last executing test programs: 1m24.42798367s ago: executing program 2 (id=499): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x16, 0x4e, 0x401, 0x2, 0x0, 0x1ff, 0x2b2, 0x40, 0x3e7, 0x0, 0x1, 0x38, 0x2, 0x0, 0x7, 0x4}, [{0x6474e551, 0x1, 0x4, 0x8, 0x3, 0x1, 0x0, 0x2}, {0x70000000, 0x7fff, 0x8, 0x2, 0x8, 0xffffffc000000000, 0xff, 0xd8}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x22, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000240)=r1, 0x4) sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e24, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x6, 0x4545efde}, &(0x7f00000000c0)=0x10) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1m24.329381474s ago: executing program 2 (id=501): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0xce1dbf9576eff978) 1m24.329002659s ago: executing program 2 (id=503): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/240, 0xf0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r1) 1m24.191764237s ago: executing program 2 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000002ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460020060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8010"], 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20000f79, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) recvmsg$can_raw(r6, &(0x7f0000000800)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/181, 0xb5}], 0x5}, 0x2001) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e76623000000000000", 0x2e}], 0x1}, 0x8090) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) syz_emit_ethernet(0x56, &(0x7f0000002ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460020060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8010"], 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x20000f79, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) (async) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) (async) recvmsg$can_raw(r6, &(0x7f0000000800)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/181, 0xb5}], 0x5}, 0x2001) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e76623000000000000", 0x2e}], 0x1}, 0x8090) (async) 1m24.089143884s ago: executing program 2 (id=505): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) r1 = userfaultfd(0x80001) r2 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x6040000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) 1m24.017034443s ago: executing program 2 (id=506): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000271100010027bddd8772e1d87000fedb5b", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x58}, 0x4080) 1m9.023218937s ago: executing program 32 (id=506): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000271100010027bddd8772e1d87000fedb5b", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x58}, 0x4080) 1m3.268881254s ago: executing program 0 (id=713): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r2, r3, 0x4, r1}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m3.26263283s ago: executing program 0 (id=714): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6fa7d763}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xea}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) (async, rerun: 32) r2 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xfff9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xff, 0xfffffffb, 0x3, 0x4, 0x0, 0x100075, 0xfffffff8, 0x9, 0x401}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (rerun: 64) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m3.14762701s ago: executing program 0 (id=715): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x2b02cb8ae9ed7b48, 0x3, 0x59, {0x59, 0x21, "3117eb3708702402f1f033d5d986d9d7a70553bf8a184214811a1b8ac5cc2a7b221875ed6cfc60db49d9cce3389c6264993c920ec5f34c843328f20e7938f26e758fdba188b15e3c8fc8d8624402861ada05187546298d"}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x40000, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000014) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90010a80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, r3, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x10a, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x2, 0x4}, @value=@ver_80211n={0x0, 0x7ffc, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x8000, 0x7, @default, @val={0x1, 0x6, [{0xc}, {0x4}, {0x6c, 0x1}, {0x2, 0x1}, {0x60}, {0x30}]}, @void, [{0xdd, 0x8, "90053e52fc0fdb97"}, {0xdd, 0xd0, "9903ddf8e229a75bbbb42206553abc259b41f4f158f3ad9734b71e3f175ec671a65c8b2f7e250b4be60dcf857cb80bcdec0ac2a34fba006bf892a187552092e8c7f88e65e5f7bf3ca8aa1df2538f087d4f32cb14dd8460d2d5f8913328b725b31cffbc454594eda82dd058422c65cbdfb374bdd5a83466e1b4f2bc88abed4af5b34c32ea05367d2bf43e4f1b2ece3fbd9bcd0fab3f338b1c9ca4117a23823903d14e6385a9b59813bb9cd16f80b44050caed2d28eceeb18fbd6df8b711c88f0be94ae50bf655211a1436940ef0fd650e"}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x4) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 56.737045098s ago: executing program 0 (id=778): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c010000100013070000c6000000000000000000000000000000000000000000ff0100000000db000000000000000001000000004e756301000000002e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) r5 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x94) close(r6) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x4) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvfrom$inet_nvme(r7, 0x0, 0x0, 0x40000002, 0x0, 0x0) shutdown(r7, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x10120, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r10, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@bloom_filter={0x1e, 0x6, 0x0, 0xfff, 0x4, r1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xa}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) 56.235084195s ago: executing program 0 (id=786): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x2, r0, 'id0\x00'}) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000100)=0x4) (async) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d03, &(0x7f0000000000)) 55.798770221s ago: executing program 0 (id=794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000001200)=""/4096, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000800)="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", 0x21b, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 55.766524095s ago: executing program 33 (id=794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000001200)=""/4096, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000800)="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", 0x21b, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.297733093s ago: executing program 3 (id=1683): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000000000)) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x8}, @wrmsr={0x65, 0x20, {0x330, 0x2a}}, @out_dx={0x6a, 0x28, {0xb938, 0x4, 0xffffffff80000001}}, @rdmsr={0x66, 0x18, {0xa76}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x498, 0x6, 0x3, 0x4}}, @wr_crn={0x67, 0x20, {0x3, 0xd}}, @cpuid={0x64, 0x18, {0x4, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xda, 0x5, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x88, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x810, 0x8, 0x7, 0x8}}, @cpuid={0x64, 0x18, {0x4, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x5}}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @cpuid={0x64, 0x18, {0x7, 0x6}}, @out_dx={0x6a, 0x28, {0x36bf, 0x0, 0x8000000000000000}}, @cpuid={0x64, 0x18, {0x5, 0x9}}, @wrmsr={0x65, 0x20, {0xa5b, 0xfffffffffffff62a}}, @in_dx={0x69, 0x20, {0xc7d2, 0x2}}, @rdmsr={0x66, 0x18, {0xb99}}, @wr_crn={0x67, 0x20, {0x0, 0x1}}, @uexit={0x0, 0x18, 0x8001}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x2e0}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000500)="6667451c4766b814018ee8410f2261660f516610420f30440f01f8420f0d053bceb89c363e440f01c347a8dd64400f01cb", 0x31}], 0x1, 0x40, &(0x7f0000000580)=[@cstype3={0x5, 0x8}], 0x1) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)=ANY=[@ANYBLOB="12010002e1ff06074409010240000102030109021f0001010200050924000001010330fe0905120308002906080c400100"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 2.827410549s ago: executing program 1 (id=1699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x10, 0x8, 0x1, 0x2d, 0x3ff}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffff6, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x400, 0x7, 0xc}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.757587921s ago: executing program 4 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202800}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000b3b3e3d369f703b67c596608863299296cd67606fa8d027d801b4fa02b6e87c9a23f2913084cd93c5411635cea12da2871cd94a72f2a0922abe62c805ab79e2664e45830ef715f2eef12ec1c59ad5948e60b974c34b9049fe139f094a8b9d8410827b0c07001f8623659c824c6e3d7a28a560fcf9a35a83939efbd2a8a2ec8eaded87ec35585321a50786194664299c3538608dfcdda8f29bf37f541c6eea3633c651bf63e4beb2c8beb354dcfecacdda5c0efa7047e995c0001a687295f2a447ffc06fa73910f7d08cf0eb7f294594eb0e430f5b6ae41014d26d63de8ee62bd311ed717b0ce7da41455ab908fc26c429cc6827f6066f2e95b23f7e99e", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250700000008000800ac14141208000400ffffffff14000500fc00000000000000000000000000000006000b002000000014000600fe8000000000000000000000000000291400060020010000000000000000000000000002080002000500000008000400030000001400060020010000000000000000000000000000080008007f000001"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4040851) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r5, @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x2400c811}, 0x8044) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) signalfd4(r8, &(0x7f0000000180), 0x8, 0x80800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.757111136s ago: executing program 1 (id=1701): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2000000000000002) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) (async) sendfile(r1, r1, 0x0, 0x2000000000000002) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) 2.706515188s ago: executing program 1 (id=1703): r0 = memfd_secret(0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='-([\\\x00', 0x107200, &(0x7f0000000140)={@_ha_fsid={[0x2, 0xa160]}, {0x1, 0x7a0c, 0x0, 0x1ff}}, 0xfffffbff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x32400, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}], [{@euid_eq={'euid', 0x3d, r5}}, {@fowner_lt={'fowner<', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '$\x87\xa9{'}}, {@obj_user}, {@subj_type={'subj_type', 0x3d, '\\'}}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setgid(r7) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002640)={0x50, 0x0, r10, {0x7, 0x2d, 0x80000000, 0xabaefc313d5f4f97, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, 0x18}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000002640)={0x50, 0x0, r10, {0x7, 0x2d, 0x80000000, 0xabaefc313d5f4f97, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, 0x18}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002700)={{0x0, 0x1, 0x80000000, 0x8, 0x9, 0x4, 0xf, 0x8, 0x10001, 0x10, 0x3, 0x3, 0x7, 0x3}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002700)={{0x0, 0x1, 0x80000000, 0x8, 0x9, 0x4, 0xf, 0x8, 0x10001, 0x10, 0x3, 0x3, 0x7, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000027c0)={{r12, 0xfff, 0x5, 0xd, 0x7, 0x7, 0x3, 0x101, 0x0, 0x8000, 0x6a2649b8, 0x0, 0x1, 0xffffffff, 0x45}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x800, 0x0) futex(&(0x7f00000028c0)=0x2, 0x3, 0x2, &(0x7f0000002900), &(0x7f0000002940)=0x2, 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r9) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r9) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002980)={"db550b2f737c994d3094b0186d7dfa7f", 0x0, 0x0, {0x8000000000000000, 0x4}, {0x5, 0xf9d}, 0x0, [0x100000001, 0x13c4045b, 0x8, 0x4, 0x0, 0x8000000000000000, 0x8, 0x0, 0x101, 0x9, 0x2, 0x0, 0x2, 0x4, 0x2, 0x6]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002980)={"db550b2f737c994d3094b0186d7dfa7f", 0x0, 0x0, {0x8000000000000000, 0x4}, {0x5, 0xf9d}, 0x0, [0x100000001, 0x13c4045b, 0x8, 0x4, 0x0, 0x8000000000000000, 0x8, 0x0, 0x101, 0x9, 0x2, 0x0, 0x2, 0x4, 0x2, 0x6]}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000002a80)=r14) io_uring_setup(0x7f3f, &(0x7f0000002ac0)={0x0, 0x5b13, 0x100, 0x2, 0x1c4, 0x0, r1}) (async) r15 = io_uring_setup(0x7f3f, &(0x7f0000002ac0)={0x0, 0x5b13, 0x100, 0x2, 0x1c4, 0x0, r1}) io_uring_enter(r15, 0x49a5, 0xe486, 0x7b, &(0x7f0000002b40)={[0x4]}, 0x8) fsetxattr$system_posix_acl(r13, &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002bc0)={{}, {0x1, 0x1}, [{0x2, 0x0, r11}, {0x2, 0x7, r3}, {0x2, 0x4, r3}], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x0) (async) fsetxattr$system_posix_acl(r13, &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002bc0)={{}, {0x1, 0x1}, [{0x2, 0x0, r11}, {0x2, 0x7, r3}, {0x2, 0x4, r3}], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000002c00), 0x8, 0x28000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) ftruncate(r16, 0x0) (async) ftruncate(r16, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0) (async) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r17, 0x7bcc5000) semget$private(0x0, 0x1, 0x1) (async) semget$private(0x0, 0x1, 0x1) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r13, 0x40106e80, &(0x7f0000002cc0)={0x3, 0x1}) 2.583656963s ago: executing program 4 (id=1705): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)) timerfd_gettime(0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) read$FUSE(r3, &(0x7f00000028c0)={0x2020}, 0x2020) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x4, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x7f, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x40000000, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x100000, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x7, 0x2, 0x7, 0xe24, 0x4, 0x6, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x41, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x0, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x2938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x10001, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.583075333s ago: executing program 1 (id=1707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x80041285, &(0x7f0000001080)) r5 = dup(r3) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000540)=@svm={0x2, 0x1, 0x1080, {0xeeee8000}, {"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"}}) r7 = shmat(0xffffffffffffffff, &(0x7f0000ff1000/0x2000)=nil, 0x0) shmdt(r7) 2.267745464s ago: executing program 1 (id=1711): r0 = socket$unix(0x1, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x361c, 0x40, 0xfffffffe, 0x1b2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r1, r1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x3e, 0x1}) (async) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) (async) fsopen(0x0, 0x1) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x55af) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="bc0000002b0001000000000000000000aa0000800c000000004000000000000014000100fe8000000000000000000000000000aa50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31462e351dc076eb69ad17768ab1d9144543d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe940000c06d38"], 0xbc}], 0x1}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x40) (async) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) (async) ioctl$CDROM_DEBUG(r5, 0x5330, 0x1) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES16=r9, @ANYRESHEX=r0], 0x2c}}, 0x14) 2.26748026s ago: executing program 1 (id=1712): ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x7, 0x8]) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="05"], &(0x7f0000000340)='syzkaller\x00', 0x597, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) r6 = socket$netlink(0x10, 0x3, 0xb) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x401}, 0x2f) close_range(r6, 0xffffffffffffffff, 0x0) 1.627920188s ago: executing program 5 (id=1713): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) syz_clone(0xa09c4140, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x2000000000000000, 0xfffdfffffffffffb}, 0x0) 777.795695ms ago: executing program 5 (id=1714): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) getrandom(&(0x7f0000000040)=""/54, 0x36, 0x2) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x4) 777.462315ms ago: executing program 5 (id=1715): socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00(\x00\a'], 0x20}}, 0x40080c0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3f0000001000010400000000000000a700000000", @ANYRES32=0x0, @ANYBLOB="08000200e09e01001c00128009000100626f6e64000000000c0002800800130002000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r4, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x406, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000000240)) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0xc4, 0x0}) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, &(0x7f0000000080)) 698.022707ms ago: executing program 5 (id=1716): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) shutdown(r0, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r7, 0xc004ae0a, &(0x7f0000000140)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 557.043952ms ago: executing program 4 (id=1717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=@deltaction={0x19c, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf33}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x969}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa44}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ba}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdf7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x72}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb1d0}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x400}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$tipc(0x1e, 0x1, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x10040) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10082, 0xf1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000004c0)={0x1, 0x0, 0x98, &(0x7f0000000400)={0x0, 0x8000, 0x9}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000380)="66bad004b000ee0f30b9800000c00f3235000100000f300f20d835200000000f22d8660f3881238fc978d3bb00500000c4c17bf09d008000000f01c89a07600000340164f30f1eec", 0x48}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002ebd7000000080001400000018000180140002006e657464657673696d3000000000000008000e00030000000800150001000000050018"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20005880) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d00, 0x0, 0x15}]}) 277.822543ms ago: executing program 3 (id=1718): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)=0x5c) r1 = socket(0x15, 0x0, 0x1) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0x6a, 0x4080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x8, 0x3, 0x2, 0x9, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0x4}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x44, 0x66, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0x0, 0xf}, {0x0, 0x1}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 166.960488ms ago: executing program 4 (id=1719): syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 166.526495ms ago: executing program 4 (id=1720): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) munlockall() syz_emit_ethernet(0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="f209000040657afba2a9a65c0020c76a5be9c89d5edc9c8aca7f978ef6f4768eaf0b73fb2f1b7c3abf714991aacfd51f07401b4650ed027ba24371104021d62115585acd720b87548256a9"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0xe, 0x3, 0x5, 0x40, 0xdd, "b8b257f372b1ef67f5cee0aebf1bb11c542677", 0x4, 0x400}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000558000/0x4000)=nil, 0x4000}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x81, 0x3, [0x0, 0x2, 0x4]}, &(0x7f0000000180)=0xe) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}, 0x101, 0x0, 0x9, 0x1, 0x80, 0x6, 0x7}, &(0x7f0000000280)=0x9c) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000540)=0x13) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) (async) munlockall() (async) syz_emit_ethernet(0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="f209000040657afba2a9a65c0020c76a5be9c89d5edc9c8aca7f978ef6f4768eaf0b73fb2f1b7c3abf714991aacfd51f07401b4650ed027ba24371104021d62115585acd720b87548256a9"], 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') (async) write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000380), 0xd, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0xe, 0x3, 0x5, 0x40, 0xdd, "b8b257f372b1ef67f5cee0aebf1bb11c542677", 0x4, 0x400}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000558000/0x4000)=nil, 0x4000}}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x2) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x81, 0x3, [0x0, 0x2, 0x4]}, &(0x7f0000000180)=0xe) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}, 0x101, 0x0, 0x9, 0x1, 0x80, 0x6, 0x7}, &(0x7f0000000280)=0x9c) (async) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000540)=0x13) (async) 165.979207ms ago: executing program 3 (id=1721): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) close_range(r0, 0xffffffffffffffff, 0x2) copy_file_range(r0, &(0x7f00000000c0)=0xfffffffffffffff4, r0, 0x0, 0x8, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000100)=[{0x1, 0xffffffff, 0x5, {0x3, 0x5}, 0x3, 0x3ff, 0x7}, {0x8, 0xe, 0x400, {0x4, 0x80000000}, 0x6, 0x80000001, 0xfffffffd}, {0x9af, 0x1, 0xc963a6f, {0x6, 0x8}, 0x1, 0x2, 0x8000}, {0x5, 0x3, 0xffffffff, {0x0, 0x7f}, 0x0, 0x8001, 0x299a}, {0x2, 0x6, 0x9, {0x4, 0x6}, 0x5, 0x4, 0x1}, {0x5, 0x400, 0xa46, {0xff, 0xa}, 0x6, 0x6, 0x7}], 0x6, 0x40, 0x0, 0x9}, {&(0x7f0000000280)=[{0x8, 0x9}, {0x6, 0x7f}, {0x68187bae, 0x101}, {0x9, 0xff}, {0x1ff}], 0x5, 0x10, 0xfffc, 0xeef}, {&(0x7f0000000300)=[0xffffffff, 0x7, 0xcd, 0xff000000000000, 0xe], 0x5, 0x8, 0x9, 0x5}, {&(0x7f0000000340)=[{0x71, 0x2, 0x5, 0xb, 0x3}, {0x1, 0x2, 0x200, 0x8, 0x4}, {0x9, 0x1, 0x2, 0x7f, 0x1000}, {0x4, 0x9, 0x4, 0x3, 0x2}, {0xac, 0x80000000, 0x7ff, 0x4, 0x3}, {0x3, 0xfffffffffffffffd, 0x50d, 0x5, 0x8}, {0xffffffffffffffff, 0x80, 0x8, 0x189a, 0x9}, {0x8, 0x1000, 0x5, 0x80, 0x8}], 0x8, 0x28, 0x9}, {&(0x7f0000000480)=[0x0, 0x800], 0x2, 0x8, 0x3, 0x9}}) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)="c72641e501183d4f27bf4c8be364bedf5b7a28c9a97bcad195dfd24811f9ab00f6e701a078910c0f11bdef57ba05d307b32355ae3e743b8485b4aa2a23d12a75469dad6e9dec1ed73f5ccc7f2fa36baf8d4b7bff1086880dbc4818cfb708fc7f998185e63c2939a8437aaab36adafcbc189f1e768c45a3fa33e10a0ac7451f1c415864530d48ee58291014bfae0b76ecebfd8cf055", 0x95}], 0x1) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000680)={{r3, r4+60000000}, {0x77359400}}, &(0x7f00000006c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000700)={r1}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000840)={&(0x7f0000000780)=[{0xd, 0x4, 0x4, 0xfffffffffffffc75, 0x3ff}, {0x8, 0x9, 0x7, 0x9, 0x424e}, {0x8, 0xfff, 0x4e7, 0x5, 0x20}, {0x5, 0x4, 0x0, 0x1, 0xf6}], 0x4, 0x28, 0x2}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000d00)={{r2, &(0x7f0000000880)=')\x00', 0x0, &(0x7f00000008c0)={@_ha_fsid={[0xffff, 0x2a]}, {0xc, 0x5, 0xffff, 0x8d}}, 0x5, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0xffffff01}, 0x3, &(0x7f0000000c80)=[{0x3, 0x7, &(0x7f0000000980)='/selinux/policy\x00', &(0x7f00000009c0)="f8d611dcdb68d4c51cf286c0593955190756698bbeaaed1ce96b0fa04306b8bf60c213541dacd91939c8fc3e9a3377fcf112b55787a0e852eace32a7381a552363d78d5e99f26d660c3962332a02f2887b8f581efa4f82884a5c84f422408787ca30ca975bcb4d1f483ed74106479ae8b575d0044f5ec8194b25807180d00b3887427d722bb9b96f30e91418513c696049e9d2943d2e888e907afcf3bd90ff2b68058873f35e0115cf466b0157c9e9cc67876f59db6114119e73759b93f076b44335968293b31fc984b107b00557369278f93cbd5d568485c19e1494cc5260", 0xdf, 0x2}, {0x1, 0x7, &(0x7f0000000ac0)='/selinux/checkreqprot\x00', &(0x7f0000000b00)="03abeaceeb174fa843e6ad3b8fa85dbc8072927117e6e7a0a3f4d64ae42b4f9b41efe193e364545f9e786cfd8372fe5d81001cf698a6aa348989852c89aab3f341cc1e1c62ccf65a922d504ce322cf25022775059316d43ee75a23fd5d218a27abc4b41192f0aa30c664a1ab536813b9bfd8fceb1aef943be302cd0182348a68b09a38d2d4e470feb7a6a67ffddf2d6b0f7f5e636f7e7985493394bc013785072326b8fdd45ee41a0d07ef70bc181960cb9917759710eba3c60f6bb80219e9eac3e0e4259d283f825edf3a15c87064e93481f1d3776aad0d7b31fef371ebc95fa98f3ee6cd7a4d", 0xe7, 0x8}, {0x1, 0x6, &(0x7f0000000c00)='/selinux/policy\x00', &(0x7f0000000c40)="1cacbb4c146e584cb09f9e73ff72c1", 0xf, 0x10}]}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000d80)={0x0, 0x3, 0x2, 0x4, 0x0, [], [0x101, 0x8, 0x4, 0x826], [0x6, 0xc8, 0x5, 0x1], [0x1, 0x0, 0x2, 0x2]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r0, 0xc0106440, &(0x7f0000000e40)={0x3, 0x7fffffff, &(0x7f0000000e00)}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000e80)=0x7, 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000ec0)={0x0, 0x0, r0}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000f00)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000f40)={0x0, 0x9, 0x9}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001040)={{{0xf, 0x1}}, 0xaa, 0x8001, &(0x7f0000000f80)="37d733a1ba0c99655dabcfb673a700afca686cdca01bd823519de24baab1b56eb96a7419100fb17a9d13116a37905b61d8f8f969ae5b55ef523d37c3751225c5d0cd370428799e3f3ef4cdeba33f9d6fb97be8bf8b2228e9900f3fbb918814c368fcd6092a719ad1fb5f9ebad223456cb515466b5f822f1dc7e8c9b6b2d725451142ec6d9df28ed75b511a1c83813ab7ab152485404cfecaf06a3f412e4c836b6189cfafd07e6d35d61a"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000010c0)={0xfff, 0x4, 0x900000, 0x6, 0x0}, &(0x7f0000001100)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000001140)={r8, 0x8ffa}, &(0x7f0000001180)=0x8) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f00000011c0)) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000001200), &(0x7f0000001240)={0x0, 0xfb, 0x58, 0x7, 0x8, "da9924b498e27c1d90ef60e8e01f4adb", "ed767ab73aec5dc28e09e9d88a056c466e3d57e95cef5b30fb14362943fdee3d883e898a351a049488c8cb8ad32b0c0a9fd7d1f7aabc12f2f5ebcc11132e79653747e7"}, 0x58, 0x1) pipe2(&(0x7f00000012c0), 0x80) 68.120907ms ago: executing program 3 (id=1722): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000200)={0x7, 0x46, 0x7, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) 67.567834ms ago: executing program 3 (id=1723): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000200)=""/57, 0x39, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000080)=""/209, 0xd1, &(0x7f0000000240)=""/15, 0x3, 0x1}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x1, 0x7}) 66.368378ms ago: executing program 5 (id=1724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101180) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20008090) r4 = syz_open_dev$media(&(0x7f00000011c0), 0x7, 0x20002) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000014c0)={0x80000000, &(0x7f0000001400), 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x8, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000104000000000000000000000000831043c8ae20545713f5be636ae3ecae6e5281d6", @ANYRES32=0x0, @ANYBLOB="0131010000000000200012800b00010065727370616e000010000280040012000800150060bb0200"], 0x40}}, 0x0) 9.475365ms ago: executing program 3 (id=1725): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r1, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES64=r2], 0x2c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r1) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000a40)={0xd2b, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000700)=""/208, 0xd0}, {&(0x7f0000000a80)=""/204, 0xcc}, {&(0x7f0000000880)=""/205, 0xcd}], &(0x7f0000000a00)=[0x3, 0x4, 0xb3da, 0x2, 0x10], 0x9}, 0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000080)) 9.24796ms ago: executing program 5 (id=1726): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x258, 0x2e0, 0x2e0, 0x258, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xff], [0xff000000, 0xff, 0x4e122ccdf6af8caa, 0xff000000], 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x32, 0xb, 0x4}, 0x300, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x8, 0x7}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) r2 = accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000006ec0)={'nr0\x00', 0x1, 0x9}) 0s ago: executing program 4 (id=1727): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r1, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000005a40)=""/4091, 0xffb}], 0x1}, 0x5}], 0x1, 0x62, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x89101) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6(0xa, 0x800, 0x21d4909d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, 0x0) r4 = syz_clone(0x2028000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) process_vm_readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/88, 0x58}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/182, 0xb6}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001100)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c086}, 0x800c0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4) 0s ago: executing program 5 (id=1728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0x7}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000440)={0x7, 0x0, 0x1, 0xc, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000001000)={{@hyper, 0xe233}, {@hyper, 0x800000}, 0x400, "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"}, 0x418, 0x9}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r3, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x50, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '|q'}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x48c, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000140)={r4, 0xc4dcf56f9ce40f81, 0x80000000, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) kernel console output (not intermixed with test programs): e0: port 2(bridge_slave_1) entered disabled state [ 130.880080][ T46] bridge_slave_0: left allmulticast mode [ 130.881957][ T46] bridge_slave_0: left promiscuous mode [ 130.884496][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.904035][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 130.904048][ T40] audit: type=1400 audit(1777912008.769:747): avc: denied { write } for pid=9032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.949063][ T40] audit: type=1400 audit(1777912008.809:748): avc: denied { write } for pid=9035 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.176302][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.183917][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.189030][ T46] bond0 (unregistering): Released all slaves [ 131.197159][ T46] bond1 (unregistering): Released all slaves [ 131.219959][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 131.264147][ T40] audit: type=1400 audit(1777912009.129:749): avc: denied { write } for pid=9041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.301847][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.801'. [ 131.323505][ T46] tipc: Left network mode [ 131.341411][ T9047] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 131.345019][ T9047] overlayfs: missing 'lowerdir' [ 131.349666][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.801'. [ 131.353629][ T40] audit: type=1400 audit(1777912009.209:750): avc: denied { write } for pid=9048 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.445898][ T9055] sctp: [Deprecated]: syz.1.803 (pid 9055) Use of int in maxseg socket option. [ 131.445898][ T9055] Use struct sctp_assoc_value instead [ 131.482344][ T40] audit: type=1400 audit(1777912009.339:751): avc: denied { write } for pid=9058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.494983][ T58] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 131.532391][ T40] audit: type=1400 audit(1777912009.389:752): avc: denied { write } for pid=9068 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.537563][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.545388][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.548580][ T9013] bridge_slave_0: entered allmulticast mode [ 131.552355][ T9013] bridge_slave_0: entered promiscuous mode [ 131.566163][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.569095][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.572210][ T9013] bridge_slave_1: entered allmulticast mode [ 131.581122][ T9013] bridge_slave_1: entered promiscuous mode [ 131.592610][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7 [ 131.618693][ T40] audit: type=1400 audit(1777912009.479:753): avc: denied { map } for pid=9072 comm="syz.4.806" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 131.628448][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.633544][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.653396][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 131.656565][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.660781][ T58] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.664044][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.666768][ T40] audit: type=1400 audit(1777912009.529:754): avc: denied { write } for pid=9074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.674684][ T9077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 131.682022][ T58] usb 8-1: config 0 descriptor?? [ 131.692900][ T9013] team0: Port device team_slave_0 added [ 131.705219][ T9013] team0: Port device team_slave_1 added [ 131.716011][ T46] hsr_slave_0: left promiscuous mode [ 131.719168][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.719715][ T9085] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.722337][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.731823][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.735804][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.748812][ T46] veth1_macvtap: left promiscuous mode [ 131.751281][ T40] audit: type=1400 audit(1777912009.609:755): avc: denied { write } for pid=9086 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.751312][ T46] veth0_macvtap: left promiscuous mode [ 131.765849][ T46] veth1_vlan: left promiscuous mode [ 131.768157][ T46] veth0_vlan: left promiscuous mode [ 131.902431][ T58] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.963850][ T46] team0 (unregistering): Port device team_slave_1 removed [ 131.971720][ T46] team0 (unregistering): Port device team_slave_0 removed [ 132.065668][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.068450][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.079113][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.080885][ T9095] netlink: 'syz.1.810': attribute type 7 has an invalid length. [ 132.087769][ T40] audit: type=1400 audit(1777912009.949:756): avc: denied { name_bind } for pid=9094 comm="syz.1.810" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.091947][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.097365][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.105858][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.116365][ T9] usb 8-1: USB disconnect, device number 16 [ 132.116422][ C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 132.169681][ T9105] xt_ipcomp: unknown flags 1D [ 132.180229][ T9013] hsr_slave_0: entered promiscuous mode [ 132.182572][ T9013] hsr_slave_1: entered promiscuous mode [ 132.242256][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.813'. [ 132.248353][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 132.251229][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.813'. [ 132.266189][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8 [ 132.350461][ T9123] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 132.353667][ T9123] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 132.356770][ T9123] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 132.360416][ T9123] overlayfs: missing 'lowerdir' [ 132.451517][ T9013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.457819][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.460730][ T9013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.467984][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.470907][ T9013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.475734][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.478561][ T9013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.482424][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.486336][ T46] IPVS: stop unused estimator thread 0... [ 132.494992][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9 [ 132.528413][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.538544][ T9013] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.545926][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.548357][ T6865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.555108][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.557420][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.643823][ T5737] Bluetooth: hci1: command tx timeout [ 132.855777][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.015996][ T9013] veth0_vlan: entered promiscuous mode [ 133.025491][ T9013] veth1_vlan: entered promiscuous mode [ 133.054929][ T9013] veth0_macvtap: entered promiscuous mode [ 133.061262][ T9013] veth1_macvtap: entered promiscuous mode [ 133.075905][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.086102][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.096952][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.100887][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.107100][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.111807][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.260368][ T6856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.267650][ T6856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.291359][ T6874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.295004][ T6874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.361751][ T9197] xt_hashlimit: size too large, truncated to 1048576 [ 133.388858][ T9195] kvm: pic: single mode not supported [ 133.500716][ T9209] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 133.505860][ T1476] IPVS: starting estimator thread 0... [ 133.605641][ T9215] IPVS: using max 45 ests per chain, 108000 per kthread [ 133.609871][ T9231] loop4: detected capacity change from 0 to 7 [ 133.621124][ T9231] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 133.622887][ T9231] loop4: partition table partially beyond EOD, truncated [ 133.625941][ T9231] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 133.645859][ T5141] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 133.647782][ T5141] loop4: partition table partially beyond EOD, truncated [ 133.651909][ T5141] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 133.710895][ T9248] input: syz0 as /devices/virtual/input/input15 [ 133.745205][ T6922] udevd[6922]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 133.765680][ T6922] udevd[6922]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.230719][ T9307] netlink: 'syz.5.857': attribute type 1 has an invalid length. [ 134.450956][ T9320] binder: 9319:9320 ioctl 4c01 0 returned -22 [ 134.651667][ T9320] syz.5.861 (9320): drop_caches: 2 [ 134.723118][ T5737] Bluetooth: hci1: command tx timeout [ 135.071231][ T9342] loop3: detected capacity change from 0 to 7 [ 135.075635][ C2] blk_print_req_error: 11 callbacks suppressed [ 135.075645][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.080266][ T9344] binder: 9343:9344 ioctl c0306201 200000000080 returned -14 [ 135.080576][ C2] buffer_io_error: 10 callbacks suppressed [ 135.080584][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.088390][ T9344] binder: 9343:9344 ioctl c0306201 2000000003c0 returned -14 [ 135.089738][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.091051][ T9344] binder: 9343:9344 unknown command 0 [ 135.093710][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.095574][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.099294][ T9344] binder: 9343:9344 ioctl c0306201 200000000000 returned -22 [ 135.101208][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.101460][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.109276][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.112077][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.115139][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.117657][ T9344] program syz.1.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.118004][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.123609][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.127426][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.130300][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.132882][ T9342] ldm_validate_partition_table(): Disk read failed. [ 135.174882][ T9342] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.181097][ T9342] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.184844][ T9342] Buffer I/O error on dev loop3, logical block 0, async page read [ 135.188249][ T9342] Dev loop3: unable to read RDB block 0 [ 135.190997][ T9342] loop3: unable to read partition table [ 135.193491][ T9342] loop3: partition table beyond EOD, truncated [ 135.196349][ T9342] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 135.403131][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.553069][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 135.558495][ T34] usb 6-1: config 2 has an invalid interface number: 76 but max is 0 [ 135.562698][ T34] usb 6-1: config 2 has no interface number 0 [ 135.565425][ T34] usb 6-1: config 2 interface 76 has no altsetting 0 [ 135.569245][ T34] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=49.db [ 135.572299][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.575358][ T34] usb 6-1: Product: syz [ 135.576746][ T34] usb 6-1: Manufacturer: syz [ 135.578320][ T34] usb 6-1: SerialNumber: syz [ 135.621445][ T9370] fuse: Bad value for 'group_id' [ 135.623869][ T9370] fuse: Bad value for 'group_id' [ 135.787422][ T1476] IPVS: starting estimator thread 0... [ 135.796518][ T34] usb_ehset_test 6-1:2.76: probe with driver usb_ehset_test failed with error -32 [ 135.800884][ T34] usb 6-1: USB disconnect, device number 7 [ 135.873288][ T9378] IPVS: using max 45 ests per chain, 108000 per kthread [ 136.018242][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 136.018261][ T40] audit: type=1400 audit(1777912013.879:784): avc: denied { audit_control } for pid=9389 comm="syz.3.882" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 136.023644][ T9390] __nla_validate_parse: 10 callbacks suppressed [ 136.023659][ T9390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 136.041331][ T9391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 136.115292][ T9400] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 136.118405][ T9400] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 136.122221][ T9400] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 136.126536][ T9400] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 136.129623][ T9399] 9p: Bad value for 'rfdno' [ 136.450477][ T9416] veth1_vlan: Device is already in use. [ 136.453809][ T9415] veth1_vlan: Device is already in use. [ 136.519241][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 136.626469][ T9421] netlink: 'syz.3.892': attribute type 4 has an invalid length. [ 136.728875][ T9421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=9421 comm=syz.3.892 [ 136.797410][ T9431] syzkaller0: entered promiscuous mode [ 136.799372][ T9431] syzkaller0: entered allmulticast mode [ 136.805299][ T5737] Bluetooth: hci1: command tx timeout [ 136.817735][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 136.822408][ T9431] program syz.4.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.865844][ T9439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41576 sclass=netlink_route_socket pid=9439 comm=syz.4.895 [ 136.870993][ T9439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.873673][ T9439] batadv_slave_0: entered promiscuous mode [ 136.998293][ T9449] netlink: 276 bytes leftover after parsing attributes in process `syz.5.900'. [ 136.999764][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 137.037893][ T9448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9448 comm=syz.3.899 [ 137.038799][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.902'. [ 137.185088][ T9465] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 137.207328][ T9465] bond1: entered promiscuous mode [ 137.209811][ T9465] bond1: entered allmulticast mode [ 137.211833][ T9465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.227101][ T9465] erspan1: entered allmulticast mode [ 137.232060][ T9465] bond1: (slave erspan1): making interface the new active one [ 137.235381][ T9465] erspan1: entered promiscuous mode [ 137.238794][ T9465] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 137.321818][ T9478] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 137.324958][ T9478] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 137.373031][ T1004] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 137.390911][ T9482] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 137.520380][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 137.524657][ T1004] usb 10-1: config 0 has no interfaces? [ 137.526747][ T1004] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 137.526762][ T1004] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.540857][ T1004] usb 10-1: config 0 descriptor?? [ 137.551909][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 137.595146][ T40] audit: type=1400 audit(1777912015.459:785): avc: denied { execute } for pid=9497 comm="syz.4.914" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.633624][ T9504] netlink: 'syz.3.917': attribute type 178 has an invalid length. [ 137.637606][ T9504] netlink: 'syz.3.917': attribute type 178 has an invalid length. [ 137.641134][ T9504] netlink: 'syz.3.917': attribute type 178 has an invalid length. [ 137.646159][ T9504] netlink: 'syz.3.917': attribute type 178 has an invalid length. [ 137.649708][ T9504] netlink: 'syz.3.917': attribute type 178 has an invalid length. [ 137.653228][ T9504] netlink: 'syz.3.917': attribute type 178 has an invalid length. [ 137.852607][ T5818] usb 10-1: USB disconnect, device number 2 [ 137.854767][ T9519] Attempt to restore checkpoint with obsolete wellknown handles [ 137.864261][ T40] audit: type=1400 audit(1777912015.729:786): avc: denied { getopt } for pid=9525 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.872134][ T40] audit: type=1400 audit(1777912015.729:787): avc: denied { ioctl } for pid=9518 comm="syz.1.920" path="socket:[33221]" dev="sockfs" ino=33221 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.014109][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.285885][ T9550] netlink: 124 bytes leftover after parsing attributes in process `syz.1.930'. [ 138.290683][ T9557] binder: 9556:9557 ioctl c0306201 200000000080 returned -14 [ 138.294688][ T9557] binder: 9556:9557 ioctl c0306201 2000000003c0 returned -14 [ 138.297960][ T40] audit: type=1400 audit(1777912016.159:788): avc: denied { call } for pid=9556 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.306440][ T40] audit: type=1400 audit(1777912016.159:789): avc: denied { transfer } for pid=9556 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.417895][ T9559] evm: overlay not supported [ 138.520093][ T9581] syz_tun: left allmulticast mode [ 138.522291][ T9581] syz_tun: left promiscuous mode [ 138.524551][ T9581] bridge0: port 3(syz_tun) entered disabled state [ 138.530379][ T9581] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 138.713333][ T9601] sctp: [Deprecated]: syz.1.944 (pid 9601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.713333][ T9601] Use struct sctp_sack_info instead [ 138.736813][ T9601] qnx4: no qnx4 filesystem (no root dir). [ 138.784811][ T9603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9603 comm=syz.3.945 [ 138.802408][ T40] audit: type=1400 audit(1777912016.659:790): avc: denied { shutdown } for pid=9604 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.809914][ T40] audit: type=1400 audit(1777912016.669:791): avc: denied { getattr } for pid=9604 comm="syz.4.946" name="/" dev="9p" ino=72876131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 138.843215][ T6635] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 138.884247][ T5737] Bluetooth: hci1: command tx timeout [ 139.003307][ T6635] usb 10-1: Using ep0 maxpacket: 16 [ 139.007182][ T6635] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.008584][ T40] audit: type=1400 audit(1777912016.869:792): avc: denied { read } for pid=9620 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.011222][ T6635] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.022760][ T6635] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.0e [ 139.026135][ T6635] usb 10-1: New USB device strings: Mfr=1, Product=212, SerialNumber=151 [ 139.029002][ T6635] usb 10-1: Product: syz [ 139.030444][ T6635] usb 10-1: Manufacturer: syz [ 139.032062][ T6635] usb 10-1: SerialNumber: syz [ 139.039100][ T6635] r8152-cfgselector 10-1: Unknown version 0x0000 [ 139.041252][ T6635] r8152-cfgselector 10-1: config 0 descriptor?? [ 139.057972][ T9623] loop2: detected capacity change from 0 to 7 [ 139.062248][ T9623] Dev loop2: unable to read RDB block 7 [ 139.065892][ T9623] loop2: unable to read partition table [ 139.067891][ T9623] loop2: partition table beyond EOD, truncated [ 139.069983][ T9623] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.139243][ T40] audit: type=1400 audit(1777912016.999:793): avc: denied { setopt } for pid=9627 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.207703][ T9637] bond2: entered promiscuous mode [ 139.210285][ T9637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.247573][ T6635] r8152-cfgselector 10-1: USB disconnect, device number 3 [ 139.265611][ T9640] tmpfs: Bad value for 'mpol' [ 139.355652][ T9650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9650 comm=syz.4.960 [ 139.542117][ T9660] pvfs2: Unknown parameter './cgroup/syz0' [ 139.720103][ T9684] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1iÒûm÷]7ä(äaŠàó H˜] ³¹¿ÃÇ [ 139.817062][ T9691] usb usb9: usbfs: process 9691 (syz.5.972) did not claim interface 0 before use [ 139.831799][ T9691] program syz.5.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.849822][ T9682] overlayfs: failed to resolve './file0': -2 [ 139.875664][ T9691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9691 comm=syz.5.972 [ 139.888875][ T9698] xt_limit: Overflow, try lower: 271964/0 [ 139.950471][ T9702] bond1: entered promiscuous mode [ 140.239898][ T9726] random: crng reseeded on system resumption [ 140.388331][ T9744] xt_hashlimit: size too large, truncated to 1048576 [ 140.498740][ T9750] atomic_op ffff88805c96c198 conn xmit_atomic 0000000000000000 [ 140.870554][ T9771] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 140.878940][ T9772] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 141.022079][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.029680][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.034927][ T9778] __nla_validate_parse: 6 callbacks suppressed [ 141.034937][ T9778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.995'. [ 141.041856][ T9778] tmpfs: Bad value for 'mpol' [ 141.183453][ T843] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 141.302742][ T9793] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 141.343104][ T843] usb 9-1: Using ep0 maxpacket: 8 [ 141.348483][ T843] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.352613][ T843] usb 9-1: config 179 has no interface number 0 [ 141.355036][ T843] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.358850][ T843] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.364242][ T843] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.368290][ T843] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.370870][ T9796] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1000'. [ 141.372685][ T843] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.372723][ T843] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.372738][ T843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.376514][ T5817] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 141.399312][ T9769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.409009][ T9796] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 141.462789][ T9804] program syz.5.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.522669][ T9803] support for cryptoloop has been removed. Use dm-crypt instead. [ 141.635415][ T843] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input19 [ 141.815460][ T843] usb 9-1: USB disconnect, device number 2 [ 141.817492][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.817516][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 142.373357][ T9820] ip6t_rpfilter: unknown options [ 142.445883][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 142.445905][ T40] audit: type=1400 audit(1777912020.309:802): avc: denied { mounton } for pid=9823 comm="syz.4.1010" path="/file0" dev="ramfs" ino=35808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 142.460706][ T9824] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.460755][ T9824] overlayfs: failed to set xattr on upper [ 142.460762][ T9824] overlayfs: ...falling back to redirect_dir=nofollow. [ 142.460770][ T9824] overlayfs: ...falling back to index=off. [ 142.460778][ T9824] overlayfs: ...falling back to uuid=null. [ 142.475499][ T40] audit: type=1400 audit(1777912020.319:803): avc: denied { ioctl } for pid=9821 comm="syz.3.1009" path="socket:[34699]" dev="sockfs" ino=34699 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.477966][ T9824] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 142.592244][ T9837] syz_tun: entered allmulticast mode [ 142.614636][ T9835] syz_tun: left allmulticast mode [ 142.751853][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 142.916855][ T9861] validate_nla: 32 callbacks suppressed [ 142.917009][ T9861] netlink: 'syz.5.1022': attribute type 1 has an invalid length. [ 142.942494][ T9861] bond2: entered promiscuous mode [ 142.945441][ T9861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.967723][ T9861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.970360][ T9861] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 142.974432][ T9861] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 142.984157][ T9861] bond2: (slave xfrm1): making interface the new active one [ 142.987491][ T9861] xfrm1: entered promiscuous mode [ 142.991377][ T9861] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 143.257136][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 143.478937][ T40] audit: type=1400 audit(1777912021.339:804): avc: denied { write } for pid=9885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.586104][ T40] audit: type=1400 audit(1777912021.449:805): avc: denied { write } for pid=9892 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.722784][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1033'. [ 143.767080][ T40] audit: type=1400 audit(1777912021.629:806): avc: denied { write } for pid=9905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.877456][ T40] audit: type=1400 audit(1777912021.729:807): avc: denied { write } for pid=9916 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.888044][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1036'. [ 143.896564][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1036'. [ 144.032672][ T40] audit: type=1400 audit(1777912021.889:808): avc: denied { setattr } for pid=9932 comm="syz.4.1040" name="RAWv6" dev="sockfs" ino=36631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.072586][ T40] audit: type=1400 audit(1777912021.929:809): avc: denied { write } for pid=9931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.161802][ T40] audit: type=1400 audit(1777912022.019:810): avc: denied { write } for pid=9946 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.263100][ T1476] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 144.309685][ T9960] IPv6: Can't replace route, no match found [ 144.410788][ T9965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1050'. [ 144.415953][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 144.426970][ T9965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.429628][ T9965] team0: Device macvlan2 is already an upper device of the team interface [ 144.443128][ T1476] usb 6-1: Using ep0 maxpacket: 8 [ 144.446299][ T1476] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.451495][ T1476] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.455302][ T1476] usb 6-1: config 0 interface 0 has no altsetting 0 [ 144.457566][ T1476] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 144.460659][ T1476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.465604][ T1476] usb 6-1: config 0 descriptor?? [ 144.473069][ T1004] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 144.491587][ T9966] nvme_fabrics: missing parameter 'transport=%s' [ 144.494848][ T9966] nvme_fabrics: missing parameter 'nqn=%s' [ 144.498269][ T9966] nvme_fabrics: unknown parameter or missing value 'ELFü¥~' in ctrl creation request [ 144.586173][ T9970] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 144.622495][ T9976] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.635655][ T1004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.640640][ T1004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.646271][ T40] audit: type=1400 audit(1777912022.509:811): avc: denied { write } for pid=9974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.647038][ T1004] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 144.673144][ T1004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.684984][ T1004] usb 8-1: config 0 descriptor?? [ 144.825773][ T1476] usbhid 6-1:0.0: can't add hid device: -71 [ 144.827916][ T1476] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 144.840131][ T1476] usb 6-1: USB disconnect, device number 8 [ 144.943105][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 145.094711][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 145.113098][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 145.117112][ T10] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 145.120814][ T10] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 145.124393][ T1004] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 145.124581][ T10] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 145.132521][ T10] usb 9-1: config 250 has no interface number 0 [ 145.135674][ T10] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 145.141071][ T10] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 145.143997][ T6635] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 145.146315][ T10] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.153416][ T10] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 145.157980][ T10] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 145.165513][ T10] usb 9-1: config 250 interface 228 has no altsetting 0 [ 145.170380][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 145.175196][ T10] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 145.179174][ T10] usb 9-1: Product: syz [ 145.181060][ T10] usb 9-1: SerialNumber: syz [ 145.193705][ T10] hub 9-1:250.228: bad descriptor, ignoring hub [ 145.196527][ T10] hub 9-1:250.228: probe with driver hub failed with error -5 [ 145.212881][T10004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.215492][T10004] IPv6: NLM_F_CREATE should be set when creating new route [ 145.218333][T10004] IPv6: NLM_F_CREATE should be set when creating new route [ 145.221099][T10004] IPv6: NLM_F_CREATE should be set when creating new route [ 145.226401][T10004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.303195][T10006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10006 comm=syz.1.1060 [ 145.305830][ T6635] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 145.311463][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.317110][ T6635] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.322292][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.327680][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.333346][ T6635] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 145.336729][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.341339][ T6635] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.346842][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.351744][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.351831][T10011] geneve1: entered allmulticast mode [ 145.357059][ T6635] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 145.361381][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.366144][ T6635] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.371397][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.376762][ T6635] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.384193][ T6635] usb 10-1: string descriptor 0 read error: -22 [ 145.387324][ T6635] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.391151][ T6635] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.393750][ T10] usblp 9-1:250.228: usblp1: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 145.416453][ T6635] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 145.664380][ T10] usb 10-1: USB disconnect, device number 4 [ 145.728034][ T5093] Bluetooth: hci1: unexpected event for opcode 0x042f [ 145.918377][ T6856] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 145.967520][ T1040] usb 9-1: USB disconnect, device number 3 [ 145.971377][ T1040] usblp1: removed [ 146.264829][ T1040] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 146.406143][ T1040] usb 9-1: device descriptor read/64, error -71 [ 146.434219][T10047] __nla_validate_parse: 1 callbacks suppressed [ 146.434233][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1070'. [ 146.653158][ T1040] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 146.783159][ T1040] usb 9-1: device descriptor read/64, error -71 [ 146.893626][ T1040] usb usb9-port1: attempt power cycle [ 147.155977][ T1004] Process accounting resumed [ 147.225033][ T6635] usb 8-1: USB disconnect, device number 17 [ 147.253183][ T1040] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 147.273802][ T1040] usb 9-1: device descriptor read/8, error -71 [ 147.276631][T10073] loop5: detected capacity change from 0 to 7 [ 147.296568][T10073] Dev loop5: unable to read RDB block 7 [ 147.300017][T10073] loop5: unable to read partition table [ 147.302025][T10073] loop5: partition table beyond EOD, truncated [ 147.308122][T10073] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.354300][T10080] pimreg: entered allmulticast mode [ 147.513226][ T1040] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 147.544469][ T1040] usb 9-1: device descriptor read/8, error -71 [ 147.571047][T10097] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 147.575637][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1086'. [ 147.606399][T10097] bond4: entered promiscuous mode [ 147.608467][T10097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.611475][T10098] bond4: entered allmulticast mode [ 147.623588][T10099] bond4: (slave bridge3): making interface the new active one [ 147.626563][T10099] bridge3: entered promiscuous mode [ 147.629314][T10099] bridge3: entered allmulticast mode [ 147.634025][T10099] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 147.645388][T10102] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 147.655519][ T1040] usb usb9-port1: unable to enumerate USB device [ 147.752871][T10108] syzkaller0: entered promiscuous mode [ 147.756774][T10108] syzkaller0: entered allmulticast mode [ 147.925498][T10117] cgroup: subsys name conflicts with all [ 147.929044][T10118] cgroup: subsys name conflicts with all [ 148.012335][T10120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.110099][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 148.110111][ T40] audit: type=1400 audit(1777912025.969:817): avc: denied { write } for pid=10124 comm="syz.4.1096" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 148.146845][T10130] kvm: Disabled LAPIC found during irq injection [ 148.270103][ T40] audit: type=1400 audit(1777912026.129:818): avc: denied { kexec_image_load } for pid=10137 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 148.399280][T10141] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.437298][T10140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.528494][T10140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.620723][T10140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.721866][T10140] netdevsim netdevsim4 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.850562][ T6865] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.867066][ T6865] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.879400][ T6865] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.897201][ T6865] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.067120][T10154] overlayfs: failed to clone upperpath [ 149.093303][T10157] binder: 10156:10157 ioctl c0306201 200000000640 returned -22 [ 149.129095][T10159] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 149.202842][T10170] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1109'. [ 149.208887][T10168] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 149.226967][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.230188][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.248895][T10170] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1109'. [ 149.253334][T10168] syzkaller0: entered promiscuous mode [ 149.255908][T10168] syzkaller0: entered allmulticast mode [ 149.378618][T10177] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 149.381231][T10177] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1112'. [ 149.387021][T10177] NCSI netlink: No device for ifindex 0 [ 149.393234][ T40] audit: type=1804 audit(1777912027.249:819): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1112" name="/newroot/110/file0" dev="tmpfs" ino=613 res=1 errno=0 [ 149.472566][T10175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10175 comm=syz.5.1111 [ 149.504089][T10186] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1115'. [ 149.585583][ T40] audit: type=1400 audit(1777912027.449:820): avc: denied { read } for pid=10185 comm="syz.3.1115" path="socket:[39435]" dev="sockfs" ino=39435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.591478][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1111'. [ 149.613285][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1111'. [ 149.642427][T10186] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 149.678035][ T40] audit: type=1400 audit(1777912027.539:821): avc: denied { ioctl } for pid=10198 comm="syz.5.1117" path="socket:[37493]" dev="sockfs" ino=37493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.793314][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 149.944395][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.948799][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.963012][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.967382][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.970441][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.984497][ T34] usb 9-1: config 0 descriptor?? [ 150.237457][ T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 150.254309][ T34] usb 9-1: USB disconnect, device number 8 [ 150.290091][T10222] fido_id[10222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory [ 150.885345][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 150.988732][ T5093] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 151.113035][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.135422][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 151.264206][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 151.269473][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.276039][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.280621][ T34] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 151.283793][ T34] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 151.286541][ T34] usb 6-1: Manufacturer: syz [ 151.294675][ T34] usb 6-1: config 0 descriptor?? [ 151.565261][T10287] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 151.567576][T10287] syzkaller1: owner set to 805 [ 151.669370][T10293] __nla_validate_parse: 1 callbacks suppressed [ 151.669427][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 151.705692][T10262] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 151.722777][ T34] input: syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:041E:3100.0006/input/input21 [ 151.761217][ T40] audit: type=1400 audit(1777912029.619:822): avc: denied { map } for pid=10299 comm="syz.3.1150" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 151.804253][ T34] creative-sb0540 0003:041E:3100.0006: input,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 151.817939][ T40] audit: type=1400 audit(1777912029.679:823): avc: denied { listen } for pid=10303 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.846541][T10305] netlink: 'syz.3.1152': attribute type 32 has an invalid length. [ 151.942570][ T6635] usb 6-1: USB disconnect, device number 9 [ 152.019203][T10324] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.024136][T10324] overlayfs: failed to set xattr on upper [ 152.026101][T10324] overlayfs: ...falling back to redirect_dir=nofollow. [ 152.028422][T10324] overlayfs: ...falling back to index=off. [ 152.030812][T10324] overlayfs: ...falling back to uuid=null. [ 152.036045][T10324] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 152.040686][T10324] overlayfs: maximum fs stacking depth exceeded [ 152.272471][ T40] audit: type=1400 audit(1777912030.129:824): avc: denied { mount } for pid=10335 comm="syz.3.1160" name="/" dev="pstore" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 152.313082][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 152.429687][T10349] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 152.463794][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 152.467050][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 152.471935][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 152.475571][ T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 152.478240][ T9] usb 9-1: Product: syz [ 152.479595][ T9] usb 9-1: Manufacturer: syz [ 152.481115][ T9] usb 9-1: SerialNumber: syz [ 152.487591][ T9] usb 9-1: config 0 descriptor?? [ 152.489807][T10326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.496602][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 152.498826][T10360] xt_hashlimit: size too large, truncated to 1048576 [ 152.501372][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 152.536134][T10361] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1167'. [ 152.554917][T10370] bdev: Unknown parameter 'o2i0c ' [ 152.573531][T10373] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 152.631767][T10378] bridge0: port 3(syz_tun) entered blocking state [ 152.634577][T10378] bridge0: port 3(syz_tun) entered disabled state [ 152.638318][T10378] syz_tun: entered allmulticast mode [ 152.643520][T10378] syz_tun: entered promiscuous mode [ 152.748725][ T40] audit: type=1400 audit(1777912030.609:825): avc: denied { setopt } for pid=10389 comm="syz.3.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 152.760893][ T843] kernel read not supported for file [fscontext] (pid: 843 comm: kworker/2:2) [ 152.790885][T10404] fuse: Bad value for 'fd' [ 152.792840][T10404] fuse: fd is not a fuse device [ 152.807471][ T40] audit: type=1400 audit(1777912030.669:826): avc: denied { ioctl } for pid=10408 comm="syz.3.1176" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 152.823469][ T1004] usb 9-1: USB disconnect, device number 9 [ 152.881778][T10421] tmpfs: Bad value for 'mpol' [ 152.885986][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 152.889319][T10421] netlink: 'syz.3.1180': attribute type 6 has an invalid length. [ 152.892042][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 152.895922][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 152.899141][T10421] netlink: 'syz.3.1180': attribute type 6 has an invalid length. [ 152.901785][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 152.939593][T10426] overlayfs: failed to clone upperpath [ 153.117215][T10426] fuse: fd is not a fuse device [ 153.255166][T10431] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 153.510589][T10437] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1185'. [ 153.516565][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1185'. [ 153.521387][T10437] tipc: Started in network mode [ 153.523750][T10437] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 153.527319][T10437] tipc: Enabling of bearer rejected, failed to enable media [ 153.652121][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1188'. [ 153.709889][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.712719][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.821236][T10439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.976428][ T6856] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.980218][ T6856] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.983154][ T6856] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.986014][ T6856] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.050653][T10474] fuse: fd is not a fuse device [ 154.193086][ T1040] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 154.343097][ T1040] usb 6-1: Using ep0 maxpacket: 8 [ 154.348339][ T1040] usb 6-1: config 9 has an invalid interface number: 214 but max is 0 [ 154.352254][ T1040] usb 6-1: config 9 has no interface number 0 [ 154.357978][ T1040] usb 6-1: config 9 interface 214 has no altsetting 0 [ 154.365378][ T1040] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=8c.e6 [ 154.369901][ T1040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.373933][ T1040] usb 6-1: Product: syz [ 154.375790][ T1040] usb 6-1: Manufacturer: syz [ 154.377841][ T1040] usb 6-1: SerialNumber: syz [ 154.800266][T10494] netlink: 'syz.3.1202': attribute type 12 has an invalid length. [ 154.884486][T10496] x_tables: duplicate underflow at hook 3 [ 155.058631][T10508] netlink: 'syz.5.1208': attribute type 30 has an invalid length. [ 155.192497][ T1040] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 155.197726][ T1040] usb 6-1: setting power ON [ 155.200953][ T1040] dvb-usb: bulk message failed: -22 (2/0) [ 155.353344][ T1040] dvb-usb: bulk message failed: -22 (1/0) [ 155.390399][T10523] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 155.394932][ T5093] Bluetooth: hci1: unexpected event for opcode 0x080b [ 155.469179][ T1040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.474438][ T1040] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 155.477840][ T1040] usb 6-1: media controller created [ 155.492564][ T1040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.512706][ T1040] cxusb: set interface failed [ 155.515868][ T1040] dvb-usb: bulk message failed: -22 (3/0) [ 155.517881][ T1040] cxusb: clear tuner gpio failed [ 155.519695][ T1040] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 155.563195][ T1040] rc_core: IR keymap rc-d680-dmb not found [ 155.565243][ T1040] Registered IR keymap rc-empty [ 155.567833][ T1040] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 155.572155][ T1040] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input23 [ 155.577720][ T1040] dvb-usb: schedule remote query interval to 100 msecs. [ 155.580208][ T1040] usb 6-1: setting power OFF [ 155.581825][ T1040] dvb-usb: bulk message failed: -22 (2/0) [ 155.583861][ T1040] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 155.589013][ T1040] usb 6-1: USB disconnect, device number 10 [ 155.642088][ T1040] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 155.886795][T10530] GUP no longer grows the stack in syz.3.1214 (10530): 200000004000-20000000a000 (200000002000) [ 155.890766][T10530] CPU: 1 UID: 0 PID: 10530 Comm: syz.3.1214 Not tainted syzkaller #0 PREEMPT(full) [ 155.890792][T10530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.890805][T10530] Call Trace: [ 155.890812][T10530] [ 155.890819][T10530] dump_stack_lvl+0x100/0x190 [ 155.890860][T10530] gup_vma_lookup.cold+0x83/0x96 [ 155.890878][T10530] __get_user_pages+0x241/0x32a0 [ 155.890895][T10530] ? find_held_lock+0x2b/0x80 [ 155.890907][T10530] ? mtree_load+0x311/0xa90 [ 155.890932][T10530] ? __pfx___get_user_pages+0x10/0x10 [ 155.890951][T10530] get_user_pages_remote+0x3d2/0xb10 [ 155.890965][T10530] ? mas_root_expand+0x670/0x750 [ 155.890979][T10530] ? __pfx_get_user_pages_remote+0x10/0x10 [ 155.890993][T10530] ? __access_remote_vm+0x755/0x890 [ 155.891005][T10530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.891021][T10530] __access_remote_vm+0x3bb/0x890 [ 155.891034][T10530] ? do_raw_spin_lock+0x128/0x260 [ 155.891049][T10530] ? __pfx___access_remote_vm+0x10/0x10 [ 155.891059][T10530] ? proc_pid_cmdline_read+0x31b/0x8c0 [ 155.891075][T10530] proc_pid_cmdline_read+0x4f2/0x8c0 [ 155.891088][T10530] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 155.891101][T10530] ? rw_verify_area+0xce/0x6d0 [ 155.891112][T10530] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 155.891124][T10530] vfs_readv+0x5d8/0x8d0 [ 155.891138][T10530] ? __pfx_vfs_readv+0x10/0x10 [ 155.891158][T10530] ? __fget_files+0x21f/0x3d0 [ 155.891175][T10530] ? do_preadv+0x1ac/0x270 [ 155.891185][T10530] do_preadv+0x1ac/0x270 [ 155.891200][T10530] ? __pfx_do_preadv+0x10/0x10 [ 155.891211][T10530] ? rcu_is_watching+0x12/0xc0 [ 155.891230][T10530] do_syscall_64+0x10b/0xf80 [ 155.891242][T10530] ? clear_bhb_loop+0x40/0x90 [ 155.891256][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.891268][T10530] RIP: 0033:0x7f0a52b9cdd9 [ 155.891280][T10530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.891290][T10530] RSP: 002b:00007f0a53afe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 155.891301][T10530] RAX: ffffffffffffffda RBX: 00007f0a52e15fa0 RCX: 00007f0a52b9cdd9 [ 155.891309][T10530] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 155.891315][T10530] RBP: 00007f0a52c32d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 155.891322][T10530] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 155.891328][T10530] R13: 00007f0a52e16038 R14: 00007f0a52e15fa0 R15: 00007fff26d444a8 [ 155.891342][T10530] [ 156.015623][T10535] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.595840][ C2] ata1: illegal qc_active transition (00000000->00800000) [ 156.769465][ T5093] Bluetooth: hci4: unexpected event 0x3c length: 174 > 7 [ 156.771449][T10567] tipc: New replicast peer: 10.1.1.0 [ 156.778091][T10567] tipc: Enabled bearer , priority 10 [ 156.868787][T10577] overlayfs: conflicting options: userxattr,metacopy=on [ 156.925264][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 156.928527][ T1131] ata1.00: configured for UDMA/100 [ 156.978692][T10583] nbd: must specify an index to disconnect [ 156.980847][T10581] nbd: must specify an index to disconnect [ 156.986876][T10587] fuse: Bad value for 'fd' [ 157.120052][T10605] random: crng reseeded on system resumption [ 157.177710][T10608] bond3: entered promiscuous mode [ 157.179879][T10608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.311868][T10618] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1242'. [ 157.398490][T10627] IPv6: Can't replace route, no match found [ 157.455028][T10631] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 157.461166][T10630] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1246'. [ 157.464317][T10630] nbd: must specify at least one socket [ 157.696402][T10662] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 157.699745][T10662] __report_access: 23 callbacks suppressed [ 157.699755][T10662] ptrace attach of "/syz-executor exec"[10665] was attempted by "/syz-executor exec"[10662] [ 157.715673][T10666] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 157.796728][ T1476] tipc: Node number set to 4278321153 [ 157.931684][T10682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.936062][T10682] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.943260][T10682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.962558][T10682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.966543][T10682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.971165][T10682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.975119][T10682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.980640][T10682] veth1_vlan: left promiscuous mode [ 157.983083][T10682] veth0_vlan: left promiscuous mode [ 157.986019][T10682] veth0_vlan: entered promiscuous mode [ 157.988862][T10682] veth1_vlan: entered promiscuous mode [ 157.992809][T10682] veth1_macvtap: left promiscuous mode [ 157.995593][T10682] veth0_macvtap: left promiscuous mode [ 157.998129][T10682] veth0_macvtap: entered promiscuous mode [ 158.000441][T10682] veth1_macvtap: entered promiscuous mode [ 158.005149][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.008292][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.011201][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.015323][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.020024][T10682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.023188][T10682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.028974][T10682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.032753][T10682] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 158.041783][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.044238][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.047763][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.050131][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.067576][T10685] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 158.068909][ T6872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.072630][ T6872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.075799][ T6874] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.079208][ T6874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.093258][ T6873] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 158.097562][ T6874] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.100323][ T6874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.104268][ T6874] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.107249][ T6874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.151482][T10689] overlayfs: failed lookup in lower (newroot/311, name='file0', err=-40): overlapping layers [ 158.293933][T10700] binder_alloc: 10699: binder_alloc_buf size 28760 failed, no address space [ 158.298496][T10700] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 158.448353][ T5093] Bluetooth: hci4: ACL packet for unknown connection handle 30 [ 158.508621][ T40] audit: type=1326 audit(1777912036.369:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.4.1274" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb438d9cdd9 code=0x0 [ 158.561439][T10720] siw: device registration error -23 [ 158.564432][T10720] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1274'. [ 158.570420][T10720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.575724][T10720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.579906][T10720] bond0 (unregistering): Released all slaves [ 158.583127][ T1004] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 158.734973][ T1004] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 158.739510][ T1004] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.745304][ T1004] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.749474][ T1004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.760810][ T1004] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.825885][ T1004] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 158.997354][ T5093] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 159.040514][T10741] tipc: Started in network mode [ 159.042670][T10741] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 159.048207][T10741] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 159.052244][T10741] tipc: Enabled bearer , priority 10 [ 159.083304][T10742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1279'. [ 159.140810][ T1040] usb 8-1: USB disconnect, device number 18 [ 159.195100][T10746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10746 comm=syz.5.1283 [ 159.231828][T10746] netlink: 'syz.5.1283': attribute type 1 has an invalid length. [ 159.246315][T10746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1283'. [ 159.532519][ T40] audit: type=1326 audit(1777912037.389:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10762 comm="syz.4.1289" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb438d9cdd9 code=0x0 [ 159.731755][T10769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.734202][T10769] IPv6: NLM_F_CREATE should be set when creating new route [ 159.736617][T10769] IPv6: NLM_F_CREATE should be set when creating new route [ 159.739406][T10768] 8021q: VLANs not supported on sit0 [ 159.829330][T10774] hpfs: Bad magic ... probably not HPFS [ 160.061540][T10786] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 160.063804][T10786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.066735][T10786] vhci_hcd vhci_hcd.0: Device attached [ 160.072342][T10789] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1295'. [ 160.075990][T10787] vhci_hcd: connection closed [ 160.078268][ T6873] vhci_hcd vhci_hcd.3: stop threads [ 160.081717][ T6873] vhci_hcd vhci_hcd.3: release socket [ 160.083819][ T6873] vhci_hcd vhci_hcd.3: disconnect device [ 160.163987][ T10] tipc: Node number set to 1 [ 160.598712][T10794] netlink: 'syz.1.1298': attribute type 11 has an invalid length. [ 160.784863][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 160.788683][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1305'. [ 160.836605][ T40] audit: type=1400 audit(1777912038.699:829): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 160.859103][ T40] audit: type=1400 audit(1777912038.719:830): avc: denied { create } for pid=10818 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.860380][T10823] xt_hashlimit: size too large, truncated to 1048576 [ 160.883088][ T1040] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 161.013092][ T1040] usb 6-1: device descriptor read/64, error -71 [ 161.254092][ T1040] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 161.325935][T10833] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 161.330588][T10832] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1309'. [ 161.330663][T10833] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 161.388818][ T1040] usb 6-1: device descriptor read/64, error -71 [ 161.422665][ T40] audit: type=1400 audit(1777912039.279:831): avc: denied { setopt } for pid=10844 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.493676][ T1040] usb usb6-port1: attempt power cycle [ 161.535444][ T40] audit: type=1400 audit(1777912039.399:832): avc: denied { mount } for pid=10846 comm="syz.4.1312" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 161.610729][ T40] audit: type=1400 audit(1777912039.469:833): avc: denied { read write } for pid=10852 comm="syz.4.1314" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.622331][ T40] audit: type=1400 audit(1777912039.469:834): avc: denied { open } for pid=10852 comm="syz.4.1314" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.625753][T10853] netlink: 'syz.4.1314': attribute type 10 has an invalid length. [ 161.632456][ T40] audit: type=1400 audit(1777912039.469:835): avc: denied { ioctl } for pid=10852 comm="syz.4.1314" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.833402][ T1040] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 161.843937][T10872] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1323'. [ 161.855376][ T1040] usb 6-1: device descriptor read/8, error -71 [ 161.921322][T10876] netlink: 'syz.3.1326': attribute type 11 has an invalid length. [ 161.926262][T10876] netlink: 'syz.3.1326': attribute type 11 has an invalid length. [ 162.005629][T10894] CIFS mount error: No usable UNC path provided in device string! [ 162.005629][T10894] [ 162.007263][T10891] netlink: 'syz.5.1328': attribute type 29 has an invalid length. [ 162.009687][T10894] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.038512][ T40] audit: type=1400 audit(1777912039.899:836): avc: denied { write } for pid=10896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.075370][T10905] bridge_slave_1: left promiscuous mode [ 162.077425][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.081245][T10905] bridge_slave_0: left allmulticast mode [ 162.087330][T10905] bridge_slave_0: left promiscuous mode [ 162.089380][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.093046][ T1040] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 162.113933][ T1040] usb 6-1: device descriptor read/8, error -71 [ 162.166191][T10908] xt_hashlimit: size too large, truncated to 1048576 [ 162.218910][T10912] bridge_slave_0 (unregistering): left allmulticast mode [ 162.221993][T10912] bridge_slave_0 (unregistering): left promiscuous mode [ 162.225495][ T1040] usb usb6-port1: unable to enumerate USB device [ 162.228896][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.243210][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 162.272876][T10908] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 162.278005][T10908] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 162.343902][T10918] openvswitch: netlink: IP tunnel dst address not specified [ 162.381622][T10925] Bluetooth: MGMT ver 1.23 [ 162.415230][T10925] syzkaller0: entered promiscuous mode [ 162.417108][T10925] syzkaller0: entered allmulticast mode [ 162.581253][T10937] __nla_validate_parse: 6 callbacks suppressed [ 162.581278][T10937] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1340'. [ 162.596978][T10937] sctp: [Deprecated]: syz.5.1340 (pid 10937) Use of int in max_burst socket option. [ 162.596978][T10937] Use struct sctp_assoc_value instead [ 163.201010][T10956] tmpfs: Bad value for 'mpol' [ 163.202816][T10956] tmpfs: Bad value for 'mpol' [ 163.204816][T10956] tmpfs: Bad value for 'mpol' [ 163.206583][T10956] tmpfs: Bad value for 'mpol' [ 163.208386][T10956] tmpfs: Bad value for 'mpol' [ 163.210499][T10956] tmpfs: Bad value for 'mpol' [ 163.212268][T10956] tmpfs: Bad value for 'mpol' [ 163.214251][T10956] tmpfs: Bad value for 'mpol' [ 163.215950][T10956] tmpfs: Bad value for 'mpol' [ 163.217658][T10956] tmpfs: Bad value for 'mpol' [ 163.219453][T10956] tmpfs: Bad value for 'mpol' [ 163.221169][T10956] tmpfs: Bad value for 'mpol' [ 163.223131][T10956] tmpfs: Bad value for 'mpol' [ 163.224931][T10956] tmpfs: Bad value for 'mpol' [ 163.226670][T10956] tmpfs: Bad value for 'mpol' [ 163.228359][T10956] tmpfs: Bad value for 'mpol' [ 163.230130][T10956] tmpfs: Bad value for 'mpol' [ 163.231858][T10956] tmpfs: Bad value for 'mpol' [ 163.234156][T10956] tmpfs: Bad value for 'mpol' [ 163.236858][T10956] tmpfs: Bad value for 'mpol' [ 163.238600][T10956] tmpfs: Bad value for 'mpol' [ 163.240348][T10956] tmpfs: Bad value for 'mpol' [ 163.242059][T10956] tmpfs: Bad value for 'mpol' [ 163.243931][T10956] tmpfs: Bad value for 'mpol' [ 163.245649][T10956] tmpfs: Bad value for 'mpol' [ 163.247342][T10956] tmpfs: Bad value for 'mpol' [ 163.249082][T10956] tmpfs: Bad value for 'mpol' [ 163.250896][T10956] tmpfs: Bad value for 'mpol' [ 163.252579][T10956] tmpfs: Bad value for 'mpol' [ 163.254385][T10956] tmpfs: Bad value for 'mpol' [ 163.256063][T10956] tmpfs: Bad value for 'mpol' [ 163.257768][T10956] tmpfs: Bad value for 'mpol' [ 163.259475][T10956] tmpfs: Bad value for 'mpol' [ 163.388786][T10959] xt_ecn: cannot match TCP bits for non-tcp packets [ 163.483596][T10961] ./cgroup: Can't lookup blockdev [ 163.487952][T10961] netlink: 'syz.4.1349': attribute type 10 has an invalid length. [ 163.497466][T10961] team0: Port device geneve0 added [ 163.499946][ T6872] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.501964][T10961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 163.504694][ T6872] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.509719][ T6872] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.512442][ T6872] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.552068][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 163.552080][ T40] audit: type=1400 audit(1777912041.409:844): avc: denied { create } for pid=10965 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.561212][ T40] audit: type=1400 audit(1777912041.419:845): avc: denied { setopt } for pid=10965 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.567770][ T40] audit: type=1400 audit(1777912041.419:846): avc: denied { map } for pid=10965 comm="syz.4.1350" path="socket:[43476]" dev="sockfs" ino=43476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.576821][ T40] audit: type=1400 audit(1777912041.419:847): avc: denied { read accept } for pid=10965 comm="syz.4.1350" path="socket:[43476]" dev="sockfs" ino=43476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.675171][T10969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 163.737485][T10969] kvm: MONITOR instruction emulated as NOP! [ 163.817796][ T40] audit: type=1400 audit(1777912041.679:848): avc: denied { read } for pid=10980 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.895305][T10999] libceph: resolve '4' (ret=-3): failed [ 163.933643][T11001] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 164.031072][T11019] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.033063][ T40] audit: type=1400 audit(1777912041.889:849): avc: denied { write } for pid=11016 comm="syz.3.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.128721][T11034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1369'. [ 164.166207][T11041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1371'. [ 164.278219][T11047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1373'. [ 164.311726][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 164.315002][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 164.725159][ T40] audit: type=1400 audit(1777912042.589:850): avc: denied { map } for pid=11064 comm="syz.5.1379" path="socket:[45352]" dev="sockfs" ino=45352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.728250][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1379'. [ 164.735199][ T40] audit: type=1400 audit(1777912042.589:851): avc: denied { accept } for pid=11064 comm="syz.5.1379" path="socket:[45352]" dev="sockfs" ino=45352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.219907][T11087] SELinux: syz.3.1387 (11087) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 165.295035][T11089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1387'. [ 165.400771][T11093] ufs: You didn't specify the type of your ufs filesystem [ 165.400771][T11093] [ 165.400771][T11093] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 165.400771][T11093] [ 165.400771][T11093] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 165.769139][ T40] audit: type=1400 audit(1777912043.629:852): avc: denied { read } for pid=11099 comm="syz.5.1391" lport=32951 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 166.012790][ T5093] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 166.464381][T11131] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 166.630320][T11143] ALSA: mixer_oss: invalid OSS volume 'f7ÍëвBM©³ÝÖôb€kr÷¡°[ÆkçO\. E' [ 166.633859][T11143] ALSA: mixer_oss: invalid OSS volume '' [ 166.773223][T11148] raw_sendmsg: syz.1.1406 forgot to set AF_INET. Fix it! [ 166.856779][T11160] Bluetooth: MGMT ver 1.23 [ 166.864614][T11161] overlayfs: cannot append lower layer [ 166.867070][T11160] validate_nla: 1 callbacks suppressed [ 166.867081][T11160] netlink: 'syz.1.1410': attribute type 25 has an invalid length. [ 166.871534][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 166.884006][T11161] x_tables: duplicate underflow at hook 2 [ 166.918906][T11165] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 166.927877][T11160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1410'. [ 167.000473][ T40] audit: type=1400 audit(2000000000.029:853): avc: denied { map } for pid=11169 comm="syz.5.1413" path="socket:[43893]" dev="sockfs" ino=43893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 167.348705][T11188] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 167.360275][T11188] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 167.365047][T11188] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 168.243475][ T6635] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 168.404343][ T6635] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 168.416584][ T6635] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 168.423498][ T6635] usb 6-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 168.430458][ T6635] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.434573][ T6635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.438022][ T6635] usb 6-1: SerialNumber: syz [ 168.796115][T11234] fuse: fd is not a fuse device [ 168.894067][T11240] 9p: Could not find request transport: v [ 168.958719][T11245] No such timeout policy "syz1" [ 169.009369][T11247] xt_hashlimit: size too large, truncated to 1048576 [ 169.061130][T11249] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1435'. [ 169.116828][T11252] gfs2: Unknown parameter '†rpquota' [ 169.119355][T11252] gfs2: Unknown parameter '†rpquota' [ 169.121685][T11252] gfs2: Unknown parameter '†rpquota' [ 169.125498][T11252] gfs2: Unknown parameter '†rpquota' [ 169.127914][T11252] gfs2: Unknown parameter '†rpquota' [ 169.130586][T11252] gfs2: Unknown parameter '†rpquota' [ 169.133095][T11252] gfs2: Unknown parameter '†rpquota' [ 169.135072][T11252] gfs2: Unknown parameter '†rpquota' [ 169.136987][T11252] gfs2: Unknown parameter '†rpquota' [ 169.138920][T11252] gfs2: Unknown parameter '†rpquota' [ 169.140736][T11252] gfs2: Unknown parameter '†rpquota' [ 169.143363][T11252] gfs2: Unknown parameter '†rpquota' [ 169.146284][T11252] gfs2: Unknown parameter '†rpquota' [ 169.148829][T11252] gfs2: Unknown parameter '†rpquota' [ 169.151349][T11252] gfs2: Unknown parameter '†rpquota' [ 169.154683][T11252] gfs2: Unknown parameter '†rpquota' [ 169.157314][T11252] gfs2: Unknown parameter '†rpquota' [ 169.159875][T11252] gfs2: Unknown parameter '†rpquota' [ 169.162208][T11252] gfs2: Unknown parameter '†rpquota' [ 169.165027][T11252] gfs2: Unknown parameter '†rpquota' [ 169.166985][T11252] gfs2: Unknown parameter '†rpquota' [ 169.168894][T11252] gfs2: Unknown parameter '†rpquota' [ 169.170849][T11252] gfs2: Unknown parameter '†rpquota' [ 169.172696][T11252] gfs2: Unknown parameter '†rpquota' [ 169.174729][T11252] gfs2: Unknown parameter '†rpquota' [ 169.176738][T11252] gfs2: Unknown parameter '†rpquota' [ 169.178719][T11252] gfs2: Unknown parameter '†rpquota' [ 169.181292][T11252] gfs2: Unknown parameter '†rpquota' [ 169.184163][T11252] gfs2: Unknown parameter '†rpquota' [ 169.186887][T11252] gfs2: Unknown parameter '†rpquota' [ 169.189534][T11252] gfs2: Unknown parameter '†rpquota' [ 169.192211][T11252] gfs2: Unknown parameter '†rpquota' [ 169.195076][T11252] gfs2: Unknown parameter '†rpquota' [ 169.197779][T11252] gfs2: Unknown parameter '†rpquota' [ 169.200425][T11252] gfs2: Unknown parameter '†rpquota' [ 169.202806][T11252] gfs2: Unknown parameter '†rpquota' [ 169.205285][T11252] gfs2: Unknown parameter '†rpquota' [ 169.207586][T11252] gfs2: Unknown parameter '†rpquota' [ 169.209510][T11252] gfs2: Unknown parameter '†rpquota' [ 169.211450][T11252] gfs2: Unknown parameter '†rpquota' [ 169.214169][T11252] gfs2: Unknown parameter '†rpquota' [ 169.216209][T11252] gfs2: Unknown parameter '†rpquota' [ 169.218101][T11252] gfs2: Unknown parameter '†rpquota' [ 169.220534][T11252] gfs2: Unknown parameter '†rpquota' [ 169.223269][T11252] gfs2: Unknown parameter '†rpquota' [ 169.225846][T11252] gfs2: Unknown parameter '†rpquota' [ 169.227752][T11252] gfs2: Unknown parameter '†rpquota' [ 169.229673][T11252] gfs2: Unknown parameter '†rpquota' [ 169.231509][T11252] gfs2: Unknown parameter '†rpquota' [ 169.233423][T11252] gfs2: Unknown parameter '†rpquota' [ 169.235312][T11252] gfs2: Unknown parameter '†rpquota' [ 169.237159][T11252] gfs2: Unknown parameter '†rpquota' [ 169.239004][T11252] gfs2: Unknown parameter '†rpquota' [ 169.240852][T11252] gfs2: Unknown parameter '†rpquota' [ 169.242737][T11252] gfs2: Unknown parameter '†rpquota' [ 169.244771][T11252] gfs2: Unknown parameter '†rpquota' [ 169.246700][T11252] gfs2: Unknown parameter '†rpquota' [ 169.248651][T11252] gfs2: Unknown parameter '†rpquota' [ 169.250571][T11252] gfs2: Unknown parameter '†rpquota' [ 169.253340][T11252] gfs2: Unknown parameter '†rpquota' [ 169.255315][T11252] gfs2: Unknown parameter '†rpquota' [ 169.257221][T11252] gfs2: Unknown parameter '†rpquota' [ 169.259113][T11252] gfs2: Unknown parameter '†rpquota' [ 169.260993][T11252] gfs2: Unknown parameter '†rpquota' [ 169.262908][T11252] gfs2: Unknown parameter '†rpquota' [ 169.630351][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 169.630368][ T40] audit: type=1400 audit(2000000002.659:855): avc: denied { accept } for pid=11274 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 169.768871][T11287] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1447'. [ 169.847633][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 169.851851][T11295] netlink: 'syz.5.1449': attribute type 12 has an invalid length. [ 169.855661][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 169.868672][ T6872] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.868772][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 169.872926][ T6872] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.877062][T11295] netlink: 'syz.5.1449': attribute type 12 has an invalid length. [ 169.880185][ T6872] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.883371][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 169.891521][ T6872] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.553405][T11320] QAT: failed to copy from user. [ 170.634494][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1461'. [ 170.813390][T11343] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.836570][ T6635] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 170.857863][ T6635] usb 6-1: USB disconnect, device number 15 [ 170.918182][ T40] audit: type=1400 audit(2000000003.949:856): avc: denied { map } for pid=11347 comm="syz.1.1467" path="socket:[45747]" dev="sockfs" ino=45747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 170.959448][T11351] netlink: 161688 bytes leftover after parsing attributes in process `syz.3.1468'. [ 170.963178][ C1] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 171.041397][T11360] netlink: 'syz.1.1472': attribute type 3 has an invalid length. [ 171.044570][T11360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1472'. [ 171.114534][T11360] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1472'. [ 171.136879][T11355] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 171.153628][T11355] ftl_cs: FTL header not found. [ 171.189652][T11378] netlink: 'syz.4.1476': attribute type 7 has an invalid length. [ 171.258238][ T40] audit: type=1400 audit(2000000004.289:857): avc: denied { write } for pid=11380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.294966][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 171.321275][ T40] audit: type=1400 audit(2000000004.349:858): avc: denied { write } for pid=11387 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.348498][T11377] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 171.428361][ T40] audit: type=1400 audit(2000000004.459:859): avc: denied { write } for pid=11393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.500057][ T40] audit: type=1400 audit(2000000004.529:860): avc: denied { write } for pid=11403 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.574809][ T40] audit: type=1400 audit(2000000004.609:861): avc: denied { write } for pid=11412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.667986][ T40] audit: type=1400 audit(2000000004.689:862): avc: denied { write } for pid=11419 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.749182][ T40] audit: type=1400 audit(2000000004.779:863): avc: denied { write } for pid=11423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.758299][T11426] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 171.768996][ T40] audit: type=1400 audit(2000000004.799:864): avc: denied { execute } for pid=11424 comm="syz.4.1486" path="/selinux/relabel" dev="selinuxfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 172.253653][T11475] xt_hashlimit: size too large, truncated to 1048576 [ 172.340010][T11479] pim6reg1: entered promiscuous mode [ 172.341824][T11479] pim6reg1: entered allmulticast mode [ 172.349095][T11475] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 172.351011][T11475] pim6reg1: Linktype set failed because interface is up [ 172.595592][ T6635] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 172.756854][ T6635] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.760287][ T6635] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.765222][ T6635] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.768310][ T6635] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.856990][T11489] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 172.909470][T11491] netlink: 'syz.5.1499': attribute type 1 has an invalid length. [ 172.976595][ T6635] usb 9-1: usb_control_msg returned -32 [ 172.979293][ T6635] usbtmc 9-1:16.0: can't read capabilities [ 172.998671][T11492] syz_tun: left allmulticast mode [ 173.000932][T11492] syz_tun: left promiscuous mode [ 173.007263][T11492] bridge0: port 3(syz_tun) entered disabled state [ 173.028708][T11492] bridge_slave_0: left allmulticast mode [ 173.031724][T11492] bridge_slave_0: left promiscuous mode [ 173.036718][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.044827][T11492] bridge_slave_1: left allmulticast mode [ 173.047330][T11492] bridge_slave_1: left promiscuous mode [ 173.049813][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.068553][T11492] bond0: (slave bond_slave_0): Releasing backup interface [ 173.075705][T11502] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 173.076075][T11492] bond0: (slave bond_slave_1): Releasing backup interface [ 173.087019][T11502] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 173.096594][T11492] team0: Port device team_slave_0 removed [ 173.111024][T11492] team0: Port device team_slave_1 removed [ 173.115595][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.121652][T11492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.127911][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.131388][T11492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.139179][T11492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.307048][T11528] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 173.357109][T11534] sg_read: process 1195 (syz.3.1512) changed security contexts after opening file descriptor, this is not allowed. [ 173.386688][T11537] new mount options do not match the existing superblock, will be ignored [ 173.391410][T11537] netlink: 'syz.1.1513': attribute type 26 has an invalid length. [ 173.529918][ T1040] usb 9-1: USB disconnect, device number 10 [ 173.836050][T11573] netlink: 'syz.5.1524': attribute type 1 has an invalid length. [ 173.872095][T11573] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.889112][T11572] bond5: (slave ip6erspan0): making interface the new active one [ 173.894561][T11572] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 174.169254][T11585] __nla_validate_parse: 9 callbacks suppressed [ 174.169274][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1527'. [ 174.249843][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1527'. [ 174.253570][T11588] nbd: nbd64 already in use [ 174.398104][T11606] overlayfs: cannot append lower layer [ 174.479229][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1536'. [ 174.536274][T11618] netlink: 'syz.5.1538': attribute type 1 has an invalid length. [ 174.540017][T11618] netlink: 'syz.5.1538': attribute type 2 has an invalid length. [ 174.543816][T11618] netlink: 'syz.5.1538': attribute type 1 has an invalid length. [ 174.749755][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 174.749770][ T40] audit: type=1400 audit(2000000007.779:943): avc: denied { create } for pid=11637 comm="syz.5.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.760813][ T40] audit: type=1400 audit(2000000007.789:944): avc: denied { setopt } for pid=11637 comm="syz.5.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.761662][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1546'. [ 174.768917][ T40] audit: type=1400 audit(2000000007.789:945): avc: denied { ioctl } for pid=11637 comm="syz.5.1546" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47701 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 174.775326][T11639] ip6gre2: entered promiscuous mode [ 174.784211][T11639] ip6gre2: entered allmulticast mode [ 174.823106][ T1040] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 174.853649][ T40] audit: type=1400 audit(2000000007.889:946): avc: denied { write } for pid=11645 comm="syz.5.1548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 174.896476][ T40] audit: type=1400 audit(2000000007.929:947): avc: denied { create } for pid=11647 comm="syz.5.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.904140][ T40] audit: type=1400 audit(2000000007.929:948): avc: denied { setopt } for pid=11647 comm="syz.5.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.936657][ T40] audit: type=1400 audit(2000000007.969:949): avc: denied { name_bind } for pid=11647 comm="syz.5.1549" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 174.945010][ T40] audit: type=1400 audit(2000000007.969:950): avc: denied { bind } for pid=11647 comm="syz.5.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.997263][ T1040] usb 8-1: not running at top speed; connect to a high speed hub [ 175.000593][T11652] sctp: [Deprecated]: syz.5.1551 (pid 11652) Use of int in max_burst socket option. [ 175.000593][T11652] Use struct sctp_assoc_value instead [ 175.001880][T11652] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 175.009240][ T40] audit: type=1400 audit(2000000008.029:951): avc: denied { create } for pid=11651 comm="syz.5.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.022413][ T40] audit: type=1400 audit(2000000008.029:952): avc: denied { getopt } for pid=11651 comm="syz.5.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.034518][ T1040] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 175.038518][ T1040] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.044514][ T1040] usb 8-1: config 1 interface 0 has no altsetting 0 [ 175.049597][ T1040] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 175.053547][ T1040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.057072][ T1040] usb 8-1: Product: ᆎ嗤媋⪎൱눕摨㤀뱴⨉饖憅â½é‰ îŒ…ëšÑ‚ᇺ肳 [ 175.061034][ T1040] usb 8-1: Manufacturer: é’ŸîŸâ™¿èºæ†é€µá…µï¾·å€á” î³ŽØ±æ‡‰àµ†åµ•ì¼¹ä—왅ᤕ璊࿇ꓜښ﹒㫢㪮ｻ檞â†î¸ã’·ë…†ã«®ë„¼Ðªêƒ³ë¤µë¤ŸèŒ¿ä»ï¥”轾癲⃒原櫪뫧ｗⳀ駖æ‹ØŒâ†“檕臘稜咸ﶞïªá ’걘쿣챓êŠé„¬ë…³ç˜–çž«lâŒÖ°ç¬°é„žé²‰á›¢ï¸ºÈ«à½½ã¤¦ä¦šì¿ä¢¥à¥»î¢á†“ㅱ鋃ò†Ÿïº´ë¾”뽡書躪엵죾샣⾔ì‰â›Œâ¾¶è´šêˆå¼áꪥꎛì¦éžží†á°¢êž•èŠ‰ê‚šâª»æ¯¨ [ 175.076546][ T1040] usb 8-1: SerialNumber: ј [ 175.085657][T11627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.307273][ T1040] usb 8-1: USB disconnect, device number 19 [ 175.387155][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1561'. [ 175.428230][T11682] bond6: Invalid ad_actor_system MAC address. [ 175.430412][T11682] bond6: option ad_actor_system: invalid value (27571) [ 175.435662][T11682] bond6 (unregistering): Released all slaves [ 175.536323][T11690] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 175.655563][ T1040] hid_parser_main: 96 callbacks suppressed [ 175.655579][ T1040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.704345][ T1040] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 175.888875][T11704] hid-generic 0003:0627:0001.0001: pid 11704 passed too short report [ 175.891189][ T5093] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 175.918086][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 175.921525][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 175.925669][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 175.928886][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 175.931920][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1579'. [ 176.015301][ T5093] Bluetooth: Unexpected continuation frame (len 16) [ 176.039258][T11750] program syz.3.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.061852][T11743] overlayfs: failed to clone lowerpath [ 176.115119][T11761] bond3: entered promiscuous mode [ 176.214680][T11772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.547292][T11800] 9p: Bad value for 'version' [ 176.631451][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.638635][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.642281][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.646377][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.649643][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.652783][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.656098][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.659376][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.662680][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.668029][ T5817] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 176.683083][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.696517][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.715185][T11813] fido_id[11813]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.923050][ T843] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 176.932802][T11833] netlink: 'syz.5.1605': attribute type 11 has an invalid length. [ 177.025460][T11839] usb 2-1: USB disconnect, device number 2 [ 177.083040][ T843] usb 8-1: Using ep0 maxpacket: 16 [ 177.086158][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.093214][ T843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.103051][ T843] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.108642][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.128578][ T843] usb 8-1: config 0 descriptor?? [ 177.224905][T11851] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 177.229823][T11851] overlayfs: failed to set xattr on upper [ 177.231752][T11851] overlayfs: ...falling back to redirect_dir=nofollow. [ 177.236934][T11851] overlayfs: ...falling back to index=off. [ 177.239967][T11851] overlayfs: ...falling back to uuid=null. [ 177.333874][ T843] usbhid 8-1:0.0: can't add hid device: -71 [ 177.335901][ T843] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 177.342475][ T843] usb 8-1: USB disconnect, device number 20 [ 177.806856][ T1040] IPVS: starting estimator thread 0... [ 177.813712][T11882] IPVS: lc: FWM 3 0x00000003 - no destination available [ 177.871602][T11891] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 177.903315][T11883] IPVS: using max 45 ests per chain, 108000 per kthread [ 178.065758][T11921] fuse: fd is not a fuse device [ 178.067693][T11923] fuse: fd is not a fuse device [ 178.154821][T11933] overlayfs: workdir and upperdir must reside under the same mount [ 178.423845][T11927] bond5 (unregistering): Released all slaves [ 178.442238][ T6866] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.445319][ T6866] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.448423][ T6866] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.451598][ T6866] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.454971][T11941] tipc: Enabling of bearer rejected, failed to enable media [ 178.458029][ T6866] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.461190][ T6866] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.464507][ T6866] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.467574][ T6866] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.469298][ T5093] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 178.490374][T11945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.506042][T11945] loop5: detected capacity change from 0 to 7 [ 178.510437][T11945] Dev loop5: unable to read RDB block 7 [ 178.514878][T11945] loop5: AHDI p1 [ 178.516291][T11945] loop5: partition table partially beyond EOD, truncated [ 178.530655][T11947] tipc: Started in network mode [ 178.532323][T11947] tipc: Node identity c2a54bce0169, cluster identity 4711 [ 178.536672][T11947] tipc: Enabled bearer , priority 0 [ 178.568709][T11945] Dev loop5: unable to read RDB block 7 [ 178.571004][T11945] loop5: AHDI p1 [ 178.572305][T11945] loop5: partition table partially beyond EOD, truncated [ 178.579982][T11947] syzkaller0: entered promiscuous mode [ 178.581966][T11947] syzkaller0: entered allmulticast mode [ 178.584881][T11947] tipc: Resetting bearer [ 178.667922][T11960] overlayfs: failed to clone upperpath [ 178.821556][T11965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.833495][ T58] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 178.940036][T11970] 8021q: VLANs not supported on ip_vti0 [ 178.983468][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 178.994624][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.999084][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.004185][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.008258][ T58] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.012410][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.020110][ T58] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.026496][ T58] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.029398][ T58] usb 8-1: Manufacturer: syz [ 179.033369][ T58] usb 8-1: config 0 descriptor?? [ 179.114420][ T6873] tipc: Resetting bearer [ 179.254201][T11987] __nla_validate_parse: 50 callbacks suppressed [ 179.254213][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 179.259009][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 179.269403][ T6873] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.276081][ T6873] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.279956][ T6873] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.284966][ T6866] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.294030][ T58] rc_core: IR keymap rc-hauppauge not found [ 179.296829][ T58] Registered IR keymap rc-empty [ 179.299645][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.323516][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.344900][ T58] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 179.356670][ T58] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input26 [ 179.364530][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.383106][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.392096][T11998] netlink: 'syz.5.1657': attribute type 4 has an invalid length. [ 179.401119][T11998] netlink: 'syz.5.1657': attribute type 2 has an invalid length. [ 179.403632][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.404806][T11998] netlink: 3613 bytes leftover after parsing attributes in process `syz.5.1657'. [ 179.406476][T12000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12000 comm=syz.4.1658 [ 179.423250][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.440641][T11947] autofs: Unknown parameter '/dev/net/tun' [ 179.444071][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.460395][T11946] tipc: Resetting bearer [ 179.473239][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.493492][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.523401][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.544010][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.573380][ T58] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 179.602081][ T58] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 179.606592][ T58] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 179.624867][ T58] usb 8-1: USB disconnect, device number 21 [ 179.847501][ T40] kauditd_printk_skb: 137 callbacks suppressed [ 179.847520][ T40] audit: type=1400 audit(2000000012.879:1090): avc: denied { mounton } for pid=12020 comm="syz.1.1663" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.858062][T12021] syz.1.1663: attempt to access beyond end of device [ 179.858062][T12021] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 179.871282][ T40] audit: type=1400 audit(2000000012.879:1091): avc: denied { read append } for pid=12019 comm="syz.4.1662" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.877226][T12021] gfs2: error -5 reading superblock [ 179.881699][ T40] audit: type=1400 audit(2000000012.879:1092): avc: denied { open } for pid=12019 comm="syz.4.1662" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.881770][ T40] audit: type=1400 audit(2000000012.899:1093): avc: denied { ioctl } for pid=12019 comm="syz.4.1662" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.917591][ T40] audit: type=1400 audit(2000000012.949:1094): avc: denied { name_bind } for pid=12020 comm="syz.1.1663" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 179.926129][ T40] audit: type=1400 audit(2000000012.949:1095): avc: denied { write } for pid=12020 comm="syz.1.1663" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.099662][T12029] fuse: Unknown parameter '' [ 180.724444][T12040] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 180.766001][T12042] netlink: 'syz.1.1668': attribute type 7 has an invalid length. [ 180.774576][T12042] netlink: 'syz.1.1668': attribute type 8 has an invalid length. [ 180.799407][T12042] program syz.1.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.093157][ T58] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 181.254707][ T58] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 181.258235][ T58] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.261454][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.266310][ T58] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.270146][ T58] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.281995][ T58] usb 6-1: Product: syz [ 181.283836][ T58] usb 6-1: Manufacturer: syz [ 181.285460][ T58] usb 6-1: SerialNumber: syz [ 181.288334][ T58] usb 6-1: config 0 descriptor?? [ 181.302522][ T58] hub 6-1:0.0: bad descriptor, ignoring hub [ 181.305312][ T58] hub 6-1:0.0: probe with driver hub failed with error -5 [ 181.311665][ T58] usb 6-1: selecting invalid altsetting 0 [ 181.653758][ T58] usb 6-1: USB disconnect, device number 16 [ 181.773297][T11946] tipc: Disabling bearer [ 181.790034][ T34] tipc: Node number set to 3284945870 [ 181.792886][ T6954] udevd[6954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.832167][T12044] erspan1: entered promiscuous mode [ 181.933567][ T40] audit: type=1400 audit(2000000014.969:1096): avc: denied { create } for pid=12055 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 181.958934][T12059] mac80211_hwsim hwsim12 ªªªªª;Iÿ…o!Õœ•X: renamed from wlan0 [ 182.018819][T12067] netlink: 'syz.3.1671': attribute type 8 has an invalid length. [ 182.091902][T12070] Failed to get privilege flags for destination (handle=0x2:0x5) [ 182.113320][ T58] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 182.141522][ T40] audit: type=1400 audit(2000000015.169:1097): avc: denied { write } for pid=12071 comm="syz.4.1677" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.276324][ T58] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 182.279233][ T58] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 182.283667][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 182.289033][ T58] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.292860][ T58] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.296798][ T58] usb 6-1: Product: syz [ 182.298626][ T58] usb 6-1: Manufacturer: syz [ 182.300637][ T58] usb 6-1: SerialNumber: syz [ 182.311083][ T58] usb 6-1: config 0 descriptor?? [ 182.319298][ T58] hub 6-1:0.0: bad descriptor, ignoring hub [ 182.321953][ T58] hub 6-1:0.0: probe with driver hub failed with error -5 [ 182.330817][ T58] usb 6-1: selecting invalid altsetting 0 [ 182.544370][ T40] audit: type=1400 audit(2000000015.579:1098): avc: denied { setopt } for pid=12087 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.552913][ T40] audit: type=1400 audit(2000000015.579:1099): avc: denied { connect } for pid=12087 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.598512][T12089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12089 comm=syz.4.1681 [ 182.633287][ T10] usb 6-1: USB disconnect, device number 17 [ 182.937585][T12100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1685'. [ 182.976559][T12100] IPVS: set_ctl: invalid protocol: 170 172.20.20.187:20001 [ 183.103603][ T58] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 183.110581][T12112] overlayfs: failed to clone upperpath [ 183.181494][T12116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12116 comm=syz.5.1692 [ 183.235784][ T58] usb 8-1: device descriptor read/64, error -71 [ 183.243460][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1695'. [ 183.248108][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1695'. [ 183.251400][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1695'. [ 183.288877][T12132] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1696'. [ 183.300849][T12132] bond0 (unregistering): Released all slaves [ 183.307960][T12134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1697'. [ 183.368234][T12138] bond0 (unregistering): Released all slaves [ 183.473062][ T58] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 183.508212][T12159] fuse: fd is not a fuse device [ 183.613132][ T58] usb 8-1: device descriptor read/64, error -71 [ 183.726966][T12172] tap0: tun_chr_ioctl cmd 1074025678 [ 183.729613][T12172] tap0: group set to 0 [ 183.733712][ T58] usb usb8-port1: attempt power cycle [ 183.743784][T12177] wg1 speed is unknown, defaulting to 1000 [ 183.748563][T12177] wg1 speed is unknown, defaulting to 1000 [ 183.752915][T12177] wg1 speed is unknown, defaulting to 1000 [ 183.779738][T12176] batadv_slave_0: entered promiscuous mode [ 183.843103][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 183.873651][T12177] infiniband syz2: set down [ 183.874821][ T39] wg1 speed is unknown, defaulting to 1000 [ 183.877876][T12177] infiniband syz2: added wg1 [ 183.893333][T12177] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 183.898337][T12177] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 183.904329][T12177] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 183.922677][T12177] RDS/IB: syz2: added [ 183.926053][T12177] smc: adding ib device syz2 with port count 1 [ 183.928591][T12177] smc: ib device syz2 port 1 has no pnetid [ 183.934628][ T6635] wg1 speed is unknown, defaulting to 1000 [ 183.944580][T12177] wg1 speed is unknown, defaulting to 1000 [ 183.994538][ T34] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.997635][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.003049][ T34] usb 9-1: config 0 descriptor?? [ 184.073102][ T58] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 184.093841][ T58] usb 8-1: device descriptor read/8, error -71 [ 184.107573][T12177] wg1 speed is unknown, defaulting to 1000 [ 184.183177][ T1004] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 184.208168][ T34] usbhid 9-1:0.0: can't add hid device: -71 [ 184.210538][ T34] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 184.214808][ T34] usb 9-1: USB disconnect, device number 11 [ 184.215647][T12177] wg1 speed is unknown, defaulting to 1000 [ 184.343068][ T1004] usb 6-1: Using ep0 maxpacket: 32 [ 184.351142][ T1004] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.353363][ T58] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 184.354814][ T1004] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.361816][ T1004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.363759][T12177] wg1 speed is unknown, defaulting to 1000 [ 184.365522][ T1004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.365542][ T1004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.365560][ T1004] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.365590][ T1004] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.365607][ T1004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.367908][ T1004] usb 6-1: config 0 descriptor?? [ 184.373616][ T58] usb 8-1: device descriptor read/8, error -71 [ 184.503592][ T58] usb usb8-port1: unable to enumerate USB device [ 184.583838][ T1004] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.591259][ T1004] usb 6-1: USB disconnect, device number 18 [ 184.598663][ T1004] usblp0: removed [ 184.653042][ T5817] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 184.813104][ T5817] usb 9-1: Using ep0 maxpacket: 32 [ 184.820660][ T5817] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 184.827746][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.838852][ T5817] usb 9-1: config 0 descriptor?? [ 184.846226][ T5817] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 184.858618][ T5817] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 185.055141][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.058454][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.071688][ T5817] usb 9-1: USB disconnect, device number 12 [ 185.077622][ T5817] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 185.103426][ T1004] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 185.233130][ T1004] usb 6-1: device descriptor read/64, error -71 [ 185.427089][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 185.427108][ T40] audit: type=1400 audit(2000000018.459:1115): avc: denied { getopt } for pid=12197 comm="syz.5.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.436472][T12198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'. [ 185.443040][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1715'. [ 185.473219][ T1004] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 185.482912][ T40] audit: type=1400 audit(2000000018.509:1116): avc: denied { create } for pid=12199 comm="syz.5.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.515896][T12200] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.521619][T12200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.542274][ T40] audit: type=1400 audit(2000000018.569:1117): avc: denied { shutdown } for pid=12199 comm="syz.5.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.544344][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 185.556535][T12200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.560071][T12200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.567511][T12200] veth1_vlan: left promiscuous mode [ 185.570272][T12200] veth0_vlan: left promiscuous mode [ 185.572529][T12200] veth0_vlan: entered promiscuous mode [ 185.576284][T12200] veth1_vlan: entered promiscuous mode [ 185.582145][T12200] veth1_macvtap: left promiscuous mode [ 185.585839][T12200] veth0_macvtap: left promiscuous mode [ 185.588626][T12200] veth0_macvtap: entered promiscuous mode [ 185.592195][T12200] veth1_macvtap: entered promiscuous mode [ 185.597849][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.601719][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.607138][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.610208][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.615534][ T1004] usb 6-1: device descriptor read/64, error -71 [ 185.620255][T12200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.628304][T12200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.631985][T12200] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 185.637240][ T40] audit: type=1400 audit(2000000018.659:1118): avc: denied { read } for pid=12202 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.688076][T12203] netlink: 'syz.4.1717': attribute type 21 has an invalid length. [ 185.693211][ T1476] wg1 speed is unknown, defaulting to 1000 [ 185.696797][ T1476] syz2: Port: 1 Link ACTIVE [ 185.723545][ T1004] usb usb6-port1: attempt power cycle [ 185.726067][ T6873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.730099][ T6873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.741331][ T6873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.749140][ T6873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.752527][ T1476] wg1 speed is unknown, defaulting to 1000 [ 185.908913][T12206] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 185.917483][T12206] tipc: Enabled bearer , priority 0 [ 185.933642][T12205] tipc: Disabling bearer [ 185.990296][ T6866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.993179][ T6866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.058124][ T40] audit: type=1400 audit(2000000019.089:1119): avc: denied { setopt } for pid=12211 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.068328][ T40] audit: type=1400 audit(2000000019.099:1120): avc: denied { ioctl } for pid=12211 comm="syz.3.1721" path="socket:[50085]" dev="sockfs" ino=50085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.073227][ T1004] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 186.078872][ T40] audit: type=1400 audit(2000000019.099:1121): avc: denied { setattr } for pid=12211 comm="syz.3.1721" name="AF_VSOCK" dev="sockfs" ino=50085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.093552][ T1004] usb 6-1: device descriptor read/8, error -71 [ 186.150925][T12221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.155754][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1724'. [ 186.155949][T12224] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 186.162867][ T40] audit: type=1400 audit(2000000019.189:1122): avc: denied { relabelto } for pid=12223 comm="syz.3.1725" name="seq" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 186.169418][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1725'. [ 186.174688][ T40] audit: type=1400 audit(2000000019.189:1123): avc: denied { associate } for pid=12223 comm="syz.3.1725" name="seq" dev="devtmpfs" ino=1310 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 186.210072][ T40] audit: type=1400 audit(2000000019.239:1124): avc: denied { read } for pid=12225 comm="syz.4.1727" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.272801][T12231] ------------[ cut here ]------------ [ 186.275113][T12232] ptrace attach of "/syz-executor exec"[12234] was attempted by "/syz-executor exec"[12232] [ 186.275963][T12231] !chanctx_conf [ 186.279554][T12231] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x5c5/0x730, CPU#3: syz.5.1728/12231 [ 186.285908][T12231] Modules linked in: [ 186.288093][T12231] CPU: 3 UID: 0 PID: 12231 Comm: syz.5.1728 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.293506][T12231] Tainted: [L]=SOFTLOCKUP [ 186.295794][T12231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.300225][T12231] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 186.303352][T12231] Code: 48 8d 35 00 00 00 00 e8 39 32 e3 f6 e8 34 8a ec f6 e9 20 fe ff ff e8 9a 46 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 8c 46 07 f7 90 <0f> 0b 90 eb b1 e8 81 46 07 f7 e8 8c 92 eb f6 31 ff 89 c3 89 c6 e8 [ 186.312208][T12231] RSP: 0018:ffffc90007497200 EFLAGS: 00010287 [ 186.315344][T12231] RAX: 00000000000007c3 RBX: ffff888064fb0000 RCX: ffffc9000c402000 [ 186.319098][T12231] RDX: 0000000000080000 RSI: ffffffff8b014554 RDI: ffff88802bdc2500 [ 186.322651][T12231] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 186.326299][T12231] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805c2eed80 [ 186.329791][T12231] R13: ffff88802d090f20 R14: ffff888022e1c000 R15: 0000000000000000 [ 186.335125][T12231] FS: 00007ffab32926c0(0000) GS:ffff8880d6676000(0000) knlGS:0000000000000000 [ 186.339099][T12231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.342039][T12231] CR2: 00007ffab2615fac CR3: 0000000048bf2000 CR4: 0000000000352ef0 [ 186.345648][T12231] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 186.349136][T12231] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 186.352582][T12231] Call Trace: [ 186.354211][T12231] [ 186.355569][T12231] rate_control_rate_init_all_links+0x76/0x1f0 [ 186.358284][T12231] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 186.360860][T12231] sta_apply_parameters+0x1234/0x2090 [ 186.363086][ T1004] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 186.363400][T12231] ? __sta_info_alloc+0x1146/0x1cd0 [ 186.368213][T12231] ieee80211_add_station+0x3ff/0x760 [ 186.370634][T12231] nl80211_new_station+0x14a9/0x20f0 [ 186.373163][T12231] ? __pfx_nl80211_new_station+0x10/0x10 [ 186.375836][T12231] ? nl80211_pre_doit+0x19a/0xae0 [ 186.378161][T12231] genl_family_rcv_msg_doit+0x214/0x300 [ 186.380652][T12231] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.383800][T12231] ? bpf_lsm_capable+0x9/0x10 [ 186.383826][ T1004] usb 6-1: device descriptor read/8, error -71 [ 186.388571][T12231] ? security_capable+0x80/0x260 [ 186.390767][T12231] ? ns_capable+0xd2/0xf0 [ 186.392705][T12231] genl_rcv_msg+0x560/0x800 [ 186.394981][T12231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.397436][T12231] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 186.399972][T12231] ? __pfx_nl80211_new_station+0x10/0x10 [ 186.402480][T12231] ? __pfx_nl80211_post_doit+0x10/0x10 [ 186.405174][T12231] netlink_rcv_skb+0x159/0x420 [ 186.407401][T12231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.409675][T12231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.411956][T12231] ? netlink_deliver_tap+0x1ae/0xcc0 [ 186.414391][T12231] genl_rcv+0x28/0x40 [ 186.416141][T12231] netlink_unicast+0x585/0x850 [ 186.418272][T12231] ? __pfx_netlink_unicast+0x10/0x10 [ 186.420591][T12231] netlink_sendmsg+0x8b0/0xda0 [ 186.422664][T12231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.425036][T12231] ? pti_set_user_pgtbl+0x30/0x50 [ 186.427319][T12231] ____sys_sendmsg+0x9e1/0xb70 [ 186.429582][T12231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.432005][T12231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.434686][T12231] ? __pfx_futex_wake_mark+0x10/0x10 [ 186.437078][T12231] ___sys_sendmsg+0x190/0x1e0 [ 186.439223][T12231] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.441680][T12231] __sys_sendmsg+0x170/0x220 [ 186.443948][T12231] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.446321][T12231] ? __x64_sys_futex+0x34f/0x4d0 [ 186.448568][T12231] ? rcu_is_watching+0x12/0xc0 [ 186.450792][T12231] do_syscall_64+0x10b/0xf80 [ 186.452914][T12231] ? clear_bhb_loop+0x40/0x90 [ 186.457341][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.460043][T12231] RIP: 0033:0x7ffab239cdd9 [ 186.462061][T12231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.470568][T12231] RSP: 002b:00007ffab3292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.474328][T12231] RAX: ffffffffffffffda RBX: 00007ffab2615fa0 RCX: 00007ffab239cdd9 [ 186.477775][T12231] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 186.481132][T12231] RBP: 00007ffab2432d69 R08: 0000000000000000 R09: 0000000000000000 [ 186.484792][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.488450][T12231] R13: 00007ffab2616038 R14: 00007ffab2615fa0 R15: 00007fff5a49ce38 [ 186.491827][T12231] [ 186.493273][T12231] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.496480][T12231] CPU: 3 UID: 0 PID: 12231 Comm: syz.5.1728 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.501087][T12231] Tainted: [L]=SOFTLOCKUP [ 186.503037][T12231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.507543][T12231] Call Trace: [ 186.509052][T12231] [ 186.510666][T12231] dump_stack_lvl+0x100/0x190 [ 186.512799][T12231] vpanic+0x552/0x970 [ 186.514629][T12231] ? __pfx_vpanic+0x10/0x10 [ 186.516658][T12231] panic+0xd1/0xe0 [ 186.518396][T12231] ? __pfx_panic+0x10/0x10 [ 186.520518][T12231] check_panic_on_warn.cold+0x19/0x34 [ 186.523035][T12231] ? rate_control_rate_init+0x5c5/0x730 [ 186.525495][T12231] __warn.cold+0x191/0x328 [ 186.527485][T12231] __report_bug+0x296/0x3d0 [ 186.529512][T12231] ? rate_control_rate_init+0x5c5/0x730 [ 186.531975][T12231] ? __pfx___report_bug+0x10/0x10 [ 186.534197][T12231] ? kasan_save_track+0x14/0x30 [ 186.536395][T12231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.539145][T12231] ? ieee80211_add_station+0x5f1/0x760 [ 186.541548][T12231] ? nl80211_new_station+0x14a9/0x20f0 [ 186.543960][T12231] ? genl_family_rcv_msg_doit+0x214/0x300 [ 186.546529][T12231] ? netlink_rcv_skb+0x159/0x420 [ 186.548809][T12231] ? netlink_unicast+0x585/0x850 [ 186.551171][T12231] ? netlink_sendmsg+0x8b0/0xda0 [ 186.553523][T12231] ? ____sys_sendmsg+0x9e1/0xb70 [ 186.555730][T12231] ? rate_control_rate_init+0x5c5/0x730 [ 186.558189][T12231] report_bug+0xb2/0x220 [ 186.560084][T12231] ? rate_control_rate_init+0x5c5/0x730 [ 186.562524][T12231] handle_bug+0x16a/0x2a0 [ 186.564373][T12231] exc_invalid_op+0x17/0x50 [ 186.566326][T12231] asm_exc_invalid_op+0x1a/0x20 [ 186.568348][T12231] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 186.571057][T12231] Code: 48 8d 35 00 00 00 00 e8 39 32 e3 f6 e8 34 8a ec f6 e9 20 fe ff ff e8 9a 46 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 8c 46 07 f7 90 <0f> 0b 90 eb b1 e8 81 46 07 f7 e8 8c 92 eb f6 31 ff 89 c3 89 c6 e8 [ 186.579651][T12231] RSP: 0018:ffffc90007497200 EFLAGS: 00010287 [ 186.582243][T12231] RAX: 00000000000007c3 RBX: ffff888064fb0000 RCX: ffffc9000c402000 [ 186.585629][T12231] RDX: 0000000000080000 RSI: ffffffff8b014554 RDI: ffff88802bdc2500 [ 186.588727][T12231] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 186.592240][T12231] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805c2eed80 [ 186.595769][T12231] R13: ffff88802d090f20 R14: ffff888022e1c000 R15: 0000000000000000 [ 186.599354][T12231] ? rate_control_rate_init+0x5c4/0x730 [ 186.601850][T12231] rate_control_rate_init_all_links+0x76/0x1f0 [ 186.604567][T12231] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 186.607168][T12231] sta_apply_parameters+0x1234/0x2090 [ 186.609562][T12231] ? __sta_info_alloc+0x1146/0x1cd0 [ 186.611900][T12231] ieee80211_add_station+0x3ff/0x760 [ 186.614228][T12231] nl80211_new_station+0x14a9/0x20f0 [ 186.616540][T12231] ? __pfx_nl80211_new_station+0x10/0x10 [ 186.619058][T12231] ? nl80211_pre_doit+0x19a/0xae0 [ 186.621299][T12231] genl_family_rcv_msg_doit+0x214/0x300 [ 186.623826][T12231] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.626524][T12231] ? bpf_lsm_capable+0x9/0x10 [ 186.628625][T12231] ? security_capable+0x80/0x260 [ 186.630850][T12231] ? ns_capable+0xd2/0xf0 [ 186.632783][T12231] genl_rcv_msg+0x560/0x800 [ 186.634852][T12231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.637095][T12231] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 186.639629][T12231] ? __pfx_nl80211_new_station+0x10/0x10 [ 186.642134][T12231] ? __pfx_nl80211_post_doit+0x10/0x10 [ 186.644575][T12231] netlink_rcv_skb+0x159/0x420 [ 186.646718][T12231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.648984][T12231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.651369][T12231] ? netlink_deliver_tap+0x1ae/0xcc0 [ 186.653760][T12231] genl_rcv+0x28/0x40 [ 186.655569][T12231] netlink_unicast+0x585/0x850 [ 186.657750][T12231] ? __pfx_netlink_unicast+0x10/0x10 [ 186.660144][T12231] netlink_sendmsg+0x8b0/0xda0 [ 186.662284][T12231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.664649][T12231] ? pti_set_user_pgtbl+0x30/0x50 [ 186.666911][T12231] ____sys_sendmsg+0x9e1/0xb70 [ 186.669037][T12231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.671311][T12231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.673755][T12231] ? __pfx_futex_wake_mark+0x10/0x10 [ 186.676276][T12231] ___sys_sendmsg+0x190/0x1e0 [ 186.678534][T12231] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.680910][T12231] __sys_sendmsg+0x170/0x220 [ 186.682946][T12231] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.685263][T12231] ? __x64_sys_futex+0x34f/0x4d0 [ 186.687489][T12231] ? rcu_is_watching+0x12/0xc0 [ 186.689667][T12231] do_syscall_64+0x10b/0xf80 [ 186.691758][T12231] ? clear_bhb_loop+0x40/0x90 [ 186.693902][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.696512][T12231] RIP: 0033:0x7ffab239cdd9 [ 186.698510][T12231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.707027][T12231] RSP: 002b:00007ffab3292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.710703][T12231] RAX: ffffffffffffffda RBX: 00007ffab2615fa0 RCX: 00007ffab239cdd9 [ 186.714197][T12231] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 186.717618][T12231] RBP: 00007ffab2432d69 R08: 0000000000000000 R09: 0000000000000000 [ 186.720274][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.722877][T12231] R13: 00007ffab2616038 R14: 00007ffab2615fa0 R15: 00007fff5a49ce38 [ 186.725526][T12231] [ 186.727702][T12231] Kernel Offset: disabled [ 186.729505][T12231] Rebooting in 86400 seconds..