)=""/9, 0x9}, 0x9}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)=""/8, 0x8}, {&(0x7f0000000d00)=""/51, 0x33}, {&(0x7f0000000d40)=""/216, 0xd8}, {&(0x7f0000000e40)=""/194, 0xc2}, {&(0x7f0000000f40)=""/60, 0x3c}, {&(0x7f0000000f80)=""/190, 0xbe}, {&(0x7f0000001040)=""/74, 0x4a}, {&(0x7f00000010c0)=""/39, 0x27}, {&(0x7f0000001100)=""/8, 0x8}], 0x9, &(0x7f0000001200)=""/152, 0x98}, 0x6}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/210, 0xd2}, {&(0x7f00000013c0)=""/236, 0xec}, {&(0x7f00000014c0)=""/97, 0x61}], 0x3, &(0x7f0000001580)=""/207, 0xcf}, 0x114}, {{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=""/166, 0xa6}}], 0x4, 0x100, &(0x7f0000001880)={0x77359400}) io_uring_register$IORING_REGISTER_QUERY(r5, 0x23, &(0x7f0000001b00)=[{&(0x7f0000001a80)={&(0x7f0000001980)={0x0, &(0x7f00000018c0)="b52487ed7cd08231f49e728eedbd097d966c0f596bce0214bb1dcf001d11c914f3b129de7ee187578d47a2f669c3a50c79c22eadd52a01f8fce9e8871e4d004cb21518db327612e57948750c83d046a152582acf16e0cf4e3a691030bef53d707d608fe3d3acb72bfc14eedb108b8a3b2a13240b8a72cecc8e16bd3a87e4a347dbc8", 0x0, 0x82}, &(0x7f00000019c0)="05042460601079b9018ff8b2dd31f7e28e5d64e04e76a0a8b6e5c40c9e6ad8e470ae8b990edf83ee9a3ae833645c02e5e110082990f8a89f80afa80a62c8f76acc3b06754865cbc8c885afbef62b9069ea0f7195465ae6d29fb4814d054f851618c5e8c5a848556c5a1095170a30a8f97dd2560ded1810fe79d48be70a237e271c41a8a455398e80ca53d2e749eb031a567e30ec5843d7a25fdc8935d084f6bca8", 0x0, 0xa1}, &(0x7f0000001ac0)="b868ff327e1b817b8ec54dba587c4b73fd6b5ac6c0197e73dc556df0c18a34bf1e8b2ae3fe3a", 0x1, 0x26}], 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000001b40)={'ip6gretap0\x00', {0x2, 0x0, @initdev}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$cgroup_devices(r8, &(0x7f0000001bc0)={'a', ' *:* ', 'wm\x00'}, 0x9) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000001c00)={@empty, @multicast1}, &(0x7f0000001c40)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x558}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001d80), 0x14000, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r7, 0xc0105872, &(0x7f0000001dc0)={0x4, 0x1}) 1m56.813490018s ago: executing program 34 (id=450): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@local, 0xa, 0x20}]}, 0x38}}, 0x40408c0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48401) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000340)=ANY=[@ANYBLOB='\r\x00\x00\x00\b']) r3 = inotify_init() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close(0xffffffffffffffff) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xd) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x66a42, 0x16a) inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0x850003d1) 32.433508896s ago: executing program 4 (id=1598): socket$inet_tcp(0x2, 0x1, 0x0) mq_open(0x0, 0x40, 0x3d4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/240) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 31.615367084s ago: executing program 4 (id=1600): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x4, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 31.585641319s ago: executing program 4 (id=1602): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff8}, 0x1c) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 31.502752973s ago: executing program 4 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x36c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x2e7, 0x142, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @fd=r0}, @nested={0x29c, 0xfe, 0x0, 0x1, [@typed={0x6b, 0x12e, 0x0, 0x0, @binary="801601be65ce74cb72ad06ebac07c22c6714ec77a06787dc83bf7e02677222b70096895df5a6c6fe099e1e813d9945541431cdeb42b0a5007f9735c1329f578f05e448c02818353421395e483c8f0cabd6b7b6218f9d8c1bf7cc2cb809e57054eef99c94242cc0"}, @nested={0x62, 0x132, 0x0, 0x1, [@nested={0x4, 0x20}, @generic="778fec40e1fa", @typed={0x5, 0x13, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x157}, @nested={0x4, 0x81}, @typed={0x3d, 0x45, 0x0, 0x0, @binary="18419e5a41d8a5ce487b0136c250aa48d9b63e3b56868d5fd79c4d11a74ebb1023ee4d9962c6b34b37da38f52e54cf7615d6a778f4822846e6"}, @nested={0x4, 0x94}]}, @generic="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", @nested={0x30, 0x52, 0x0, 0x1, [@nested={0x4, 0xd8}, @nested={0x4, 0xf3}, @typed={0x14, 0x142, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x125}, @typed={0x9, 0x44, 0x0, 0x0, @str='\xc2\'$!\x00'}]}, @generic="5fcbb768009fffc22fcc011acaebcb4dad2cf90e3b67d8c682c6ff8ed223a0eda34dcdd7b6975c60df4397a3431ac156ed6674e863bb648dca868ee55a82b63f4ba50c9514b3ac201370cc098c6611956caaeb8d32466533a07f72f7f761ff570cd9c5c760fdd654bae4e4aeab50aa457d37b8c8875a7a6856870c8282691df59aa70bfdcf96b4cb49ef9d33b62ca0916e29eb6fd69a7a0d0ead21fd9ed1"]}, @generic="58372b742a22617296c230cf2cae42866ecfedb8ce82e268c8b078f10d3f4b5a213231e7a0f7989424163c58c5a4ec2ac34a996670447987893da01d60de3d"]}, @nested={0x69, 0x1, 0x0, 0x1, [@generic="2d273b16d1f219c787c2267490ed13b93f248f58d21c83d825d30bb7c648d589629229d271970f4e41260a9e60c9f96e9eb214ea51ee9867a8c80d8ffeadfa93e577ce9a25731bc05d69c7d1020bef878ee2c25e8f150de8d666ec6696", @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, @nested={0x4, 0x9e}]}, 0x36c}, 0x1, 0x0, 0x0, 0x20000055}, 0xc000) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000003c0), 0x224000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000015c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003600)={0x50, 0x0, r2, {0x7, 0x2d, 0x9, 0x2000000, 0x5, 0xfbae, 0x5, 0x2e, 0x0, 0x0, 0x80, 0x5}}, 0x50) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000100)={'c', ' *:* ', 'w\x00'}, 0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r13}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb5}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x767e, 0x8000, 0x1, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x10, 0x1, 0x902c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021d, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r3, 0x5328) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 31.436149422s ago: executing program 4 (id=1605): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x812201) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) 31.063673553s ago: executing program 4 (id=1606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0007000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 31.011848626s ago: executing program 35 (id=1606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0007000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3.532410826s ago: executing program 7 (id=1765): r0 = syz_io_uring_setup(0x22f1, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0xfffffffd, 0x260}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x4, r4, 0x0, 0x0, 0x8004, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001680)=@get={0x1, &(0x7f0000000680)=""/4096, 0x9}) 3.481243999s ago: executing program 7 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r4 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x4, 0x7}, 0x80, 0x0}}], 0x1, 0x40001) bind$alg(r5, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000240)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.363296937s ago: executing program 7 (id=1768): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x9ef96000) r4 = syz_io_uring_setup(0x5621, &(0x7f0000000340)={0x0, 0x6c61, 0x80, 0x3, 0x117}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="6465636f646573206e6fee6500"], 0xd) socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000080)={r2, 0x3, 0x5, 0x0, 0xd1}, 0x1) 2.240303132s ago: executing program 6 (id=1778): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3204000, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@noxattr}, {@directio}, {@access_uid={'access', 0x3d, r0}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_measure}, {@fsname}]}}) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x400440, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x20, 0x0, 0xfffffff9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000340)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x4, 0x0, 0x8, 0xc, 0x8, 0x80}, @ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7ff}, @ringbuf_query, @alu={0x7, 0x0, 0x2, 0x4, 0x2, 0x18, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}], &(0x7f0000000400)='GPL\x00', 0x9, 0x66, &(0x7f0000000440)=""/102, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x4103, 0xfffffffc}, 0x10, 0xda5b, 0xffffffffffffffff, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x4, 0x3, 0x7}, {0x5, 0x1, 0xc, 0x5}, {0x0, 0x4, 0xe, 0x2}, {0x0, 0x4, 0x1, 0x5}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, r1, 0x22, 0x0, 0xffffffffffffffff, @void, @value=r3, @void, @void, r2}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x400080, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f00000006c0)=0x2) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000700), 0x4c00, 0x0) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000740)=@type=0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x3) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000007c0)={0x9, 0x10, [0x3, 0x2, 0x10, 0x9], &(0x7f0000000780)=[0x0, 0x0]}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) sendto$packet(r1, &(0x7f0000000800)="be6c6871812f0a02acd638496492d0077f843644cbd8af5d8d9ad1a0", 0x1c, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0xb, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@ifindex, r3, 0xe, 0x26, 0x0, @void, @void, @void, @value=r6, r2}, 0x20) r8 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r8, &(0x7f0000000b80)='ns/net\x00') ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000000bc0)={{0x6, 0x2, 0xfffffffc, 0x7, 0x7}, [{0x8, 0x5, 0x9, 0x1}, {0x9, 0x7, 0x4, 0x8}, {0x10, 0x8, 0xda, 0x1}, {0x5, 0x80000000, 0x3, 0x3}, {0xb6, 0x2, 0x60, 0x97}, {0x1, 0x6, 0x87, 0x5}]}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000cc0)={'TPROXY\x00'}, &(0x7f0000000d00)=0x1e) r9 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000d40)={r9, r1}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000dc0)={0x8001, 0x28, [0xe, 0x5, 0xa94, 0x8], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@getqdisc={0x38, 0x26, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0xffe0, 0xffe0}, {0xf, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000101}, 0x404c831) fchmod(r5, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex=r7, r3, 0x2f, 0x28, 0x0, @void, @void, @void, @value=r6, r2}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000f80)={0x80000000}, 0x8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0xf) 2.178289519s ago: executing program 6 (id=1779): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x9ef96000) r2 = syz_io_uring_setup(0x5621, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000080)={r0, 0x3, 0x5, 0x0, 0xd1}, 0x1) 1.023705649s ago: executing program 5 (id=1790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00600000061800002c0012800b00010069703667726500001c000280080004000200000006000300020000000800150010b20e0008000a00", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x440b0) 971.646724ms ago: executing program 5 (id=1791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) bind$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x81, 0x2}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010801080000000010000000010000090600024060020000040004800900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00') r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd26, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe5b7, 0x904, 0x5, 0x5e0, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r8, 0x7}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r11 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r11, 0x89e0, &(0x7f0000000040)=0xfff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000081000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20008004, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r12, 0x0, 0x1, 0x4}}, 0x20) 968.976876ms ago: executing program 6 (id=1792): r0 = io_uring_setup(0x1e41, &(0x7f00000002c0)={0x0, 0x284f, 0x2, 0xfffffffe, 0x239}) setresuid(0xee00, 0xee00, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 883.979975ms ago: executing program 6 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendto$inet(r3, &(0x7f0000000300)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 800.052583ms ago: executing program 6 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2bb60}]}}}]}, 0x40}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x141100, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)) 736.699292ms ago: executing program 6 (id=1796): epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x581100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800090400000000000000000a002000000000000000000008001e000100"], 0x38}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) 736.468396ms ago: executing program 1 (id=1797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 664.124167ms ago: executing program 1 (id=1798): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="262ef30f090f01ca2e0fc7b80f00f30f090f01df6766c7442400f0ffff7f6766c7442402000000006766c744240600000000670f011c24640f01c30f4abb00000f01f02e640f01c2", 0x48}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 608.066425ms ago: executing program 5 (id=1799): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'veth1_to_hsr\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xbca, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000000c0)={r2, 0x325a}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}]}, 0x24}}, 0x80) r6 = syz_open_dev$loop(&(0x7f0000000400), 0x9, 0x1c3c82) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r1) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000004c0)={@private=0xa010102, @loopback, 0x0, 0x5, [@multicast2, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, 0x24) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x7808, 0x700, 0x1ff, 0x4, {{0x1d, 0x4, 0x1, 0x6, 0x74, 0x65, 0x0, 0x80, 0x2f, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x1, [{@rand_addr=0x64010101, 0x360}, {@remote, 0xd}, {@multicast2, 0xfffffffd}]}, @lsrr={0x83, 0x27, 0xf6, [@dev={0xac, 0x14, 0x14, 0x18}, @remote, @multicast1, @multicast2, @empty, @private=0xa010101, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x1c, 0x6a, 0x0, 0x6, [0x4, 0x8, 0x3, 0x1000, 0x7, 0x100]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x0, 0x1, 0x7, 0x1b1, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x75, 0x0, 0x0, @private=0xa010101, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x29, 0x91, 0xef, 0x3ff, 0x70, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x10, 0x7800, 0xe5, 0x8ab}}) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000800)={@remote, @remote, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000880)={@empty, 0x0}, &(0x7f00000008c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x7, 0x2, 0x7, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x80, 0xc34f, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x0, 0x8, 0x1, @local, @private0, 0x40, 0x20, 0x79, 0x2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001100)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={0x218, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4008011}, 0x4001) 546.759888ms ago: executing program 5 (id=1800): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800000000000000fb150605a8371f2efe088557001f000000a935c30614176958ac0b3cc613548c5f9a7467639e4c6162535420b14c0ca3338da0637c97257dd19c79487b0c74ddb338ff5db2d168a156b2343dcb552475cbb3f83908b03d4631a94a030000000000000000000000000000000000000000000000000000004307f6ae5d26feae7b53bbf2bf60fddceb66ec084f1a5f7fa215d3d244f552b11ed21a029653ef5dd30c283978c18ff4ae530400000000000000e8ca982f46e797711aec04d211afd3610ffbf86a2eaa5c1ddba069acdbbe1a634bd93f3838dbaf3d6be9f3f932b06c796e9a1c4fa3902e"], 0x5f1502) 495.73157ms ago: executing program 1 (id=1801): r0 = io_uring_setup(0x1e41, &(0x7f00000002c0)={0x0, 0x284f, 0x2, 0xfffffffe, 0x239}) setresuid(0xee00, 0xee00, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 494.933274ms ago: executing program 1 (id=1802): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$null(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0xe4a, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xae1, 0x10, r4, r5, 0x1000, '\x00', 0x4, 0xffff, 0x1, 0x9, {0x4, 0x3}, {0x1001, 0xc}, {0x1ffffff, 0xa72}, {0x0, 0xa00}, 0x2, 0x574, 0x9db, 0xbb4}}}}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '\xec'}, {}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, '#! '}, {}], 0xa, "4230133220d6d1dedbf8adc05b47ca8fe7f0cb078a8285d4ff458f279dbe556d21ca76988602e199406bdb47c24db8e7940dbd3d35235b9a26de7762"}, 0x6c) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 433.467163ms ago: executing program 5 (id=1803): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) read(r1, &(0x7f0000000340)=""/111, 0x6f) syz_clone(0x200, 0x0, 0xfffffffffffffef9, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x5}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000700)={{r2, &(0x7f0000000040)='.*#]@^^&0\x00', 0x210102, &(0x7f0000000080)={@align=0x3, {0x4, 0xabd, 0x7, 0x100000000}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000180)=0x9b3f}, 0x4, &(0x7f0000000680)=[{0x3, 0xf, &(0x7f00000001c0)='\x93%\xf5{\x00', &(0x7f0000000200)="b9cf3d5e735d2d40b39cde37afda646e5120fda9f8b4aa53dbfde8b6e9d0aebe6ab31f6e54e8099f9fe05da0b875d11f5287fc97b19013d00826d938650255a122a2feaf53ae1b70083b4ae3a51466ced692b0bb20d7fe6ed4568fa32983d521925f467183522c106955eb2b6249f40318c35593d818ff4b65a7474289602430", 0x80, 0x32}, {0x1, 0xdd5a, &(0x7f00000002c0)='\\-+!\x00', &(0x7f00000003c0)="a1e5bdb2a901aee050e3f3c02781d01ce1f6a80b9f3f520f951ca24cc2727e2925080d586136d57aa332131b5b54d52571c8b2e1265e3c3ba103531355bdba97c56cedd71c922cbacbdf63e9d553db318454c2d5d110216be488fd39843268cd32985ba033c0b332e113ee763c1dccca42709dce09935a9ed0829230f2d92eb9f5fed7fc56eecde32189fb7d005885c637990871986749fba8d64e0c84c7f0b75b520e7785e7d8155343fc977f3fd07a41ba7230c1d6ceeb52282aff46744e23fed1466f3aba87b858c48e90a9a5f69c60cba7c9b3becdf9a389fccd8234e97a5eb9ca63af64464d9091", 0xea, 0x8}, {0x1, 0x8000, &(0x7f00000004c0)='\\\x00', &(0x7f0000000500)="f996780443b02959e8f76c80a14a635845ef603e05fe79046b733342776c894ef6149c8372", 0x25, 0x30}, {0x1, 0x2000000, &(0x7f0000000540)='\\\xc7/[$\x00', &(0x7f0000000580)="0cba984d8cdca4d812f904532d69e8bc45de11b77832bc3f7723a90c13a22e92423e97cc810470c3cbaca4fe6aebe1bd6341e7dfd4b673a0116a1044964fb9e9379771c8be01dea389e77cfa4bc18a2f4a02eceaace706d3bcf83eb61674c7a12ad732dcafb1f095d69f13f6cb954bddd553217236dae8a2f52da56ea726acac97304985533d184178e80546c9915419109e8b5bc2b3c4bc1f05d20745fde43f8e728990ffb03683a42738739e61b0642e3d46ecfb5d2f373540f9cc42967de9a514ad0514844a406184ba0db9eb1e0860896aa6c147f5d3587278a7e067be57a370474ee0d5b92319703e3c2b41b78482", 0xf1}]}) 332.395165ms ago: executing program 5 (id=1804): socket$inet_tcp(0x2, 0x1, 0x0) mq_open(0x0, 0x40, 0x3d4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/240) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 330.752826ms ago: executing program 7 (id=1805): syz_open_dev$video(0x0, 0x4, 0x103000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) (async) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) (async) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="93926a3db190e6fc783e6305379462a408aaa60872e0cd0d79ceca7f1d2c0b044e5ac76adbc9715a399dd8950a92fbf718eebda6f3bd61dfb36213ab5945855a", 0x40, r3) (async) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="93926a3db190e6fc783e6305379462a408aaa60872e0cd0d79ceca7f1d2c0b044e5ac76adbc9715a399dd8950a92fbf718eebda6f3bd61dfb36213ab5945855a", 0x40, r3) sendmsg$nl_route(r2, 0x0, 0x0) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r4) (async) close(r4) socket(0x26, 0x6, 0x2) keyctl$session_to_parent(0x12) socket$pptp(0x18, 0x1, 0x2) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x39, 0x65, 0x39, 0x32, 0x63, 0x36, 0x37, 0x63, 0x64, 0x31, 0x37, 0x61, 0x33, 0x30, 0x66, 0x30]}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x39, 0x65, 0x39, 0x32, 0x63, 0x36, 0x37, 0x63, 0x64, 0x31, 0x37, 0x61, 0x33, 0x30, 0x66, 0x30]}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1b, r5}) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 222.530837ms ago: executing program 1 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000800028004000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setns(0xc9, 0x0) (async) socket(0x8, 0x5, 0x5) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x42020054, 0x0, &(0x7f0000000100)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="a9000000100001040500000003000000100000cd461d5d7532e2ec92064ba1c18ff108b80fcea85a2f", @ANYRES32=0x0, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r3], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 171.139599ms ago: executing program 1 (id=1807): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) close_range(r1, r1, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x200400) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x7}, {0xa, 0x4e23, 0x4, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000100), 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = dup3(r6, r7, 0x80000) pread64(r7, 0x0, 0x0, 0x140ec000000000) write$FUSE_CREATE_OPEN(r8, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x9, 0x0, 0xfbfd, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {0x400000000000, 0x0, 0x0, 0x8}, {}, 0x0, 0x2, 0x1}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 169.725509ms ago: executing program 7 (id=1808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffff8, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x1fffff, 0x8000000000010000, 0x906, r4, r5, 0x2000, '\x00', 0x6, 0xffffffffffffffff, 0x81, 0xffffffffffffffff, {0xa, 0x403}, {0x4, 0xffffffff}, {0x570e}, {0xffffffffe, 0xa03}, 0x8, 0x0, 0xfffffffe, 0x5}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0xffffffff, 0x22000100, 0x0, 0x0, 0x8000000}}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ff10000000000000200000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) fchdir(r0) 0s ago: executing program 7 (id=1809): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r8, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x199}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): [ 132.007743][ T8933] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 132.010833][ T8933] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 132.013858][ T8933] vivid-000: Enable Capture Cropping: true grabbed [ 132.016084][ T8933] vivid-000: Enable Capture Composing: true grabbed [ 132.018226][ T8933] vivid-000: Enable Capture Scaler: true grabbed [ 132.020616][ T8933] vivid-000: Timestamp Source: End of Frame [ 132.022615][ T8933] vivid-000: Colorspace: sRGB [ 132.027368][ T8933] vivid-000: Transfer Function: Default [ 132.030538][ T8933] vivid-000: Y'CbCr Encoding: Default [ 132.032327][ T8933] vivid-000: HSV Encoding: Hue 0-179 [ 132.034138][ T8933] vivid-000: Quantization: Default [ 132.035950][ T8933] vivid-000: Apply Alpha To Red Only: false [ 132.037955][ T8933] vivid-000: Standard Aspect Ratio: 4x3 [ 132.042174][ T8933] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 132.044725][ T8933] vivid-000: DV Timings: 640x480p59 inactive [ 132.046773][ T8933] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 132.049910][ T8933] vivid-000: Maximum EDID Blocks: 2 [ 132.051840][ T8933] vivid-000: Limited RGB Range (16-235): false [ 132.054412][ T8933] vivid-000: Rx RGB Quantization Range: Automatic [ 132.057050][ T8933] vivid-000: Power Present: 0x00000001 [ 132.059744][ T8933] tpg source WxH: 320x240 (Luma) [ 132.061705][ T8933] tpg field: 1 [ 132.062894][ T8933] tpg crop: (0,0)/320x240 [ 132.064481][ T8933] tpg compose: (0,0)/320x240 [ 132.066035][ T8933] tpg colorspace: 8 [ 132.067310][ T8933] tpg transfer function: 0/0 [ 132.069880][ T8933] tpg quantization: 0/0 [ 132.071637][ T8933] tpg RGB range: 0/2 [ 132.073411][ T8933] vivid-000: ================== END STATUS ================== [ 132.130664][ T1044] IPVS: starting estimator thread 0... [ 132.198081][ T8943] syzkaller0: entered promiscuous mode [ 132.202172][ T8943] syzkaller0: entered allmulticast mode [ 132.205702][ T8941] /dev/sg0: Can't lookup blockdev [ 132.211493][ T8941] overlay: ./file0 is not a directory [ 132.211792][ T8947] overlay: ./file0 is not a directory [ 132.218644][ T8938] IPVS: using max 43 ests per chain, 103200 per kthread [ 132.232934][ T8941] overlay: ./file0 is not a directory [ 132.258311][ T8943] netlink: 'syz.5.909': attribute type 2 has an invalid length. [ 132.277793][ T8943] : entered promiscuous mode [ 132.358989][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.912'. [ 132.362082][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.912'. [ 132.561355][ T8983] syzkaller0: entered promiscuous mode [ 132.563682][ T8983] syzkaller0: entered allmulticast mode [ 132.692584][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.857778][ T9007] netlink: 7 bytes leftover after parsing attributes in process `syz.4.928'. [ 132.867172][ T5858] libceph: mon0 (1)[c::]:6789 socket error on write [ 132.871853][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 132.878379][ T9001] ceph: No mds server is up or the cluster is laggy [ 132.984615][ T9018] syzkaller0: entered promiscuous mode [ 132.986785][ T9018] syzkaller0: entered allmulticast mode [ 133.072443][ T9022] netlink: 32 bytes leftover after parsing attributes in process `syz.6.933'. [ 133.149511][ T9030] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 134.173648][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 134.205417][ T9066] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 134.211761][ T9066] binder: BC_ACQUIRE_RESULT not supported [ 134.213681][ T9066] binder: 9065:9066 ioctl c0306201 2000000003c0 returned -22 [ 134.228749][ T9066] input: syz0 as /devices/virtual/input/input13 [ 134.445658][ T9077] overlayfs: workdir and upperdir must reside under the same mount [ 134.736492][ T9089] xt_l2tp: missing protocol rule (udp|l2tpip) [ 134.916315][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.953'. [ 134.920574][ T9096] openvswitch: netlink: IPv4 tunnel dst address is zero [ 134.999764][ T9099] netlink: 'syz.6.954': attribute type 8 has an invalid length. [ 135.163884][ T1044] IPVS: starting estimator thread 0... [ 135.166740][ T9108] IPVS: set_ctl: invalid protocol: 88 100.1.1.0:3620 [ 135.251038][ T9109] IPVS: using max 43 ests per chain, 103200 per kthread [ 135.499026][ T9127] overlayfs: conflicting options: nfs_export=on,index=off [ 135.526317][ T9127] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.530424][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.964'. [ 135.588327][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 135.588344][ T42] audit: type=1400 audit(2000000013.220:1457): avc: denied { read } for pid=9128 comm="syz.5.965" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.600927][ T42] audit: type=1400 audit(2000000013.230:1458): avc: denied { open } for pid=9128 comm="syz.5.965" path="/dev/usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.612029][ T42] audit: type=1400 audit(2000000013.230:1459): avc: denied { ioctl } for pid=9128 comm="syz.5.965" path="/dev/usbmon3" dev="devtmpfs" ino=747 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.708312][ T9140] hub 4-0:1.0: USB hub found [ 135.710953][ T9140] hub 4-0:1.0: 2 ports detected [ 135.711201][ T9139] binder: 9137:9139 ioctl 2275 200000000040 returned -22 [ 135.715677][ T9138] binder: 9137:9138 unknown command 1472 [ 135.717681][ T9138] binder: 9137:9138 ioctl c0306201 200000000640 returned -22 [ 135.784164][ T42] audit: type=1400 audit(2000000013.430:1460): avc: denied { read write } for pid=9147 comm="syz.1.971" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 135.793645][ T42] audit: type=1400 audit(2000000013.430:1461): avc: denied { open } for pid=9147 comm="syz.1.971" path="/210/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 135.801504][ T42] audit: type=1400 audit(2000000013.440:1462): avc: denied { ioctl } for pid=9147 comm="syz.1.971" path="/210/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 135.814307][ T42] audit: type=1400 audit(2000000013.460:1463): avc: denied { write } for pid=9151 comm="syz.4.972" name="0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.847473][ T42] audit: type=1400 audit(2000000013.490:1464): avc: denied { ioctl } for pid=9158 comm="syz.6.974" path="socket:[29172]" dev="sockfs" ino=29172 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.861328][ T42] audit: type=1400 audit(2000000013.500:1465): avc: denied { link } for pid=9156 comm="syz.5.973" name="#1e" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.880723][ T42] audit: type=1400 audit(2000000013.510:1466): avc: denied { rename } for pid=9156 comm="syz.5.973" name="#1f" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.909265][ T9167] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 135.940056][ T9167] bond2: entered promiscuous mode [ 135.941752][ T9167] bond2: entered allmulticast mode [ 135.943795][ T9167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.976546][ T9167] erspan1: entered allmulticast mode [ 135.986819][ T9167] bond2: (slave erspan1): making interface the new active one [ 135.990287][ T9167] erspan1: entered promiscuous mode [ 135.993737][ T9167] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 136.075043][ T9186] netlink: 'syz.5.981': attribute type 1 has an invalid length. [ 136.120636][ T9186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.133165][ T9189] syzkaller0: entered promiscuous mode [ 136.135026][ T9189] syzkaller0: entered allmulticast mode [ 136.140961][ T9189] tipc: Enabled bearer , priority 0 [ 136.141733][ T1044] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 136.146128][ T1044] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 136.146360][ T9187] tipc: Resetting bearer [ 136.156457][ T1044] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz0 [ 136.172077][ T9187] tipc: Disabling bearer [ 136.210944][ T9186] vlan2: entered allmulticast mode [ 136.212626][ T9186] macsec0: entered allmulticast mode [ 136.214346][ T9186] veth1_macvtap: entered allmulticast mode [ 136.216763][ T9186] bond3: (slave vlan2): Error -34 calling dev_set_mtu [ 136.518980][ T847] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 136.668903][ T847] usb 9-1: Using ep0 maxpacket: 16 [ 136.672293][ T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.676015][ T847] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 136.679800][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.686919][ T847] usb 9-1: config 0 descriptor?? [ 136.695887][ T847] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 136.755709][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 136.766557][ T9218] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.770543][ T9214] sctp: [Deprecated]: syz.6.991 (pid 9214) Use of int in max_burst socket option. [ 136.770543][ T9214] Use struct sctp_assoc_value instead [ 136.771398][ T9218] overlayfs: failed to set xattr on upper [ 136.777927][ T9218] overlayfs: ...falling back to redirect_dir=nofollow. [ 136.780393][ T9218] overlayfs: ...falling back to index=off. [ 136.784117][ T9218] overlayfs: ...falling back to uuid=null. [ 136.794017][ T9218] overlayfs: cleanup of 'bus/work' failed (-13) [ 136.798083][ T9218] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 136.802546][ T9218] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 136.807011][ T9218] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 136.815808][ T9218] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 136.925182][ T1047] usb 9-1: USB disconnect, device number 13 [ 137.734729][ T1167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 137.803702][ T9258] XFS (nbd5): SB validate failed with error -5. [ 138.052550][ T9283] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 138.062997][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.188768][ T1044] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 138.190043][ T9289] netlink: 3080 bytes leftover after parsing attributes in process `syz.5.1015'. [ 138.196271][ T9289] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.1015'. [ 138.309182][ T9298] xt_hashlimit: size too large, truncated to 1048576 [ 138.339191][ T1044] usb 9-1: Using ep0 maxpacket: 16 [ 138.343503][ T1044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.347555][ T1044] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.352645][ T1044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.373615][ T1044] usb 9-1: config 0 descriptor?? [ 138.385287][ T1044] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 138.440363][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1022'. [ 138.624877][ T847] usb 9-1: USB disconnect, device number 14 [ 138.636451][ T9326] netlink: 'syz.5.1025': attribute type 39 has an invalid length. [ 138.839078][ T9334] xt_l2tp: v2 doesn't support IP mode [ 138.913390][ T9339] overlayfs: failed to resolve './file0': -2 [ 139.106422][ T9353] hpfs: Bad magic ... probably not HPFS [ 139.166975][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1036'. [ 139.237743][ T9364] binder: BINDER_SET_CONTEXT_MGR already set [ 139.242219][ T9364] binder: 9362:9364 ioctl 4018620d 200000000100 returned -16 [ 139.265622][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.271210][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.278537][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.608701][ T5858] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 139.760702][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.765346][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.769860][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.775295][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.779161][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.788585][ T5858] usb 6-1: config 0 descriptor?? [ 139.915818][ T9384] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 140.200573][ T5858] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 140.228559][ T7968] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 140.378533][ T7968] usb 10-1: Using ep0 maxpacket: 16 [ 140.382442][ T7968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.386627][ T7968] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 140.390724][ T7968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.394783][ T1044] usb 6-1: USB disconnect, device number 25 [ 140.408825][ T7968] usb 10-1: config 0 descriptor?? [ 140.420831][ T7968] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 140.619864][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 140.619881][ T42] audit: type=1400 audit(2000000018.270:1484): avc: denied { bind } for pid=9392 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.646459][ T5827] usb 10-1: USB disconnect, device number 8 [ 140.717248][ T7924] libceph: connect (1)[c::]:6789 error -101 [ 140.720206][ T7924] libceph: mon0 (1)[c::]:6789 connect error [ 140.724622][ T9396] ceph: No mds server is up or the cluster is laggy [ 140.771555][ T42] audit: type=1400 audit(2000000018.420:1485): avc: denied { create } for pid=9404 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.779876][ T42] audit: type=1400 audit(2000000018.420:1486): avc: denied { bind } for pid=9404 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.158535][ T5858] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 141.214217][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 141.262486][ T9424] hfsplus: unable to find HFS+ superblock [ 141.310153][ T9431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1059'. [ 141.341937][ T42] audit: type=1400 audit(2000000018.990:1487): avc: denied { name_bind } for pid=9433 comm="syz.5.1061" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 141.435977][ T9440] syzkaller0: entered promiscuous mode [ 141.437943][ T9440] syzkaller0: entered allmulticast mode [ 141.457748][ T9440] tipc: Enabled bearer , priority 0 [ 141.461665][ T9439] tipc: Resetting bearer [ 141.475685][ T9439] tipc: Disabling bearer [ 141.552761][ T9442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53601 sclass=netlink_route_socket pid=9442 comm=syz.1.1064 [ 141.648531][ T5855] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 141.675439][ T42] audit: type=1400 audit(2000000019.320:1488): avc: denied { setattr } for pid=9447 comm="syz.6.1066" name="/" dev="9p" ino=82313283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.686330][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1066'. [ 141.691283][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1066'. [ 141.694285][ T9448] hsr_slave_0: left promiscuous mode [ 141.696555][ T9448] hsr_slave_1: left promiscuous mode [ 141.786901][ T42] audit: type=1400 audit(2000000019.430:1489): avc: denied { accept } for pid=9449 comm="syz.4.1067" lport=52178 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.787955][ T9453] CIFS: VFS: UNC: path must begin with // or \\ [ 141.794526][ T42] audit: type=1400 audit(2000000019.430:1490): avc: denied { setopt } for pid=9449 comm="syz.4.1067" lport=52178 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 141.796493][ T9453] Malformed UNC in devname [ 141.796493][ T9453] [ 141.806072][ T9453] CIFS: VFS: Malformed UNC in devname [ 141.830495][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.834068][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.835795][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 141.837211][ T5855] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.847332][ T5855] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.850418][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.854459][ T5855] usb 10-1: config 0 descriptor?? [ 142.111181][ T42] audit: type=1400 audit(2000000019.760:1491): avc: denied { write } for pid=9466 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.117378][ T42] audit: type=1400 audit(2000000019.760:1492): avc: denied { read } for pid=9466 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.123484][ T1047] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 142.170876][ T42] audit: type=1400 audit(2000000019.820:1493): avc: denied { create } for pid=9466 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.180090][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1072'. [ 142.267259][ T5855] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 142.271632][ T1047] usb 9-1: Using ep0 maxpacket: 16 [ 142.277823][ T1047] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.281061][ T1047] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 142.283917][ T1047] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.287772][ T1047] usb 9-1: config 0 descriptor?? [ 142.291587][ T1047] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 142.461059][ T1044] usb 10-1: USB disconnect, device number 9 [ 142.523676][ T9479] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 142.527634][ T9479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.632160][ T9484] syzkaller0: entered promiscuous mode [ 142.634383][ T9484] syzkaller0: entered allmulticast mode [ 142.653461][ T9484] tipc: Enabled bearer , priority 0 [ 142.656719][ T9483] tipc: Resetting bearer [ 142.668270][ T9483] tipc: Disabling bearer [ 142.763968][ T9486] hugetlbfs: syz.6.1079 (9486): Using mlock ulimits for SHM_HUGETLB is obsolete [ 143.007571][ T9494] veth1_macvtap: Device is already in use. [ 143.261177][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 143.403875][ T9512] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 143.406789][ T9512] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 143.698557][ T1044] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 143.848564][ T1044] usb 10-1: Using ep0 maxpacket: 16 [ 143.851671][ T1044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.854859][ T1044] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.857791][ T1044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.863017][ T1044] usb 10-1: config 0 descriptor?? [ 143.868767][ T1044] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 143.983605][ T9516] syzkaller0: entered promiscuous mode [ 143.985671][ T9516] syzkaller0: entered allmulticast mode [ 144.085992][ T1047] usb 10-1: USB disconnect, device number 10 [ 144.098006][ T9518] binder: 9517:9518 ioctl c0306201 2000000003c0 returned -22 [ 144.149856][ T9521] nvme_fabrics: missing parameter 'transport=%s' [ 144.153452][ T9521] nvme_fabrics: missing parameter 'nqn=%s' [ 144.176706][ T9523] nvme_fabrics: missing parameter 'transport=%s' [ 144.179206][ T9523] nvme_fabrics: missing parameter 'nqn=%s' [ 144.216480][ T9526] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.689688][ T1044] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 144.784505][ T9537] overlayfs: missing 'lowerdir' [ 144.836741][ T9541] syzkaller0: entered promiscuous mode [ 144.838765][ T9541] syzkaller0: entered allmulticast mode [ 144.864025][ T1044] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.869976][ T1044] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.873580][ T1044] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.878153][ T1044] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.881439][ T1044] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.891459][ T1044] usb 11-1: config 0 descriptor?? [ 144.923471][ T1047] usb 9-1: USB disconnect, device number 15 [ 144.975001][ T9548] __nla_validate_parse: 1 callbacks suppressed [ 144.975014][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1100'. [ 145.005799][ T9551] netlink: 'syz.1.1101': attribute type 2 has an invalid length. [ 145.218536][ T9565] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 145.223062][ T9565] SELinux: failed to load policy [ 145.270424][ T9567] overlayfs: missing 'lowerdir' [ 145.308329][ T1044] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 145.508963][ T60] usb 11-1: USB disconnect, device number 13 [ 145.550815][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1109'. [ 145.620426][ T9583] syzkaller0: entered promiscuous mode [ 145.622991][ T9583] syzkaller0: entered allmulticast mode [ 145.629908][ T1044] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 145.633481][ T9583] TC_ACT_REPEAT abuse ? [ 145.808535][ T1044] usb 6-1: Using ep0 maxpacket: 16 [ 145.814101][ T1044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.819267][ T1044] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 145.824972][ T1044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.833112][ T9593] overlayfs: missing 'lowerdir' [ 145.845181][ T1044] usb 6-1: config 0 descriptor?? [ 145.851426][ T1044] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 145.982090][ T9599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 146.095609][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 146.095627][ T42] audit: type=1400 audit(2000000023.740:1511): avc: denied { listen } for pid=9603 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.108156][ T42] audit: type=1400 audit(2000000023.750:1512): avc: denied { accept } for pid=9603 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.163167][ T42] audit: type=1326 audit(2000000023.810:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.6.1118" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fbf19df99 code=0x0 [ 146.261072][ T9616] dvmrp0: entered allmulticast mode [ 146.374769][ T42] audit: type=1400 audit(2000000024.020:1514): avc: denied { mount } for pid=9619 comm="syz.5.1125" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 146.527805][ T42] audit: type=1400 audit(2000000024.170:1515): avc: denied { unmount } for pid=7743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 146.625403][ T9627] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1127'. [ 146.678740][ T42] audit: type=1400 audit(2000000024.330:1516): avc: denied { setopt } for pid=9626 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.686217][ T42] audit: type=1400 audit(2000000024.330:1517): avc: denied { connect } for pid=9626 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.713611][ T42] audit: type=1400 audit(2000000024.360:1518): avc: denied { create } for pid=9626 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 146.883908][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1127'. [ 146.951018][ T9633] xt_policy: output policy not valid in PREROUTING and INPUT [ 147.003064][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 147.045555][ T9641] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 147.095702][ T9641] netlink: 'syz.4.1131': attribute type 12 has an invalid length. [ 147.480766][ T42] audit: type=1326 audit(2000000025.130:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9654 comm="syz.5.1136" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12e019df99 code=0x0 [ 147.579107][ T9661] syzkaller0: entered promiscuous mode [ 147.583898][ T9661] syzkaller0: entered allmulticast mode [ 147.618637][ T1047] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 147.769934][ T1047] usb 11-1: Using ep0 maxpacket: 16 [ 147.777939][ T9663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1138'. [ 147.788332][ T1047] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.796452][ T1047] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 147.800539][ T1047] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.807228][ T1047] usb 11-1: config 0 descriptor?? [ 147.818831][ T1047] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 147.899869][ T42] audit: type=1400 audit(2000000025.550:1520): avc: denied { write } for pid=9664 comm="syz.4.1139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.027136][ T1047] usb 11-1: USB disconnect, device number 14 [ 148.218552][ T9686] syzkaller0: entered promiscuous mode [ 148.220381][ T9686] syzkaller0: entered allmulticast mode [ 148.391115][ T1047] usb 6-1: USB disconnect, device number 26 [ 148.461275][ T9697] netlink: 'syz.1.1151': attribute type 8 has an invalid length. [ 148.580375][ T9713] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1154'. [ 148.628475][ T6741] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 148.655547][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 148.660925][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 148.666892][ T9725] support for the xor transformation has been removed. [ 148.710667][ T9729] syzkaller0: entered promiscuous mode [ 148.712412][ T9729] syzkaller0: entered allmulticast mode [ 148.801475][ T6741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.805869][ T6741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.809806][ T6741] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.815403][ T6741] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.818686][ T6741] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.825505][ T6741] usb 10-1: config 0 descriptor?? [ 148.996231][ T9746] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 149.108894][ T5827] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 149.234476][ T6741] usbhid 10-1:0.0: can't add hid device: -71 [ 149.236466][ T6741] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 149.240892][ T6741] usb 10-1: USB disconnect, device number 11 [ 149.278658][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 149.281844][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.285015][ T5827] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.287865][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.292513][ T5827] usb 6-1: config 0 descriptor?? [ 149.298050][ T5827] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 149.524517][ T6741] usb 6-1: USB disconnect, device number 27 [ 149.797963][ T9763] tipc: Enabled bearer , priority 0 [ 150.101512][ T9778] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 150.130384][ T9782] tipc: Enabling of bearer rejected, already enabled [ 150.165900][ T9784] Trying to write to read-only block-device nullb0 [ 150.213061][ T9786] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 150.249039][ T6741] IPVS: starting estimator thread 0... [ 150.302766][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1184'. [ 150.348784][ T9793] IPVS: using max 27 ests per chain, 64800 per kthread [ 150.358698][ T1047] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 150.510146][ T1047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.514666][ T1047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.517881][ T1047] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.523067][ T1047] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.526718][ T1047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.532282][ T1047] usb 6-1: config 0 descriptor?? [ 150.568512][ T1044] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 150.718530][ T1044] usb 10-1: Using ep0 maxpacket: 16 [ 150.722652][ T1044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.726550][ T1044] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.730332][ T1044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.734805][ T1044] usb 10-1: config 0 descriptor?? [ 150.739804][ T1044] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 150.908515][ T6741] tipc: Node number set to 1043615503 [ 150.942337][ T1047] usbhid 6-1:0.0: can't add hid device: -71 [ 150.944575][ T1047] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 150.948558][ T1047] usb 6-1: USB disconnect, device number 28 [ 150.956291][ T6741] usb 10-1: USB disconnect, device number 12 [ 151.489977][ T5746] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 151.494635][ T5746] Bluetooth: hci1: Injecting HCI hardware error event [ 151.495841][ T9802] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1187'. [ 151.496288][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 151.496300][ T42] audit: type=1400 audit(2000000029.140:1548): avc: denied { ioctl } for pid=9801 comm="syz.5.1187" path="socket:[35525]" dev="sockfs" ino=35525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.500450][ T5746] Bluetooth: hci1: hardware error 0x00 [ 151.547576][ T9804] tipc: Enabling of bearer rejected, already enabled [ 151.682455][ T9811] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 151.810509][ T1047] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 151.831224][ T9818] e1000e 0000:00:02.0 eth1: removed PHC [ 151.879861][ T42] audit: type=1400 audit(2000000029.530:1549): avc: denied { write } for pid=9819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.928298][ T42] audit: type=1400 audit(2000000029.570:1550): avc: denied { write } for pid=9827 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.949810][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1194'. [ 151.960523][ T1047] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.968335][ T1047] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.975422][ T1047] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 151.980051][ T1047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.983196][ T9818] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 151.984778][ T1047] usb 6-1: config 0 descriptor?? [ 151.993215][ T1047] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 151.996156][ T1047] dvb-usb: bulk message failed: -22 (3/0) [ 152.026742][ T1047] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.031704][ T1047] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.034571][ T1047] usb 6-1: media controller created [ 152.038310][ T1047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.056119][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 152.059132][ T1047] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.066219][ T1047] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input14 [ 152.073881][ T1047] dvb-usb: schedule remote query interval to 150 msecs. [ 152.076650][ T1047] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 152.105015][ T9826] bond0: (slave syz_tun): Releasing backup interface [ 152.111914][ T42] audit: type=1400 audit(2000000029.760:1551): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 152.148028][ T42] audit: type=1400 audit(2000000029.790:1552): avc: denied { write } for pid=9832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.195356][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.198216][ T42] audit: type=1400 audit(2000000029.840:1553): avc: denied { write } for pid=9835 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.200151][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 152.201604][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.209073][ T5755] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.214849][ T1047] usb 6-1: USB disconnect, device number 29 [ 152.220453][ T42] audit: type=1400 audit(2000000029.850:1554): avc: denied { connect } for pid=9805 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.279566][ T42] audit: type=1400 audit(2000000029.930:1555): avc: denied { write } for pid=9837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.294964][ T9840] trusted_key: encrypted_key: master key parameter '' is invalid [ 152.338261][ T42] audit: type=1400 audit(2000000029.980:1556): avc: denied { write } for pid=9844 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.344836][ T9846] tipc: Enabling of bearer rejected, already enabled [ 152.382224][ T1047] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 152.416942][ T42] audit: type=1400 audit(2000000030.060:1557): avc: denied { watch } for pid=9851 comm="syz.5.1199" path="/proc/462" dev="proc" ino=32481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 152.499928][ T9861] overlayfs: missing 'lowerdir' [ 152.502752][ T9861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9861 comm=syz.5.1202 [ 152.558504][ T5855] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 152.708497][ T5855] usb 11-1: Using ep0 maxpacket: 16 [ 152.711420][ T5855] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.714649][ T5855] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.717662][ T5855] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.722588][ T5855] usb 11-1: config 0 descriptor?? [ 152.732483][ T5855] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 152.810779][ T1047] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 152.842411][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1206'. [ 152.956927][ T5855] usb 11-1: USB disconnect, device number 15 [ 152.959546][ T1047] usb 10-1: Using ep0 maxpacket: 16 [ 152.963738][ T1047] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.971314][ T1047] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.974604][ T1047] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.978949][ T1047] usb 10-1: config 0 descriptor?? [ 152.983333][ T1047] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 153.421591][ T9899] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 153.433218][ T9898] syzkaller0: entered promiscuous mode [ 153.434966][ T9898] syzkaller0: entered allmulticast mode [ 153.438361][ T9898] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 153.643657][ T5746] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 153.740941][ T9916] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 153.745707][ T9916] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 153.752620][ T9916] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 153.908742][ T5827] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 154.038765][ T5827] usb 9-1: device descriptor read/64, error -71 [ 154.288688][ T5827] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 154.428602][ T5827] usb 9-1: device descriptor read/64, error -71 [ 154.548794][ T5827] usb usb9-port1: attempt power cycle [ 154.613545][ T9943] syzkaller0: entered promiscuous mode [ 154.615251][ T9943] syzkaller0: entered allmulticast mode [ 154.637280][ T9943] tipc: Enabled bearer , priority 0 [ 154.641597][ T9942] tipc: Resetting bearer [ 154.661030][ T9942] tipc: Disabling bearer [ 154.908766][ T5827] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 154.929806][ T5827] usb 9-1: device descriptor read/8, error -71 [ 155.036682][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 155.044136][ T9970] binder_alloc: 9969: binder_alloc_buf, no vma [ 155.047196][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 155.173577][ T9977] syzkaller0: entered promiscuous mode [ 155.175372][ T9977] syzkaller0: entered allmulticast mode [ 155.179949][ T5827] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 155.199180][ T9977] tipc: Enabled bearer , priority 0 [ 155.203527][ T9976] tipc: Resetting bearer [ 155.208996][ T5827] usb 9-1: device descriptor read/8, error -71 [ 155.221535][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1232'. [ 155.231606][ T9976] tipc: Disabling bearer [ 155.331052][ T5827] usb usb9-port1: unable to enumerate USB device [ 155.410219][ T9990] use of bytesused == 0 is deprecated and will be removed in the future, [ 155.413957][ T9990] use the actual size instead. [ 155.559163][ T1047] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 155.607425][ T1044] usb 10-1: USB disconnect, device number 13 [ 156.460870][T10028] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 156.467558][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056c21400: rx timeout, send abort [ 156.514901][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 156.514913][ T42] audit: type=1400 audit(2000000034.160:1595): avc: denied { ioctl } for pid=10025 comm="syz.5.1249" path="/dev/ptyqe" dev="devtmpfs" ino=141 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 156.540658][ T42] audit: type=1400 audit(2000000034.190:1596): avc: denied { watch watch_reads } for pid=10026 comm="syz.6.1250" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 156.796888][ T50] bridge0: entered promiscuous mode [ 156.807971][T10051] overlayfs: workdir and upperdir must be separate subtrees [ 156.829003][ T1047] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 156.967741][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056c20800: rx timeout, send abort [ 156.970956][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056c21400: abort rx timeout. Force session deactivation [ 156.998640][ T1047] usb 11-1: Using ep0 maxpacket: 8 [ 157.001955][ T1047] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 157.005421][ T1047] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.010993][ T1047] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.015037][ T1047] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.019319][ T1047] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.020146][T10058] Device name not specified. [ 157.020146][T10058] [ 157.024616][ T1047] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.030768][ T1047] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.058557][ T847] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 157.208653][ T847] usb 9-1: Using ep0 maxpacket: 16 [ 157.212748][ T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.216505][ T847] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.219417][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.223316][ T847] usb 9-1: config 0 descriptor?? [ 157.227163][ T847] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 157.440983][ T1047] usb 9-1: USB disconnect, device number 20 [ 157.470675][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056c20800: abort rx timeout. Force session deactivation [ 157.495509][ T42] audit: type=1400 audit(2000000035.140:1597): avc: denied { ioctl } for pid=10064 comm="syz.5.1263" path="pid:[4026532865]" dev="nsfs" ino=4026532865 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 157.797607][ T5746] Bluetooth: hci0: link tx timeout [ 157.801374][ T5746] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 157.811959][ T5746] Bluetooth: hci0: link tx timeout [ 157.814995][ T5746] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.153077][T10103] usbtmc 11-1:16.0: simple usb_control_msg returned 0 [ 158.161262][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.167206][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.182195][T10103] vhci_hcd: not connected 4 [ 158.359645][ T42] audit: type=1400 audit(2000000036.000:1598): avc: denied { write } for pid=10116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.428975][ T42] audit: type=1400 audit(2000000036.070:1599): avc: denied { write } for pid=10125 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.442055][T10128] atomic_op ffff888033d06998 conn xmit_atomic 0000000000000000 [ 158.446159][ T42] audit: type=1400 audit(2000000036.090:1600): avc: denied { write } for pid=10127 comm="syz.5.1282" name="functions" dev="configfs" ino=20093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.451753][T10128] SELinux: policydb string length 214455469 does not match expected length 8 [ 158.456547][T10128] SELinux: failed to load policy [ 158.482213][ T42] audit: type=1400 audit(2000000036.130:1601): avc: denied { write } for pid=10127 comm="syz.5.1282" name="c.1" dev="configfs" ino=34376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.500656][ T42] audit: type=1400 audit(2000000036.130:1602): avc: denied { write } for pid=10127 comm="syz.5.1282" name="c.1" dev="configfs" ino=34376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.538147][ T42] audit: type=1400 audit(2000000036.180:1603): avc: denied { write } for pid=10130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.548632][ T42] audit: type=1400 audit(2000000036.190:1604): avc: denied { read } for pid=10132 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.604780][T10119] 0: reclassify loop, rule prio 0, protocol 03 [ 158.728481][ T847] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.747808][T10146] evm: overlay not supported [ 158.753471][T10146] overlay: Unknown parameter 'fowner<00000000000000016384' [ 158.756443][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1285'. [ 158.880700][ T847] usb 5-1: Dual-Role OTG device on HNP port [ 158.883230][ T847] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 158.886805][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.897604][ C2] configfs-gadget.g1 gadget.0: Using interface 0 [ 158.906492][ T847] usblp 5-1:1.0: usblp1: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0000 pid 0x0000 [ 159.599932][ T847] usb 11-1: USB disconnect, device number 16 [ 159.883706][ T5746] Bluetooth: hci0: command 0x0406 tx timeout [ 160.369565][ T7968] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 161.958785][ T5746] Bluetooth: hci0: command 0x0406 tx timeout [ 167.150804][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 167.150822][ T42] audit: type=1400 audit(2000000044.800:1609): avc: denied { write } for pid=10151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.213271][ T42] audit: type=1400 audit(2000000044.860:1610): avc: denied { write } for pid=10154 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.549344][T10165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10165 comm=syz.5.1289 [ 168.549788][T10160] syzkaller0: entered promiscuous mode [ 168.557011][T10160] syzkaller0: entered allmulticast mode [ 168.617360][T10160] tipc: Enabled bearer , priority 0 [ 168.624828][T10157] tipc: Resetting bearer [ 168.639763][T10157] tipc: Disabling bearer [ 168.697725][T10183] could not open pipe file descriptor [ 168.702948][T10186] netlink: 'syz.4.1295': attribute type 142 has an invalid length. [ 168.746623][T10191] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 168.795795][T10195] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1299'. [ 168.820328][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1300'. [ 168.825344][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1300'. [ 168.858309][T10201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.904752][T10200] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.026047][T10223] netlink: 'syz.6.1305': attribute type 1 has an invalid length. [ 169.027509][T10201] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 169.035112][T10220] syzkaller1: entered promiscuous mode [ 169.036877][T10220] syzkaller1: entered allmulticast mode [ 169.059695][T10223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.077920][ T42] audit: type=1400 audit(2000000046.720:1611): avc: denied { write } for pid=10226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.116304][T10223] bond2: (slave geneve2): making interface the new active one [ 169.121703][T10223] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 169.125389][ T5791] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.134092][ T5791] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.137675][ T5791] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.140260][ T42] audit: type=1400 audit(2000000046.790:1612): avc: denied { write } for pid=10231 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.148277][ T5791] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 169.216852][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.288276][ T42] audit: type=1400 audit(2000000046.930:1613): avc: denied { map } for pid=10238 comm="syz.5.1308" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.293466][T10237] gfs2: error -5 reading superblock [ 169.347277][ T42] audit: type=1400 audit(2000000046.990:1614): avc: denied { name_bind } for pid=10242 comm="syz.6.1309" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 169.451687][ T42] audit: type=1400 audit(2000000047.100:1615): avc: denied { read } for pid=10248 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.567639][T10254] netlink: 'syz.6.1312': attribute type 21 has an invalid length. [ 169.774548][T10256] ceph: No mds server is up or the cluster is laggy [ 169.817613][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 169.939920][T10269] syzkaller0: entered promiscuous mode [ 169.942297][T10269] syzkaller0: entered allmulticast mode [ 169.963051][T10269] tipc: Enabled bearer , priority 0 [ 169.966496][T10268] tipc: Resetting bearer [ 169.978974][T10268] tipc: Disabling bearer [ 170.068848][T10274] /dev/sg0: Can't lookup blockdev [ 170.073028][T10274] overlayfs: failed to resolve './file2': -2 [ 170.319685][T10283] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1321'. [ 170.375016][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 170.558551][ T7924] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 170.598503][ T5755] Bluetooth: hci2: command 0x0406 tx timeout [ 170.717408][ T7924] usb 10-1: Using ep0 maxpacket: 32 [ 170.724686][ T7924] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 170.728809][ T7924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.732502][T10299] syzkaller0: entered promiscuous mode [ 170.735187][T10299] syzkaller0: entered allmulticast mode [ 170.736114][ T7924] usb 10-1: config 0 descriptor?? [ 170.749765][ T7924] as10x_usb: device has been detected [ 170.752884][ T7924] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 170.766139][T10299] tipc: Enabled bearer , priority 0 [ 170.778669][ T7924] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 170.780853][T10298] tipc: Resetting bearer [ 170.803382][T10298] tipc: Disabling bearer [ 170.819451][ T7924] as10x_usb: error during firmware upload part1 [ 170.822969][ T7924] Registered device nBox DVB-T Dongle [ 170.898015][T10301] openvswitch: netlink: IPv4 tunnel dst address is zero [ 170.903856][T10301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.915157][ T42] audit: type=1400 audit(2000000048.559:1616): avc: denied { append } for pid=10300 comm="syz.1.1327" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.982829][ T1047] usb 10-1: USB disconnect, device number 14 [ 171.010151][ T1047] Unregistered device nBox DVB-T Dongle [ 171.010950][ T1047] as10x_usb: device has been disconnected [ 171.125774][ T42] audit: type=1400 audit(2000000048.769:1617): avc: denied { write } for pid=10306 comm="syz.6.1329" name="/" dev="9p" ino=82313283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.133149][ T42] audit: type=1400 audit(2000000048.769:1618): avc: denied { add_name } for pid=10306 comm="syz.6.1329" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.216250][T10313] sg_read: process 746 (syz.4.1332) changed security contexts after opening file descriptor, this is not allowed. [ 171.253408][T10315] 9pnet_fd: Insufficient options for proto=fd [ 171.560145][ T7924] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 171.683481][T10324] binder: 10323:10324 unknown command 0 [ 171.685347][T10324] binder: 10323:10324 ioctl c0306201 200000000480 returned -22 [ 171.708557][ T7924] usb 9-1: Using ep0 maxpacket: 8 [ 171.713397][ T7924] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 171.716662][ T7924] usb 9-1: can't read configurations, error -22 [ 171.723917][T10331] binder: 10330:10331 ioctl c02c5341 200000001380 returned -22 [ 171.723960][T10335] binder: 10330:10335 ioctl c02c5341 200000001380 returned -22 [ 171.729147][T10331] binder: 10330:10331 ioctl 80186e82 200000001540 returned -22 [ 171.729161][T10335] binder: 10330:10335 ioctl 80186e82 200000001540 returned -22 [ 171.858721][ T7924] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 171.894254][T10349] mtrr: base(0x10000000) is not aligned on a size(0xd0010000000) boundary [ 172.018512][ T7924] usb 9-1: Using ep0 maxpacket: 8 [ 172.023583][ T7924] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 172.026174][ T7924] usb 9-1: can't read configurations, error -22 [ 172.028725][ T7924] usb usb9-port1: attempt power cycle [ 172.254303][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 172.254315][ T42] audit: type=1400 audit(2000000049.899:1626): avc: denied { write } for pid=10363 comm="syz.1.1351" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 172.393542][ T7924] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 172.419213][ T7924] usb 9-1: Using ep0 maxpacket: 8 [ 172.422776][ T7924] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 172.425311][ T7924] usb 9-1: can't read configurations, error -22 [ 172.549470][ T7924] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 172.558865][ T42] audit: type=1400 audit(2000000050.209:1627): avc: denied { mount } for pid=10374 comm="syz.1.1355" name="/" dev="hugetlbfs" ino=39032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 172.559523][T10375] hugetlbfs: Bad value 'x' for mount option 'size' [ 172.559523][T10375] [ 172.571153][ T42] audit: type=1400 audit(2000000050.209:1628): avc: denied { remount } for pid=10374 comm="syz.1.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 172.573549][ T7924] usb 9-1: Using ep0 maxpacket: 8 [ 172.585162][ T7924] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 172.589529][ T7924] usb 9-1: can't read configurations, error -22 [ 172.592511][ T7924] usb usb9-port1: unable to enumerate USB device [ 172.599443][ T42] audit: type=1400 audit(2000000050.249:1629): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 172.641002][ T42] audit: type=1400 audit(2000000050.289:1630): avc: denied { getopt } for pid=10376 comm="syz.1.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.641106][T10377] tmpfs: Cannot change global quota limit on remount [ 172.739592][T10379] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 172.743077][ T50] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 172.807040][T10385] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.962473][ T42] audit: type=1400 audit(2000000050.609:1631): avc: denied { mounton } for pid=10402 comm="syz.5.1367" path="/207/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 173.024426][T10411] netlink: 'syz.5.1368': attribute type 1 has an invalid length. [ 173.025600][T10412] netlink: 'syz.5.1368': attribute type 1 has an invalid length. [ 173.027659][T10411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.036254][T10411] IPv6: NLM_F_CREATE should be set when creating new route [ 173.042638][T10412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.047063][T10415] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 173.083917][T10415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1370'. [ 173.140316][T10422] xt_cgroup: path and classid specified [ 173.145368][ T42] audit: type=1326 audit(2000000050.789:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.6.1371" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fbf19df99 code=0x0 [ 173.210827][ T847] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 173.236733][ T847] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 173.243954][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1376'. [ 173.287062][T10430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1376'. [ 173.299216][T10430] SELinux: policydb magic number 0xb65 does not match expected magic number 0xf97cff8c [ 173.302391][T10430] SELinux: failed to load policy [ 173.381018][T10440] syzkaller0: entered promiscuous mode [ 173.383409][T10440] syzkaller0: entered allmulticast mode [ 173.409755][ T42] audit: type=1326 audit(2000000051.059:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.5.1375" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12e019df99 code=0x0 [ 173.413948][T10440] tipc: Enabled bearer , priority 0 [ 173.424505][T10439] tipc: Resetting bearer [ 173.442504][T10439] tipc: Disabling bearer [ 173.523985][ T42] audit: type=1400 audit(2000000051.169:1634): avc: denied { create } for pid=10441 comm="syz.1.1379" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.532390][ T42] audit: type=1400 audit(2000000051.169:1635): avc: denied { read } for pid=10441 comm="syz.1.1379" name="file0" dev="tmpfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.083455][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1384'. [ 174.148505][T10467] syzkaller0: entered promiscuous mode [ 174.150462][T10467] syzkaller0: entered allmulticast mode [ 174.168353][T10467] tipc: Enabled bearer , priority 0 [ 174.174279][T10466] tipc: Resetting bearer [ 174.186000][T10466] tipc: Disabling bearer [ 174.358188][ T5746] Bluetooth: hci0: unexpected event for opcode 0x040d [ 174.368095][T10483] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 174.478894][ T7924] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 174.566650][T10498] syzkaller0: entered promiscuous mode [ 174.570694][T10498] syzkaller0: entered allmulticast mode [ 174.596968][T10498] tipc: Enabled bearer , priority 0 [ 174.601849][T10497] tipc: Resetting bearer [ 174.619885][T10497] tipc: Disabling bearer [ 174.659577][ T7924] usb 10-1: Using ep0 maxpacket: 16 [ 174.664853][ T7924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.669818][ T7924] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 174.673752][ T7924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.680044][ T7924] usb 10-1: config 0 descriptor?? [ 174.692835][ T7924] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 174.909509][ T6772] usb 10-1: USB disconnect, device number 15 [ 175.023484][T10512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.024273][T10514] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.025871][T10512] IPv6: NLM_F_CREATE should be set when creating new route [ 175.038977][T10514] sctp: [Deprecated]: syz.6.1404 (pid 10514) Use of int in max_burst socket option. [ 175.038977][T10514] Use struct sctp_assoc_value instead [ 175.325414][T10526] bond2: invalid ARP target 0.0.0.0 specified for addition [ 175.328155][T10526] bond2: option arp_ip_target: invalid value (0) [ 175.336659][T10526] bond2 (unregistering): Released all slaves [ 175.487930][T10538] tipc: Enabling of bearer rejected, already enabled [ 175.546329][T10541] hfs: can't find a HFS filesystem on dev sr0 [ 175.555494][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1411'. [ 175.581536][T10541] bond4: entered promiscuous mode [ 175.583699][T10541] bond4: entered allmulticast mode [ 175.612933][T10549] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 175.654137][T10554] netlink: 'syz.6.1415': attribute type 1 has an invalid length. [ 175.657982][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1415'. [ 175.727931][T10554] netlink: 'syz.6.1415': attribute type 10 has an invalid length. [ 175.731635][T10554] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1415'. [ 175.739675][T10554] dummy0: entered promiscuous mode [ 176.128521][ T5858] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 176.278519][ T5858] usb 11-1: Using ep0 maxpacket: 16 [ 176.283511][ T5858] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.298563][ T5858] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 176.301635][ T5858] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.305543][ T5858] usb 11-1: config 0 descriptor?? [ 176.309304][ T5858] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 176.452092][T10597] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 176.475848][T10597] bond4: entered promiscuous mode [ 176.477876][T10597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.488815][T10597] ipvlan2: entered allmulticast mode [ 176.490797][T10597] bond4: entered allmulticast mode [ 176.501925][T10597] bond4: (slave bridge1): making interface the new active one [ 176.505210][T10597] bridge1: entered promiscuous mode [ 176.507718][T10597] bridge1: entered allmulticast mode [ 176.516907][T10597] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 176.538610][ T847] usb 11-1: USB disconnect, device number 17 [ 177.554167][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 177.554179][ T42] audit: type=1400 audit(2000000055.199:1688): avc: denied { create } for pid=10629 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.562739][ T42] audit: type=1400 audit(2000000055.199:1689): avc: denied { accept } for pid=10629 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.607591][ T42] audit: type=1400 audit(2000000055.249:1690): avc: denied { create } for pid=10632 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.652122][ T42] audit: type=1400 audit(2000000055.299:1691): avc: denied { create } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.660792][ T42] audit: type=1400 audit(2000000055.299:1692): avc: denied { bind } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.670352][ T42] audit: type=1400 audit(2000000055.299:1693): avc: denied { setopt } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.677086][ T42] audit: type=1400 audit(2000000055.299:1694): avc: denied { listen } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.683651][ T42] audit: type=1400 audit(2000000055.299:1695): avc: denied { create } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.690739][ T42] audit: type=1400 audit(2000000055.299:1696): avc: denied { connect } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.697327][ T42] audit: type=1400 audit(2000000055.299:1697): avc: denied { accept } for pid=10637 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.793393][T10643] CIFS: Unable to determine destination address [ 177.797408][T10643] Bluetooth: MGMT ver 1.23 [ 177.802756][T10643] autofs: Unknown parameter 'autofs' [ 177.806350][T10643] overlayfs: missing 'lowerdir' [ 177.868543][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1440'. [ 177.902866][T10648] binder: 10647:10648 ioctl c0306201 200000000040 returned -22 [ 177.904707][T10652] binder: 10647:10652 ioctl c0306201 200000000640 returned -22 [ 178.115213][T10665] fuse: Bad value for 'group_id' [ 178.117553][T10665] fuse: Bad value for 'group_id' [ 178.168557][ T5858] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 178.208276][T10668] tmpfs: Unknown parameter 'usrquota' [ 178.316346][T10670] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.318880][T10670] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.328688][ T5858] usb 9-1: Using ep0 maxpacket: 16 [ 178.331631][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.334887][ T5858] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 178.337738][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.351696][ T5858] usb 9-1: config 0 descriptor?? [ 178.362876][ T5858] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 178.383760][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.394888][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.517719][ T5819] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.521823][ T5819] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.525877][ T5819] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.530176][ T5819] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.534395][ T5819] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.538212][ T5819] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.543453][ T5819] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.548638][ T5819] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 178.592944][ T5855] usb 9-1: USB disconnect, device number 25 [ 178.914560][T10682] nbd5: detected capacity change from 0 to 63 [ 178.917689][T10683] block nbd5: NBD_DISCONNECT [ 178.928238][T10683] block nbd5: Disconnected due to user request. [ 178.933731][T10683] block nbd5: shutting down sockets [ 178.934411][ T5110] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 178.943390][ T5110] Buffer I/O error on dev nbd5, logical block 1, async page read [ 178.946981][ T5110] Buffer I/O error on dev nbd5, logical block 2, async page read [ 178.950029][ T5110] Buffer I/O error on dev nbd5, logical block 3, async page read [ 178.954494][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.958539][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 178.963684][ T6211] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.967379][ T6211] Buffer I/O error on dev nbd5, logical block 0, async page read [ 178.971000][ T6211] Buffer I/O error on dev nbd5, logical block 1, async page read [ 178.974236][ T6211] Buffer I/O error on dev nbd5, logical block 2, async page read [ 178.977406][ T6211] Buffer I/O error on dev nbd5, logical block 3, async page read [ 178.987950][ T6211] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.991224][ T6211] Buffer I/O error on dev nbd5, logical block 0, async page read [ 178.993778][ T6211] Buffer I/O error on dev nbd5, logical block 1, async page read [ 178.998341][ T6211] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.002649][ T6211] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.005688][ T6211] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 179.009000][ T5110] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.012104][ T5110] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.015549][ T5110] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 179.026094][T10209] ldm_validate_partition_table(): Disk read failed. [ 179.031422][T10209] Dev nbd5: unable to read RDB block 0 [ 179.034038][T10209] nbd5: unable to read partition table [ 179.045491][T10209] ldm_validate_partition_table(): Disk read failed. [ 179.049935][T10209] Dev nbd5: unable to read RDB block 0 [ 179.054870][T10209] nbd5: unable to read partition table [ 179.084302][T10700] cgroup: name respecified [ 179.242034][ T5746] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 179.248170][ T5746] Bluetooth: Wrong link type (-22) [ 179.278524][T10705] md: could not open device unknown-block(0,0). [ 179.282774][T10705] md: md_import_device returned -6 [ 179.375377][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 180.193951][T10729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.418575][ T5858] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 180.572109][ T5858] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.577286][ T5858] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 180.582364][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 180.588008][ T5858] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 180.592266][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 180.595814][ T5858] usb 6-1: Product: syz [ 180.597749][ T5858] usb 6-1: Manufacturer: syz [ 180.600224][ T5858] usb 6-1: SerialNumber: syz [ 180.605800][ T5858] usb 6-1: config 0 descriptor?? [ 180.617944][ T5858] usb 6-1: selecting invalid altsetting 0 [ 180.819894][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.824034][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.826962][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.830016][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.833070][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.836225][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.839389][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.842553][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.845728][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.849130][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.852670][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.855744][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.858334][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.861211][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.864481][T10751] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 180.866322][ T5848] usb 6-1: USB disconnect, device number 30 [ 180.867950][T10751] usb 6-1: cannot submit urb 0, error -19: no device [ 181.083523][T10765] tmpfs: Bad value for 'mpol' [ 181.201472][T10772] tipc: Enabling of bearer rejected, already enabled [ 181.306463][T10783] GUP no longer grows the stack in syz.5.1479 (10783): 200000004000-20000000a000 (200000002000) [ 181.315702][T10783] CPU: 2 UID: 0 PID: 10783 Comm: syz.5.1479 Not tainted syzkaller #0 PREEMPT(full) [ 181.315726][T10783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.315739][T10783] Call Trace: [ 181.315745][T10783] [ 181.315752][T10783] dump_stack_lvl+0x100/0x190 [ 181.315850][T10783] gup_vma_lookup.cold+0x83/0x96 [ 181.315878][T10783] __get_user_pages+0x241/0x32a0 [ 181.315931][T10783] ? find_held_lock+0x2b/0x80 [ 181.315972][T10783] ? mtree_load+0x311/0xa90 [ 181.316027][T10783] ? __pfx___get_user_pages+0x10/0x10 [ 181.316058][T10783] get_user_pages_remote+0x3d2/0xb10 [ 181.316084][T10783] ? mas_root_expand+0x6e0/0x750 [ 181.316108][T10783] ? __pfx_get_user_pages_remote+0x10/0x10 [ 181.316142][T10783] __access_remote_vm+0x3bb/0x890 [ 181.316166][T10783] ? __pfx___access_remote_vm+0x10/0x10 [ 181.316187][T10783] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 181.316230][T10783] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 181.316261][T10783] proc_pid_cmdline_read+0x552/0x9a0 [ 181.316290][T10783] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 181.316322][T10783] ? rw_verify_area+0xce/0x6d0 [ 181.316352][T10783] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 181.316377][T10783] vfs_readv+0x5d8/0x8d0 [ 181.316408][T10783] ? __pfx_vfs_readv+0x10/0x10 [ 181.316448][T10783] ? __fget_files+0x21f/0x3d0 [ 181.316479][T10783] ? do_preadv+0x1ac/0x270 [ 181.316501][T10783] do_preadv+0x1ac/0x270 [ 181.316526][T10783] ? __pfx_do_preadv+0x10/0x10 [ 181.316561][T10783] do_syscall_64+0x115/0x870 [ 181.316588][T10783] ? clear_bhb_loop+0x40/0x90 [ 181.316611][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.316630][T10783] RIP: 0033:0x7f12e019df99 [ 181.316645][T10783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.316662][T10783] RSP: 002b:00007f12e1046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 181.316689][T10783] RAX: ffffffffffffffda RBX: 00007f12e0425fa0 RCX: 00007f12e019df99 [ 181.316700][T10783] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 181.316710][T10783] RBP: 00007f12e0234ec4 R08: 00000000fffffff9 R09: 0000000000000000 [ 181.316721][T10783] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 181.316731][T10783] R13: 00007f12e0426038 R14: 00007f12e0425fa0 R15: 00007ffced045d28 [ 181.316755][T10783] [ 181.526846][T10804] syzkaller0: entered promiscuous mode [ 181.532244][T10804] syzkaller0: entered allmulticast mode [ 181.590939][T10804] tipc: Enabled bearer , priority 0 [ 181.594149][T10817] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 181.617075][T10802] tipc: Resetting bearer [ 181.630313][T10802] tipc: Disabling bearer [ 181.704578][T10822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.781690][T10832] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1497'. [ 181.865532][T10842] netlink: 'syz.4.1500': attribute type 4 has an invalid length. [ 181.934128][T10849] overlayfs: failed to resolve './file0/file1': -2 [ 182.011095][T10859] netlink: 'syz.5.1504': attribute type 1 has an invalid length. [ 182.034272][T10859] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.040954][T10861] syzkaller0: entered promiscuous mode [ 182.043382][T10861] syzkaller0: entered allmulticast mode [ 182.074687][T10861] tipc: Enabled bearer , priority 0 [ 182.082735][T10860] tipc: Resetting bearer [ 182.103533][T10860] tipc: Disabling bearer [ 182.394450][T10884] program syz.5.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.455835][T10900] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 182.462051][T10902] tipc: Enabling of bearer rejected, already enabled [ 182.505868][T10907] binder: 10905:10907 ioctl c0306201 200000000040 returned -14 [ 182.657441][ T42] kauditd_printk_skb: 125 callbacks suppressed [ 182.657451][ T42] audit: type=1400 audit(2000000060.299:1822): avc: denied { read } for pid=10922 comm="syz.1.1528" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.668528][ T42] audit: type=1400 audit(2000000060.299:1823): avc: denied { open } for pid=10922 comm="syz.1.1528" path="/dev/input/event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.688697][ T42] audit: type=1400 audit(2000000060.339:1824): avc: denied { append } for pid=10917 comm="syz.4.1527" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.694094][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'. [ 182.774295][ T42] audit: type=1400 audit(2000000060.419:1825): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 182.777315][T10938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10938 comm=syz.5.1532 [ 182.778372][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1532'. [ 182.787455][ T42] audit: type=1400 audit(2000000060.429:1826): avc: denied { search } for pid=5452 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.788898][T10934] syzkaller0: entered promiscuous mode [ 182.795636][ T42] audit: type=1400 audit(2000000060.429:1827): avc: denied { search } for pid=5452 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.797096][T10934] syzkaller0: entered allmulticast mode [ 182.804189][ T42] audit: type=1400 audit(2000000060.429:1828): avc: denied { search } for pid=5452 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.815150][ T42] audit: type=1400 audit(2000000060.429:1829): avc: denied { search } for pid=5452 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.824334][ T42] audit: type=1400 audit(2000000060.429:1830): avc: denied { search } for pid=5452 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.831349][ T42] audit: type=1400 audit(2000000060.429:1831): avc: denied { search } for pid=5452 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.845582][T10934] tipc: Enabled bearer , priority 0 [ 182.852191][T10933] tipc: Resetting bearer [ 182.875565][T10933] tipc: Disabling bearer [ 182.939012][ T5855] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 183.008250][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 183.098512][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 183.102120][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.105584][ T5855] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.108887][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.120454][ T5855] usb 6-1: config 0 descriptor?? [ 183.133081][ T5855] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 183.147181][T10958] netlink: 'syz.5.1540': attribute type 2 has an invalid length. [ 183.152645][T10958] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1540'. [ 183.295810][T10968] syzkaller0: entered promiscuous mode [ 183.297628][T10968] syzkaller0: entered allmulticast mode [ 183.319046][T10968] tipc: Enabled bearer , priority 0 [ 183.326532][T10967] tipc: Resetting bearer [ 183.340080][ T847] usb 6-1: USB disconnect, device number 31 [ 183.350454][T10967] tipc: Disabling bearer [ 183.705954][T10990] fuse: Invalid rootmode [ 183.710263][T10990] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 183.874608][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 183.919116][T11005] syzkaller0: entered promiscuous mode [ 183.920953][T11005] syzkaller0: entered allmulticast mode [ 183.945133][T11005] tipc: Enabled bearer , priority 0 [ 183.949872][T11004] tipc: Resetting bearer [ 183.965789][T11004] tipc: Disabling bearer [ 183.972431][T11007] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20003 [ 184.117444][T11016] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1561'. [ 184.128164][T11016] openvswitch: netlink: Message has 512 unknown bytes. [ 184.262641][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1565'. [ 184.266077][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1565'. [ 184.304679][T11039] syzkaller0: entered promiscuous mode [ 184.307334][T11039] syzkaller0: entered allmulticast mode [ 184.332102][T11039] tipc: Enabled bearer , priority 0 [ 184.338234][T11038] tipc: Resetting bearer [ 184.360893][T11038] tipc: Disabling bearer [ 184.458583][ T50] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 184.495240][T11049] netlink: 'syz.5.1572': attribute type 13 has an invalid length. [ 184.606908][T11053] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61 sclass=netlink_xfrm_socket pid=11053 comm=syz.5.1574 [ 184.638736][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 184.642972][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.647505][ T50] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.654847][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.670087][ T50] usb 9-1: config 0 descriptor?? [ 184.681429][ T50] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 184.719252][T11059] Bluetooth: hci0: invalid len left 7, exp >= 104 [ 184.887517][ T7924] usb 9-1: USB disconnect, device number 26 [ 185.131902][T11071] syzkaller0: entered promiscuous mode [ 185.134278][T11071] syzkaller0: entered allmulticast mode [ 185.161715][T11071] tipc: Enabled bearer , priority 0 [ 185.166474][T11070] tipc: Resetting bearer [ 185.182699][T11070] tipc: Disabling bearer [ 185.427182][T11084] syzkaller0: left promiscuous mode [ 185.430192][T11084] syzkaller0: left allmulticast mode [ 185.436312][T11084] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1585'. [ 185.444958][T11084] syzkaller0: entered promiscuous mode [ 185.447981][T11084] syzkaller0: entered allmulticast mode [ 185.518525][ T7924] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 185.670027][ T7924] usb 11-1: Using ep0 maxpacket: 16 [ 185.675384][ T7924] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.679823][ T7924] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.682945][ T7924] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.713740][ T7924] usb 11-1: config 0 descriptor?? [ 185.720955][ T7924] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 185.755528][T11105] binder: BC_ACQUIRE_RESULT not supported [ 185.757476][T11105] binder: 11104:11105 ioctl c0306201 2000000003c0 returned -22 [ 185.823257][T11111] netlink: 'syz.4.1596': attribute type 39 has an invalid length. [ 186.008636][ T60] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 186.050072][T11114] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1597'. [ 186.168595][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 186.172200][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.175506][ T60] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.178557][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.182645][ T60] usb 10-1: config 0 descriptor?? [ 186.186515][ T60] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 186.404181][ T5855] usb 10-1: USB disconnect, device number 16 [ 187.010562][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 187.059278][T11133] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1604'. [ 187.063265][T11133] openvswitch: netlink: Flow key attr not present in new flow. [ 187.666499][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.669855][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.672977][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.677909][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.683300][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.695088][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 187.695104][ T42] audit: type=1400 audit(2000000065.339:1897): avc: denied { mounton } for pid=11137 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 187.991897][ T7924] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 188.142916][T11162] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1612'. [ 188.152000][ T42] audit: type=1400 audit(2000000065.799:1898): avc: denied { open } for pid=11161 comm="syz.5.1612" path="/dev/ptyqe" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 188.161459][ T7924] usb 6-1: Using ep0 maxpacket: 16 [ 188.166511][ T42] audit: type=1400 audit(2000000065.809:1899): avc: denied { ioctl } for pid=11161 comm="syz.5.1612" path="/dev/ptyqe" dev="devtmpfs" ino=141 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 188.175849][ T7924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.178986][ T7924] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 188.183556][ T7924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.187592][ T7924] usb 6-1: config 0 descriptor?? [ 188.191787][ T7924] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 188.206508][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.209906][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.213184][T11137] bridge_slave_0: entered allmulticast mode [ 188.218322][T11137] bridge_slave_0: entered promiscuous mode [ 188.223541][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.226739][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.230063][T11137] bridge_slave_1: entered allmulticast mode [ 188.234369][T11137] bridge_slave_1: entered promiscuous mode [ 188.267033][T11137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.274982][T11137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.294191][ T7924] usb 11-1: USB disconnect, device number 18 [ 188.316866][T11137] team0: Port device team_slave_0 added [ 188.320846][T11137] team0: Port device team_slave_1 added [ 188.328712][T11167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.347397][T11137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.349893][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.360195][T11137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.377344][T11169] bond5: entered promiscuous mode [ 188.380973][T11137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.383934][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.392271][T11137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.398500][ T50] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 188.410972][ T6772] usb 6-1: USB disconnect, device number 32 [ 188.420213][ T42] audit: type=1400 audit(2000000066.069:1900): avc: denied { create } for pid=11171 comm="syz.6.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.461056][T11137] hsr_slave_0: entered promiscuous mode [ 188.464061][T11137] hsr_slave_1: entered promiscuous mode [ 188.466200][T11137] debugfs: 'hsr0' already exists in 'hsr' [ 188.468007][T11137] Cannot create hsr debugfs directory [ 188.491341][T11174] syzkaller0: entered promiscuous mode [ 188.493500][T11174] syzkaller0: entered allmulticast mode [ 188.527227][T11174] tipc: Enabled bearer , priority 0 [ 188.535981][T11173] tipc: Resetting bearer [ 188.551436][T11173] tipc: Disabling bearer [ 188.571414][ T50] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.574727][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.578168][ T50] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.582033][ T50] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.588059][ T50] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.592117][ T50] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.595607][ T50] usb 10-1: Product: syz [ 188.597524][ T50] usb 10-1: Manufacturer: syz [ 188.604876][ T50] cdc_wdm 10-1:1.0: skipping garbage [ 188.606919][ T50] cdc_wdm 10-1:1.0: skipping garbage [ 188.611490][ T50] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 188.613814][ T50] cdc_wdm 10-1:1.0: Unknown control protocol [ 188.713815][T11137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.720521][T11137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.724384][T11137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.731810][T11137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.735734][T11137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.737727][ T42] audit: type=1400 audit(2000000066.379:1901): avc: denied { read write } for pid=11175 comm="syz.6.1617" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 188.748653][ T42] audit: type=1400 audit(2000000066.379:1902): avc: denied { open } for pid=11175 comm="syz.6.1617" path="/247/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 188.757383][ T42] audit: type=1400 audit(2000000066.389:1903): avc: denied { ioctl } for pid=11175 comm="syz.6.1617" path="/247/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 188.760963][T11137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.770511][T11137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 188.774414][T11137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.807736][ T5858] usb 10-1: USB disconnect, device number 17 [ 188.822396][T11137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.842547][T11137] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.848635][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.850923][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.857535][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.859873][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.022362][ T42] audit: type=1400 audit(2000000066.669:1904): avc: denied { connect } for pid=11190 comm="syz.1.1619" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.031215][ T42] audit: type=1400 audit(2000000066.679:1905): avc: denied { write } for pid=11190 comm="syz.1.1619" laddr=fe80::44b6:72ff:fef1:d087 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.182746][T11137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.298834][ T6772] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 189.328621][ T5858] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 189.340687][T11137] veth0_vlan: entered promiscuous mode [ 189.348077][T11137] veth1_vlan: entered promiscuous mode [ 189.370081][T11137] veth0_macvtap: entered promiscuous mode [ 189.374367][T11137] veth1_macvtap: entered promiscuous mode [ 189.384187][T11137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.392893][T11137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.405868][ T5819] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.409263][ T5819] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.412947][ T5819] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.416035][ T5819] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.448798][ T6772] usb 6-1: Using ep0 maxpacket: 16 [ 189.453311][ T6772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.457697][ T6772] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 189.461335][ T6772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.487906][ T6772] usb 6-1: config 0 descriptor?? [ 189.495609][ T6772] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 189.508225][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.515097][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.521538][ T5858] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.525239][ T5858] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.534174][ T5858] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.540020][ T5858] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.565301][ T5858] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.574954][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.578493][ T5858] usb 10-1: Product: syz [ 189.580303][ T5858] usb 10-1: Manufacturer: syz [ 189.586622][ T5858] cdc_wdm 10-1:1.0: skipping garbage [ 189.589481][ T5858] cdc_wdm 10-1:1.0: skipping garbage [ 189.595819][ T5858] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 189.598531][ T5858] cdc_wdm 10-1:1.0: Unknown control protocol [ 189.620031][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.622926][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.642597][ T42] audit: type=1400 audit(2000000067.289:1906): avc: denied { mounton } for pid=11137 comm="syz-executor" path="/syzkaller.u4zAQU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 189.718673][ T5746] Bluetooth: hci1: command tx timeout [ 189.784961][T11218] syzkaller0: entered promiscuous mode [ 189.786998][T11218] syzkaller0: entered allmulticast mode [ 189.808122][T11218] tipc: Started in network mode [ 189.812130][T11218] tipc: Node identity 92195fb8d72c, cluster identity 4711 [ 189.815049][T11218] tipc: Enabled bearer , priority 0 [ 189.822182][T11217] tipc: Resetting bearer [ 189.838515][T11217] tipc: Disabling bearer [ 190.088548][ T5858] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 190.248490][ T5858] usb 11-1: Using ep0 maxpacket: 16 [ 190.252702][ T5858] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.256654][ T5858] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.260425][ T5858] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.264859][ T5858] usb 11-1: config 0 descriptor?? [ 190.270058][ T5858] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 190.489797][ T6772] usb 11-1: USB disconnect, device number 19 [ 191.064845][ T5848] usb 10-1: USB disconnect, device number 18 [ 191.072535][T11241] binder: 11240:11241 ioctl c0306201 200000000480 returned -14 [ 191.496673][T11256] kvm: emulating exchange as write [ 191.547117][T11261] syzkaller0: entered promiscuous mode [ 191.553228][T11261] syzkaller0: entered allmulticast mode [ 191.586145][T11261] tipc: Enabled bearer , priority 0 [ 191.603259][T11260] tipc: Resetting bearer [ 191.624418][T11260] tipc: Disabling bearer [ 191.627216][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1639'. [ 191.809589][ T5746] Bluetooth: hci1: command tx timeout [ 192.002605][T11271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.086255][ T5858] usb 6-1: USB disconnect, device number 33 [ 192.193714][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 192.194897][T11285] netlink: 'syz.5.1646': attribute type 19 has an invalid length. [ 192.250833][T11292] tipc: Enabling of bearer rejected, already enabled [ 192.268677][ T50] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 192.310574][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.316856][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.430281][ T50] usb 11-1: unable to get BOS descriptor or descriptor too short [ 192.433750][ T50] usb 11-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 192.437287][ T50] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.440762][ T50] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.446389][ T50] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.449358][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=80 [ 192.451861][ T50] usb 11-1: Product: syz [ 192.453247][ T50] usb 11-1: Manufacturer: syz [ 192.454742][ T50] usb 11-1: SerialNumber: syz [ 192.548583][ T5827] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 192.671398][ T50] cdc_ncm 11-1:1.0: skipping garbage [ 192.673139][ T50] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 192.680425][ T50] cdc_ncm 11-1:1.0: bind() failure [ 192.689637][ T5827] usb 10-1: device descriptor read/64, error -71 [ 192.696966][ T50] usb 11-1: USB disconnect, device number 20 [ 192.748560][ T1044] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 192.899632][ T1044] usb 12-1: Using ep0 maxpacket: 16 [ 192.903535][ T1044] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.906404][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 192.907552][ T1044] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.914485][ T1044] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.922177][ T1044] usb 12-1: config 0 descriptor?? [ 192.928874][ T5827] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 192.931405][ T1044] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 193.058628][ T5827] usb 10-1: device descriptor read/64, error -71 [ 193.169267][ T5827] usb usb10-port1: attempt power cycle [ 193.179297][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 193.179314][ T42] audit: type=1400 audit(2000000070.829:1921): avc: denied { write } for pid=11325 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.212402][T11330] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 193.220942][ T42] audit: type=1400 audit(2000000070.869:1922): avc: denied { mount } for pid=11329 comm="syz.1.1660" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 193.239240][ T42] audit: type=1400 audit(2000000070.889:1923): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 193.355503][T11340] syzkaller0: entered promiscuous mode [ 193.357778][T11340] syzkaller0: entered allmulticast mode [ 193.386199][T11340] tipc: Enabled bearer , priority 0 [ 193.393127][T11339] tipc: Resetting bearer [ 193.416616][T11339] tipc: Disabling bearer [ 193.511709][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1665'. [ 193.520633][ T5827] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 193.537491][T11346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11346 comm=syz.1.1665 [ 193.542313][ T5827] usb 10-1: device descriptor read/8, error -71 [ 193.591936][ T42] audit: type=1400 audit(2000000071.239:1924): avc: denied { create } for pid=11348 comm="syz.6.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.628040][T11352] loop5: detected capacity change from 0 to 7 [ 193.645407][T11352] loop5: p3 p4 [ 193.652583][T11352] loop5: partition table partially beyond EOD, truncated [ 193.708170][ T42] audit: type=1326 audit(2000000071.349:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.6.1668" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fbf19df99 code=0x0 [ 193.775338][T10209] udevd[10209]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 193.776433][T11358] udevd[11358]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 193.798513][ T5827] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 193.830686][ T5827] usb 10-1: device descriptor read/8, error -71 [ 193.888720][ T5746] Bluetooth: hci1: command tx timeout [ 193.938731][ T5827] usb usb10-port1: unable to enumerate USB device [ 194.123329][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.215070][T11377] syzkaller0: entered promiscuous mode [ 194.216957][T11377] syzkaller0: entered allmulticast mode [ 194.238569][T11377] tipc: Enabled bearer , priority 0 [ 194.243724][T11376] tipc: Resetting bearer [ 194.259297][T11376] tipc: Disabling bearer [ 194.334197][T11379] CIFS: VFS: UNC: path must begin with // or \\ [ 194.336964][T11379] Malformed UNC in devname [ 194.336964][T11379] [ 194.340324][T11379] CIFS: VFS: Malformed UNC in devname [ 194.347680][ T42] audit: type=1400 audit(2000000071.989:1926): avc: denied { mount } for pid=11378 comm="syz.1.1674" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 194.383585][ T42] audit: type=1400 audit(2000000072.029:1927): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 194.572439][ T42] audit: type=1400 audit(2000000072.219:1928): avc: denied { create } for pid=11384 comm="syz.1.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.579719][ T42] audit: type=1400 audit(2000000072.219:1929): avc: denied { ioctl } for pid=11384 comm="syz.1.1677" path="socket:[42614]" dev="sockfs" ino=42614 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.619900][T11395] netlink: 'syz.6.1680': attribute type 1 has an invalid length. [ 194.667141][ T42] audit: type=1400 audit(2000000072.309:1930): avc: denied { accept } for pid=11396 comm="syz.6.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 195.199761][T11428] fuse: Unknown parameter 'subj_user' [ 195.275223][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 195.501685][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1694'. [ 195.505576][T11450] netlink: 344 bytes leftover after parsing attributes in process `syz.5.1694'. [ 195.509521][T11450] 8021q: VLANs not supported on gre0 [ 195.549068][ T5827] usb 12-1: USB disconnect, device number 2 [ 195.603846][T11462] dlm: no locking on control device [ 195.606736][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1699'. [ 195.619926][T11465] openvswitch: netlink: Missing key (keys=40, expected=80) [ 195.900979][T11498] netlink: 'syz.7.1710': attribute type 21 has an invalid length. [ 195.950596][T11504] syzkaller0: entered promiscuous mode [ 195.952498][T11504] syzkaller0: entered allmulticast mode [ 195.970372][ T5746] Bluetooth: hci1: command tx timeout [ 195.976825][T11504] tipc: Enabled bearer , priority 0 [ 195.985236][T11503] tipc: Resetting bearer [ 195.999545][T11503] tipc: Disabling bearer [ 196.058592][ T5848] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 196.166299][T11509] EXT4-fs: Conflicting test_dummy_encryption options [ 196.187133][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 196.208523][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 196.212050][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.217368][ T5848] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 196.224582][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1716'. [ 196.225969][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.236965][ T5848] usb 6-1: config 0 descriptor?? [ 196.242350][ T5848] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 196.707958][T11540] netlink: 'syz.5.1725': attribute type 1 has an invalid length. [ 196.724108][T11540] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.730393][T11540] __nla_validate_parse: 1 callbacks suppressed [ 196.730406][T11540] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1725'. [ 196.811489][T11544] netlink: 'syz.7.1726': attribute type 11 has an invalid length. [ 196.814668][T11544] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1726'. [ 196.998716][ T5858] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 197.150001][ T5858] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.153324][ T5858] usb 10-1: config 0 has no interfaces? [ 197.155133][ T5858] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.157942][ T5858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.165458][ T5858] usb 10-1: config 0 descriptor?? [ 197.369413][T11540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11540 comm=syz.5.1725 [ 197.475945][ T5848] usb 10-1: USB disconnect, device number 23 [ 198.820685][ T5855] usb 6-1: USB disconnect, device number 34 [ 211.630864][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 211.630881][ T42] audit: type=1400 audit(2000000089.279:2030): avc: denied { map_read map_write } for pid=11562 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.642092][ T42] audit: type=1400 audit(2000000089.279:2031): avc: denied { prog_run } for pid=11562 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.653876][ T42] audit: type=1400 audit(2000000089.299:2032): avc: denied { name_bind } for pid=11567 comm="syz.6.1733" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 211.663418][ T42] audit: type=1400 audit(2000000089.299:2033): avc: denied { node_bind } for pid=11567 comm="syz.6.1733" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 211.671401][ T42] audit: type=1400 audit(2000000089.299:2034): avc: denied { create } for pid=11567 comm="syz.6.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.673364][T11578] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.681335][ T42] audit: type=1400 audit(2000000089.299:2035): avc: denied { name_connect } for pid=11567 comm="syz.6.1733" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 211.688075][ T42] audit: type=1400 audit(2000000089.309:2036): avc: denied { ioctl } for pid=11567 comm="syz.6.1733" path="socket:[45737]" dev="sockfs" ino=45737 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.696526][ T42] audit: type=1400 audit(2000000089.309:2037): avc: denied { ioctl } for pid=11567 comm="syz.6.1733" path="socket:[44690]" dev="sockfs" ino=44690 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.706242][ T42] audit: type=1400 audit(2000000089.309:2038): avc: denied { ioctl } for pid=11567 comm="syz.6.1733" path="socket:[44688]" dev="sockfs" ino=44688 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 211.718336][ T42] audit: type=1400 audit(2000000089.319:2039): avc: denied { create } for pid=11577 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.830015][T11597] team0: entered allmulticast mode [ 211.832194][T11597] team_slave_0: entered allmulticast mode [ 211.834636][T11597] team_slave_1: entered allmulticast mode [ 212.058577][ T1044] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 212.208605][ T1044] usb 6-1: Using ep0 maxpacket: 16 [ 212.213281][ T1044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.216935][ T1044] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.219964][ T1044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.225713][ T1044] usb 6-1: config 0 descriptor?? [ 212.229650][ T1044] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 213.108511][ T5855] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 213.238746][ T5855] usb 10-1: device descriptor read/64, error -71 [ 213.478663][ T5855] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 213.608964][ T5855] usb 10-1: device descriptor read/64, error -71 [ 213.719282][ T5855] usb usb10-port1: attempt power cycle [ 213.830328][T11624] netlink: 'syz.7.1752': attribute type 13 has an invalid length. [ 214.058991][ T5855] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 214.071082][T11634] hfs: can't find a HFS filesystem on dev sr0 [ 214.079967][ T5855] usb 10-1: device descriptor read/8, error -71 [ 214.348746][ T5855] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 214.368961][ T5855] usb 10-1: device descriptor read/8, error -71 [ 214.478938][ T5855] usb usb10-port1: unable to enumerate USB device [ 214.852899][ T5855] usb 6-1: USB disconnect, device number 35 [ 214.997242][T11656] geneve1: entered allmulticast mode [ 215.010286][T11658] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9 sclass=netlink_xfrm_socket pid=11658 comm=syz.1.1764 [ 215.060477][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1766'. [ 215.068578][ T50] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 215.117235][T11664] "syz.7.1766" (11664) uses obsolete ecb(arc4) skcipher [ 215.127435][T11664] vxcan3: entered promiscuous mode [ 215.243712][ T50] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1023 [ 215.247039][ T50] usb 11-1: config 1 interface 0 has no altsetting 0 [ 215.251889][ T50] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.255266][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.258263][ T50] usb 11-1: Product: 㸪䐝玾廊㎒퍁⾍뀋톁滵﹅뫐Ώ㟊벎씔㘨竫锭るˉ㻡蚢埕䴁ņ除茉褱⧚靦穞％攧䎌젇楞勩㧺㇁윺뽽뺽곮铜眣ᡱ㉒䁄泰഼ﶫ뻡Ề㏪鐜ຳ螝ኳ뭐轢ᜊ클㬁岞Ⲥ⫵ⅱ嘰၏轼唜䢹ﮇ臟끣뭿꣈殁䘴藰颩嗱琀Ｘ彦뜘뎻ꝱᮟᦆ싎嗓퇍뼀厴縠ࡣ찖溌纱ꌧ爋ｪ餈웟珣툢騲 [ 215.269347][ T50] usb 11-1: Manufacturer: Т [ 215.270980][ T50] usb 11-1: SerialNumber: ᠉ [ 215.275476][T11643] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 215.430975][ T5858] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 215.443598][T11688] overlayfs: failed to resolve './file1/file0': -2 [ 215.495623][ T50] usblp 11-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8 [ 215.501895][ T50] usb 11-1: USB disconnect, device number 21 [ 215.507476][ T50] usblp0: removed [ 215.578844][ T5858] usb 12-1: Using ep0 maxpacket: 16 [ 215.582167][ T5858] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.587208][ T5858] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.591337][ T5858] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.597631][ T5858] usb 12-1: config 0 descriptor?? [ 215.603149][ T5858] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 216.042457][T11696] loop5: detected capacity change from 0 to 7 [ 216.054837][T11696] Dev loop5: unable to read RDB block 7 [ 216.057151][T11696] loop5: unable to read partition table [ 216.061030][T11696] loop5: partition table beyond EOD, truncated [ 216.065604][T11696] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 216.087162][T11696] netlink: 'syz.5.1774': attribute type 10 has an invalid length. [ 216.098986][T11696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.104034][T11696] team0: Port device netdevsim1 added [ 216.469782][T11706] binder: 11705:11706 ioctl 4018620d 0 returned -22 [ 216.553037][T11721] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 216.678705][ T5858] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 216.734316][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 216.734332][ T42] audit: type=1400 audit(2000000094.379:2208): avc: denied { create } for pid=11736 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.759162][ T42] audit: type=1400 audit(2000000094.379:2209): avc: denied { ioctl } for pid=11736 comm="syz.1.1784" path="socket:[47105]" dev="sockfs" ino=47105 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.796361][ T42] audit: type=1400 audit(2000000094.439:2210): avc: denied { setopt } for pid=11738 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.805836][ T42] audit: type=1400 audit(2000000094.439:2211): avc: denied { read } for pid=11738 comm="syz.1.1785" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 216.814391][ T42] audit: type=1400 audit(2000000094.439:2212): avc: denied { open } for pid=11738 comm="syz.1.1785" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 216.823294][ T42] audit: type=1400 audit(2000000094.449:2213): avc: denied { create } for pid=11738 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 216.838690][ T5858] usb 11-1: Using ep0 maxpacket: 16 [ 216.844257][ T5858] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.859245][ T5858] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 216.862554][ T5858] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.867022][ T5858] usb 11-1: config 0 descriptor?? [ 216.871369][ T5858] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 216.920629][ T42] audit: type=1326 audit(2000000094.569:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.1.1786" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71cc99df99 code=0x0 [ 217.078204][ T5858] usb 11-1: USB disconnect, device number 22 [ 217.243333][ T42] audit: type=1400 audit(2000000094.889:2215): avc: denied { relabelfrom } for pid=11749 comm="syz.5.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 217.251783][ T42] audit: type=1400 audit(2000000094.889:2216): avc: denied { relabelto } for pid=11749 comm="syz.5.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 217.252893][T11750] tipc: Enabling of bearer rejected, already enabled [ 217.411703][ T42] audit: type=1400 audit(2000000095.059:2217): avc: denied { watch watch_reads } for pid=11751 comm="syz.5.1789" path="pipe:[48180]" dev="pipefs" ino=48180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 217.527043][T11756] netlink: 'syz.5.1790': attribute type 1 has an invalid length. [ 217.558019][T11756] bond7: entered promiscuous mode [ 217.560680][T11756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.569139][T11756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11756 comm=syz.5.1790 [ 217.630801][T11762] netlink: 'syz.5.1791': attribute type 4 has an invalid length. [ 217.633357][T11762] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1791'. [ 217.636860][T11762] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1791'. [ 217.763519][T11767] erspan1: entered promiscuous mode [ 217.877823][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1796'. [ 218.213442][T11778] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 218.220066][ T5858] usb 12-1: USB disconnect, device number 3 [ 218.230472][T11791] loop8: detected capacity change from 0 to 7 [ 218.236715][T11778] pci 0000:00:01.0: BAR 0 [mem 0x54000000-0x547fffff pref] [ 218.246584][T11778] pci 0000:00:01.0: BAR 2 [mem 0x147b98374eae0000-0x147b98374eae3fff 64bit pref] [ 218.250100][T11791] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 218.252610][T11791] loop8: partition table partially beyond EOD, truncated [ 218.255026][T11778] pci 0000:00:01.0: BAR 4 [mem 0x213e3000-0x213e3fff] [ 218.257719][T11791] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 218.261364][T11778] pci 0000:00:01.0: ROM [mem 0xca730000-0xca73ffff pref] [ 218.270999][T11791] loop8: p2 start 121280928 is beyond EOD, truncated [ 218.302363][T11691] udevd[11691]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 218.346993][T11778] pci 0000:00:01.0: Adding to iommu group 1 [ 218.382810][T11778] pci 0000:00:01.0: vgaarb: bridge control possible [ 218.385574][T11778] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 218.411481][T11778] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 218.424225][T11778] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 218.440867][T11778] pci 0000:00:1d.7: Adding to iommu group 7 [ 218.452247][T11778] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 218.457170][T11778] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned [ 218.461034][T11778] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 218.464810][T11778] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned [ 218.467765][T11778] pci 0000:00:1d.7: BAR 0 [mem 0x80811000-0x80811fff]: assigned [ 218.475203][T11778] virtio-pci 0000:00:01.0: enabling device (0000 -> 0002) [ 218.498023][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1808'. [ 218.563772][T11778] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 218.575511][T11778] [drm] features: -virgl +edid -resource_blob -host_visible [ 218.575549][T11778] [drm] features: -context_init -blob_alignment [ 218.596043][T11778] ------------[ cut here ]------------ [ 218.599183][T11778] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 218.601643][T11778] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#1: syz.6.1796/11778 [ 218.604988][T11778] Modules linked in: [ 218.606551][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.6.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.610672][T11778] Tainted: [L]=SOFTLOCKUP [ 218.612060][T11778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.615291][T11778] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 218.617466][T11778] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 a5 a3 5d 09 85 c0 75 e0 48 8d 3d fa 2d ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 25 a5 5d 09 48 85 c0 0f [ 218.623900][T11778] RSP: 0018:ffffc900057f6f58 EFLAGS: 00010246 [ 218.626036][T11778] RAX: 0000000000000000 RBX: ffff888101af8500 RCX: fffff52000afedc6 [ 218.632702][T11778] RDX: 0000000000000000 RSI: ffffffff8c6f8ae0 RDI: ffffffff912750c0 [ 218.636004][T11778] RBP: ffffffff8c6f8ae0 R08: 0000000000000000 R09: fffffbfff2244f3a [ 218.639141][T11778] R10: ffffc900057f6f58 R11: 0000000000000000 R12: 0000000000000000 [ 218.641898][T11778] R13: ffffc900057f6fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 218.644427][T11778] FS: 00007f3fbffa46c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 218.647255][T11778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.648503][ T1044] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 218.649562][T11778] CR2: 00007f5e6b93d473 CR3: 0000000036083000 CR4: 0000000000352ef0 [ 218.654388][T11778] Call Trace: [ 218.655543][T11778] [ 218.656544][T11778] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 218.658839][T11778] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 218.661356][T11778] ? vp_modern_set_queue_enable+0x43/0x90 [ 218.663435][T11778] ? iowrite16+0x33/0xb0 [ 218.665237][T11778] ? vp_modern_find_vqs+0xd2/0x100 [ 218.667385][T11778] virtio_gpu_init.cold+0x51c/0x126e [ 218.669683][T11778] ? __pfx_virtio_gpu_init+0x10/0x10 [ 218.671936][T11778] ? __mutex_unlock_slowpath+0x35d/0x930 [ 218.674355][T11778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.676923][T11778] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 218.679441][T11778] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 218.681956][T11778] ? vga_default_device+0x9/0x20 [ 218.684025][T11778] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 218.686870][T11778] virtio_gpu_probe+0x21c/0x360 [ 218.688926][T11778] virtio_dev_probe+0x6a2/0xbe0 [ 218.691002][T11778] ? __pfx_virtio_dev_probe+0x10/0x10 [ 218.693219][T11778] ? kernfs_create_link+0x1bd/0x240 [ 218.695393][T11778] ? kernfs_put+0x3f/0x60 [ 218.697272][T11778] ? sysfs_do_create_link_sd+0xbb/0x140 [ 218.699580][T11778] ? sysfs_create_link+0x68/0xc0 [ 218.701709][T11778] ? __pfx_virtio_dev_probe+0x10/0x10 [ 218.703954][T11778] really_probe+0x241/0xa60 [ 218.705879][T11778] __driver_probe_device+0x20e/0x450 [ 218.708103][T11778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.710642][T11778] driver_probe_device+0x4a/0x140 [ 218.712708][T11778] __device_attach_driver+0x1df/0x320 [ 218.714936][T11778] ? __pfx___device_attach_driver+0x10/0x10 [ 218.717326][T11778] bus_for_each_drv+0x159/0x1e0 [ 218.719432][T11778] ? __pfx_bus_for_each_drv+0x10/0x10 [ 218.721563][T11778] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 218.723864][T11778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.726262][T11778] __device_attach+0x1e4/0x4d0 [ 218.728268][T11778] ? __pfx___device_attach+0x10/0x10 [ 218.730577][T11778] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.733049][T11778] device_initial_probe+0xaf/0xd0 [ 218.735105][T11778] bus_probe_device+0x64/0x160 [ 218.737033][T11778] device_add+0x121d/0x1970 [ 218.739289][T11778] ? __pfx_device_add+0x10/0x10 [ 218.741363][T11778] ? __pfx___might_resched+0x10/0x10 [ 218.743569][T11778] ? __init_waitqueue_head+0xca/0x150 [ 218.745845][T11778] ? ioread8+0x8f/0xd0 [ 218.747550][T11778] register_virtio_device+0x4f0/0x5d0 [ 218.749962][T11778] ? __pfx_register_virtio_device+0x10/0x10 [ 218.752451][T11778] ? __pfx_pcibios_set_master+0x10/0x10 [ 218.754772][T11778] ? __raw_spin_lock_init+0x3a/0x110 [ 218.757019][T11778] ? __pfx_virtio_pci_probe+0x10/0x10 [ 218.759343][T11778] virtio_pci_probe+0x255/0x410 [ 218.761328][T11778] local_pci_probe+0xdd/0x1b0 [ 218.763276][T11778] pci_call_probe+0x176/0x800 [ 218.765283][T11778] ? __pfx_pci_call_probe+0x10/0x10 [ 218.767516][T11778] ? find_held_lock+0x2b/0x80 [ 218.769637][T11778] ? pci_match_device+0x450/0x5f0 [ 218.771747][T11778] ? pci_match_device+0x450/0x5f0 [ 218.773899][T11778] ? pci_match_id+0x34d/0x3f0 [ 218.775887][T11778] ? pci_match_device+0xb4/0x5f0 [ 218.778003][T11778] pci_device_probe+0x1cd/0x370 [ 218.780129][T11778] ? __pfx_pci_device_probe+0x10/0x10 [ 218.782462][T11778] really_probe+0x241/0xa60 [ 218.784397][T11778] __driver_probe_device+0x20e/0x450 [ 218.786649][T11778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.789240][T11778] driver_probe_device+0x4a/0x140 [ 218.791419][T11778] __device_attach_driver+0x1df/0x320 [ 218.793706][T11778] ? __pfx___device_attach_driver+0x10/0x10 [ 218.796175][T11778] bus_for_each_drv+0x159/0x1e0 [ 218.798261][T11778] ? __pfx_bus_for_each_drv+0x10/0x10 [ 218.800636][T11778] ? lockdep_hardirqs_on+0x78/0x100 [ 218.802803][T11778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.805207][T11778] __device_attach+0x1e4/0x4d0 [ 218.807126][T11778] ? __pfx___device_attach+0x10/0x10 [ 218.809474][T11778] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.811285][ T1044] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 218.811619][T11778] device_initial_probe+0xaf/0xd0 [ 218.814339][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.816166][T11778] pci_bus_add_device+0xc5/0x100 [ 218.816202][T11778] pci_bus_add_devices+0x9a/0x1f0 [ 218.820340][ T1044] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.821297][T11778] pci_rescan_bus+0x2a/0x40 [ 218.821315][T11778] rescan_store+0xfb/0x130 [ 218.821329][T11778] ? __pfx_rescan_store+0x10/0x10 [ 218.823022][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.826437][T11778] ? sysfs_file_kobj+0xe4/0x290 [ 218.826464][T11778] ? __pfx_rescan_store+0x10/0x10 [ 218.826478][T11778] bus_attr_store+0x74/0xb0 [ 218.826498][T11778] ? __pfx_bus_attr_store+0x10/0x10 [ 218.827985][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.829513][T11778] sysfs_kf_write+0xf2/0x150 [ 218.829547][T11778] kernfs_fop_write_iter+0x3e0/0x5f0 [ 218.829570][T11778] ? __pfx_sysfs_kf_write+0x10/0x10 [ 218.833831][ T1044] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 218.835260][T11778] vfs_write+0x6ac/0x1050 [ 218.835309][T11778] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 218.837611][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.839396][T11778] ? __pfx_vfs_write+0x10/0x10 [ 218.841813][ T1044] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.842923][T11778] ksys_write+0x12a/0x250 [ 218.842947][T11778] ? __pfx_ksys_write+0x10/0x10 [ 218.842971][T11778] do_syscall_64+0x115/0x870 [ 218.847457][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.848871][T11778] ? clear_bhb_loop+0x40/0x90 [ 218.848891][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.848905][T11778] RIP: 0033:0x7f3fbf19df99 [ 218.848918][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.848931][T11778] RSP: 002b:00007f3fbffa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.848945][T11778] RAX: ffffffffffffffda RBX: 00007f3fbf426090 RCX: 00007f3fbf19df99 [ 218.848953][T11778] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 218.852259][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.852924][T11778] RBP: 00007f3fbf234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 218.857280][ T1044] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 218.857336][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.859646][ T1044] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.862460][T11778] R13: 00007f3fbf426128 R14: 00007f3fbf426090 R15: 00007ffd8407f6f8 [ 218.862482][T11778] [ 218.862490][T11778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.862503][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.6.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.862523][T11778] Tainted: [L]=SOFTLOCKUP [ 218.862527][T11778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.862536][T11778] Call Trace: [ 218.862541][T11778] [ 218.862546][T11778] dump_stack_lvl+0x100/0x190 [ 218.862581][T11778] vpanic+0x552/0x970 [ 218.862594][T11778] ? __pfx_vpanic+0x10/0x10 [ 218.862609][T11778] panic+0xd1/0xe0 [ 218.862620][T11778] ? __pfx_panic+0x10/0x10 [ 218.862638][T11778] check_panic_on_warn.cold+0x19/0x34 [ 218.862651][T11778] ? __kmem_cache_create_args+0xa6/0x420 [ 218.862671][T11778] __warn.cold+0x191/0x318 [ 218.862692][T11778] __report_bug+0x30f/0x440 [ 218.862723][T11778] ? __kmem_cache_create_args+0xa6/0x420 [ 218.862754][T11778] ? __pfx___report_bug+0x10/0x10 [ 218.862784][T11778] ? __mutex_lock+0x26d/0x1bd0 [ 218.862809][T11778] ? __kmem_cache_create_args+0x44/0x420 [ 218.862831][T11778] report_bug_entry+0xe1/0x290 [ 218.862847][T11778] ? __kmem_cache_create_args+0xa9/0x420 [ 218.862875][T11778] handle_bug+0x1cd/0x2a0 [ 218.862901][T11778] exc_invalid_op+0x17/0x50 [ 218.862925][T11778] asm_exc_invalid_op+0x1a/0x20 [ 218.862945][T11778] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 218.862975][T11778] Code: 48 8b 43 60 48 8d 58 a0 48 3d 30 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 a5 a3 5d 09 85 c0 75 e0 48 8d 3d fa 2d ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 25 a5 5d 09 48 85 c0 0f [ 218.862993][T11778] RSP: 0018:ffffc900057f6f58 EFLAGS: 00010246 [ 218.863010][T11778] RAX: 0000000000000000 RBX: ffff888101af8500 RCX: fffff52000afedc6 [ 218.863029][T11778] RDX: 0000000000000000 RSI: ffffffff8c6f8ae0 RDI: ffffffff912750c0 [ 218.863043][T11778] RBP: ffffffff8c6f8ae0 R08: 0000000000000000 R09: fffffbfff2244f3a [ 218.863055][T11778] R10: ffffc900057f6f58 R11: 0000000000000000 R12: 0000000000000000 [ 218.863067][T11778] R13: ffffc900057f6fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 218.863094][T11778] ? __kmem_cache_create_args+0x9b/0x420 [ 218.863125][T11778] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 218.863160][T11778] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 218.863192][T11778] ? vp_modern_set_queue_enable+0x43/0x90 [ 218.863219][T11778] ? iowrite16+0x33/0xb0 [ 218.863248][T11778] ? vp_modern_find_vqs+0xd2/0x100 [ 218.863272][T11778] virtio_gpu_init.cold+0x51c/0x126e [ 218.863291][T11778] ? __pfx_virtio_gpu_init+0x10/0x10 [ 218.863306][T11778] ? __mutex_unlock_slowpath+0x35d/0x930 [ 218.863322][T11778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.863339][T11778] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 218.863358][T11778] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 218.863378][T11778] ? vga_default_device+0x9/0x20 [ 218.863396][T11778] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 218.863417][T11778] virtio_gpu_probe+0x21c/0x360 [ 218.863434][T11778] virtio_dev_probe+0x6a2/0xbe0 [ 218.863453][T11778] ? __pfx_virtio_dev_probe+0x10/0x10 [ 218.863469][T11778] ? kernfs_create_link+0x1bd/0x240 [ 218.863487][T11778] ? kernfs_put+0x3f/0x60 [ 218.863499][T11778] ? sysfs_do_create_link_sd+0xbb/0x140 [ 218.863512][T11778] ? sysfs_create_link+0x68/0xc0 [ 218.863526][T11778] ? __pfx_virtio_dev_probe+0x10/0x10 [ 218.863543][T11778] really_probe+0x241/0xa60 [ 218.863560][T11778] __driver_probe_device+0x20e/0x450 [ 218.863575][T11778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.863591][T11778] driver_probe_device+0x4a/0x140 [ 218.863606][T11778] __device_attach_driver+0x1df/0x320 [ 218.863622][T11778] ? __pfx___device_attach_driver+0x10/0x10 [ 218.863637][T11778] bus_for_each_drv+0x159/0x1e0 [ 218.863650][T11778] ? __pfx_bus_for_each_drv+0x10/0x10 [ 218.863662][T11778] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 218.863675][T11778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.863688][T11778] __device_attach+0x1e4/0x4d0 [ 218.863704][T11778] ? __pfx___device_attach+0x10/0x10 [ 218.863719][T11778] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.863740][T11778] device_initial_probe+0xaf/0xd0 [ 218.863756][T11778] bus_probe_device+0x64/0x160 [ 218.863771][T11778] device_add+0x121d/0x1970 [ 218.863790][T11778] ? __pfx_device_add+0x10/0x10 [ 218.863806][T11778] ? __pfx___might_resched+0x10/0x10 [ 218.863829][T11778] ? __init_waitqueue_head+0xca/0x150 [ 218.863855][T11778] ? ioread8+0x8f/0xd0 [ 218.863886][T11778] register_virtio_device+0x4f0/0x5d0 [ 218.863913][T11778] ? __pfx_register_virtio_device+0x10/0x10 [ 218.863940][T11778] ? __pfx_pcibios_set_master+0x10/0x10 [ 218.863961][T11778] ? __raw_spin_lock_init+0x3a/0x110 [ 218.863980][T11778] ? __pfx_virtio_pci_probe+0x10/0x10 [ 218.863992][T11778] virtio_pci_probe+0x255/0x410 [ 218.864005][T11778] local_pci_probe+0xdd/0x1b0 [ 219.062309][T11778] pci_call_probe+0x176/0x800 [ 219.064182][T11778] ? __pfx_pci_call_probe+0x10/0x10 [ 219.066270][T11778] ? find_held_lock+0x2b/0x80 [ 219.068295][T11778] ? pci_match_device+0x450/0x5f0 [ 219.070266][T11778] ? pci_match_device+0x450/0x5f0 [ 219.072296][T11778] ? pci_match_id+0x34d/0x3f0 [ 219.074186][T11778] ? pci_match_device+0xb4/0x5f0 [ 219.076175][T11778] pci_device_probe+0x1cd/0x370 [ 219.078127][T11778] ? __pfx_pci_device_probe+0x10/0x10 [ 219.080261][T11778] really_probe+0x241/0xa60 [ 219.082086][T11778] __driver_probe_device+0x20e/0x450 [ 219.083752][T11778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.085639][T11778] driver_probe_device+0x4a/0x140 [ 219.087254][T11778] __device_attach_driver+0x1df/0x320 [ 219.088981][T11778] ? __pfx___device_attach_driver+0x10/0x10 [ 219.090859][T11778] bus_for_each_drv+0x159/0x1e0 [ 219.092363][T11778] ? __pfx_bus_for_each_drv+0x10/0x10 [ 219.094125][T11778] ? lockdep_hardirqs_on+0x78/0x100 [ 219.095808][T11778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 219.097893][T11778] __device_attach+0x1e4/0x4d0 [ 219.099755][T11778] ? __pfx___device_attach+0x10/0x10 [ 219.101476][T11778] ? do_raw_spin_unlock+0x145/0x1e0 [ 219.103128][T11778] device_initial_probe+0xaf/0xd0 [ 219.104844][T11778] pci_bus_add_device+0xc5/0x100 [ 219.106474][T11778] pci_bus_add_devices+0x9a/0x1f0 [ 219.108065][T11778] pci_rescan_bus+0x2a/0x40 [ 219.109503][T11778] rescan_store+0xfb/0x130 [ 219.110909][T11778] ? __pfx_rescan_store+0x10/0x10 [ 219.112589][T11778] ? sysfs_file_kobj+0xe4/0x290 [ 219.114176][T11778] ? __pfx_rescan_store+0x10/0x10 [ 219.115791][T11778] bus_attr_store+0x74/0xb0 [ 219.117192][T11778] ? __pfx_bus_attr_store+0x10/0x10 [ 219.118764][T11778] sysfs_kf_write+0xf2/0x150 [ 219.120227][T11778] kernfs_fop_write_iter+0x3e0/0x5f0 [ 219.121900][T11778] ? __pfx_sysfs_kf_write+0x10/0x10 [ 219.123543][T11778] vfs_write+0x6ac/0x1050 [ 219.124937][T11778] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 219.126807][T11778] ? __pfx_vfs_write+0x10/0x10 [ 219.128335][T11778] ksys_write+0x12a/0x250 [ 219.129712][T11778] ? __pfx_ksys_write+0x10/0x10 [ 219.131277][T11778] do_syscall_64+0x115/0x870 [ 219.132777][T11778] ? clear_bhb_loop+0x40/0x90 [ 219.134293][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.136148][T11778] RIP: 0033:0x7f3fbf19df99 [ 219.137578][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.143540][T11778] RSP: 002b:00007f3fbffa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.146157][T11778] RAX: ffffffffffffffda RBX: 00007f3fbf426090 RCX: 00007f3fbf19df99 [ 219.148746][T11778] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 219.151297][T11778] RBP: 00007f3fbf234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 219.153869][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.156368][T11778] R13: 00007f3fbf426128 R14: 00007f3fbf426090 R15: 00007ffd8407f6f8 [ 219.158875][T11778] [ 219.160444][T11778] Kernel Offset: disabled [ 219.161849][T11778] Rebooting in 86400 seconds..