syzkaller login: [ 273.925122][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 273.967324][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 291.610221][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:51814' (ECDSA) to the list of known hosts. 1970/01/01 00:05:40 fuzzer started 1970/01/01 00:05:52 dialing manager at localhost:39257 [ 359.038441][ T2038] cgroup: Unknown subsys name 'net' [ 359.801077][ T2038] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:59 syscalls: 2882 1970/01/01 00:05:59 code coverage: enabled 1970/01/01 00:05:59 comparison tracing: ioctl(KCOV_DISABLE) failed: invalid argument 1970/01/01 00:05:59 extra coverage: enabled 1970/01/01 00:05:59 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:59 setuid sandbox: enabled 1970/01/01 00:05:59 namespace sandbox: enabled 1970/01/01 00:05:59 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:59 fault injection: enabled 1970/01/01 00:05:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:59 net packet injection: enabled 1970/01/01 00:05:59 net device setup: enabled 1970/01/01 00:05:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:59 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:05:59 USB emulation: enabled 1970/01/01 00:05:59 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:59 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:59 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:59 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:04 fetching corpus: 50, signal 30113/33271 (executing program) 1970/01/01 00:06:08 fetching corpus: 100, signal 50673/54580 (executing program) 1970/01/01 00:06:12 fetching corpus: 149, signal 59268/64021 (executing program) 1970/01/01 00:06:15 fetching corpus: 198, signal 66069/71571 (executing program) 1970/01/01 00:06:18 fetching corpus: 247, signal 71083/77288 (executing program) 1970/01/01 00:06:19 fetching corpus: 296, signal 74146/81090 (executing program) 1970/01/01 00:06:22 fetching corpus: 346, signal 79082/86478 (executing program) 1970/01/01 00:06:25 fetching corpus: 395, signal 84814/92463 (executing program) 1970/01/01 00:06:27 fetching corpus: 445, signal 88060/96143 (executing program) 1970/01/01 00:06:29 fetching corpus: 492, signal 91203/99687 (executing program) 1970/01/01 00:06:32 fetching corpus: 542, signal 94538/103209 (executing program) 1970/01/01 00:06:35 fetching corpus: 592, signal 97057/105969 (executing program) 1970/01/01 00:06:39 fetching corpus: 642, signal 99424/108614 (executing program) 1970/01/01 00:06:42 fetching corpus: 691, signal 102999/112095 (executing program) 1970/01/01 00:06:44 fetching corpus: 740, signal 105439/114601 (executing program) 1970/01/01 00:06:48 fetching corpus: 789, signal 108208/117337 (executing program) 1970/01/01 00:06:51 fetching corpus: 835, signal 110955/119998 (executing program) 1970/01/01 00:06:54 fetching corpus: 884, signal 112991/121995 (executing program) 1970/01/01 00:06:56 fetching corpus: 930, signal 114907/123919 (executing program) 1970/01/01 00:06:58 fetching corpus: 980, signal 117474/126217 (executing program) 1970/01/01 00:07:01 fetching corpus: 1029, signal 118902/127665 (executing program) 1970/01/01 00:07:04 fetching corpus: 1079, signal 120649/129256 (executing program) 1970/01/01 00:07:06 fetching corpus: 1127, signal 122244/130719 (executing program) 1970/01/01 00:07:09 fetching corpus: 1177, signal 123878/132180 (executing program) 1970/01/01 00:07:12 fetching corpus: 1227, signal 125464/133584 (executing program) 1970/01/01 00:07:14 fetching corpus: 1276, signal 127147/135024 (executing program) 1970/01/01 00:07:17 fetching corpus: 1324, signal 128265/136023 (executing program) 1970/01/01 00:07:19 fetching corpus: 1373, signal 129871/137300 (executing program) 1970/01/01 00:07:21 fetching corpus: 1422, signal 131351/138500 (executing program) 1970/01/01 00:07:24 fetching corpus: 1471, signal 132456/139371 (executing program) 1970/01/01 00:07:27 fetching corpus: 1519, signal 133568/140251 (executing program) 1970/01/01 00:07:29 fetching corpus: 1567, signal 134722/141141 (executing program) 1970/01/01 00:07:31 fetching corpus: 1616, signal 136352/142203 (executing program) 1970/01/01 00:07:33 fetching corpus: 1666, signal 137549/143028 (executing program) 1970/01/01 00:07:36 fetching corpus: 1716, signal 138998/143984 (executing program) 1970/01/01 00:07:38 fetching corpus: 1765, signal 140023/144641 (executing program) 1970/01/01 00:07:41 fetching corpus: 1815, signal 141084/145334 (executing program) 1970/01/01 00:07:44 fetching corpus: 1861, signal 142836/146303 (executing program) 1970/01/01 00:07:47 fetching corpus: 1910, signal 144203/147028 (executing program) 1970/01/01 00:07:49 fetching corpus: 1960, signal 145176/147575 (executing program) 1970/01/01 00:07:54 fetching corpus: 2010, signal 146469/148219 (executing program) 1970/01/01 00:07:57 fetching corpus: 2056, signal 147329/148638 (executing program) 1970/01/01 00:07:57 fetching corpus: 2065, signal 147433/148722 (executing program) 1970/01/01 00:07:57 fetching corpus: 2065, signal 147433/148758 (executing program) 1970/01/01 00:07:57 fetching corpus: 2065, signal 147433/148782 (executing program) 1970/01/01 00:07:57 fetching corpus: 2065, signal 147433/148809 (executing program) 1970/01/01 00:07:58 fetching corpus: 2065, signal 147433/148838 (executing program) 1970/01/01 00:07:58 fetching corpus: 2065, signal 147433/148874 (executing program) 1970/01/01 00:07:58 fetching corpus: 2065, signal 147433/148902 (executing program) 1970/01/01 00:07:58 fetching corpus: 2065, signal 147433/148927 (executing program) 1970/01/01 00:07:58 fetching corpus: 2065, signal 147433/148953 (executing program) 1970/01/01 00:07:58 fetching corpus: 2066, signal 147436/148980 (executing program) 1970/01/01 00:07:58 fetching corpus: 2066, signal 147436/149006 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147436/149041 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147436/149070 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147441/149100 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147441/149137 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147441/149170 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147441/149194 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147441/149224 (executing program) 1970/01/01 00:07:59 fetching corpus: 2066, signal 147441/149255 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149291 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149320 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149351 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149387 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149409 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149446 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149478 (executing program) 1970/01/01 00:08:00 fetching corpus: 2066, signal 147441/149508 (executing program) 1970/01/01 00:08:01 fetching corpus: 2066, signal 147441/149540 (executing program) 1970/01/01 00:08:01 fetching corpus: 2066, signal 147441/149571 (executing program) 1970/01/01 00:08:01 fetching corpus: 2066, signal 147441/149598 (executing program) 1970/01/01 00:08:01 fetching corpus: 2066, signal 147441/149621 (executing program) 1970/01/01 00:08:01 fetching corpus: 2066, signal 147441/149644 (executing program) 1970/01/01 00:08:01 fetching corpus: 2067, signal 147463/149666 (executing program) 1970/01/01 00:08:01 fetching corpus: 2067, signal 147463/149666 (executing program) 1970/01/01 00:09:50 starting 2 fuzzer processes 00:09:50 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:09:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) [ 624.021542][ T2050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.504920][ T2050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.282558][ T2049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.933323][ T2049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.371604][ T2050] device hsr_slave_0 entered promiscuous mode [ 635.431096][ T2050] device hsr_slave_1 entered promiscuous mode [ 637.013513][ T2049] device hsr_slave_0 entered promiscuous mode [ 637.081325][ T2049] device hsr_slave_1 entered promiscuous mode [ 637.139214][ T2049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.143488][ T2049] Cannot create hsr debugfs directory [ 643.180058][ T2050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 643.339178][ T2050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.589494][ T2050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.848919][ T2050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 644.699876][ T2049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 644.922904][ T2049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 645.050277][ T2049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 645.198513][ T2049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.251945][ T2050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.521592][ T2049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.052712][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.154773][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.474569][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.585122][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.067596][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.104536][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.379461][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.423080][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.649855][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 661.922906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.531088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.550716][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.698731][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.724793][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.742290][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.773588][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.033363][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.123842][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.192493][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.882541][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 664.208799][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 664.794046][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 664.853571][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 665.083064][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 665.160760][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.518167][ T2049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 668.910364][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.934780][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 670.393438][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 670.421476][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.024067][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 681.094415][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.003072][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.189309][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 687.223033][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 687.253880][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 687.359267][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 687.392702][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 687.479267][ T2050] device veth0_vlan entered promiscuous mode [ 687.860004][ T2050] device veth1_vlan entered promiscuous mode [ 688.769357][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 688.821366][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 688.973102][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.008786][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 689.150047][ T2049] device veth0_vlan entered promiscuous mode [ 689.649495][ T2050] device veth0_macvtap entered promiscuous mode [ 689.826942][ T2049] device veth1_vlan entered promiscuous mode [ 689.907478][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 689.938138][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 689.970089][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.050437][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.144405][ T2050] device veth1_macvtap entered promiscuous mode [ 691.107940][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.263052][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.490230][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 691.519058][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.781125][ T2050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.783561][ T2050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.784669][ T2050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.798019][ T2050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.996607][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 692.035061][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.327481][ T2049] device veth0_macvtap entered promiscuous mode [ 692.712786][ T2049] device veth1_macvtap entered promiscuous mode [ 694.149465][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 694.189273][ T2116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 694.863367][ T2049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.878756][ T2049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.880603][ T2049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.882238][ T2049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.333284][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.370831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:11:39 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:11:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) 00:11:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) 00:11:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:11:45 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) 00:11:47 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:11:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) 00:11:54 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) 00:11:54 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:11:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002e00)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450007"], 0x0) 00:12:01 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:12:04 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:12:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:12:10 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:12:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x497a748ae5e8d39b, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 00:12:16 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:12:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x497a748ae5e8d39b, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 00:12:22 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) 00:12:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x497a748ae5e8d39b, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x30}}, 0x0) [ 744.890883][ T26] audit: type=1804 audit(743.910:2): pid=2786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/10/file0" dev="vda" ino=637 res=1 errno=0 00:12:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x497a748ae5e8d39b, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 00:12:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 751.987476][ T26] audit: type=1804 audit(750.990:3): pid=2795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/11/file0" dev="vda" ino=636 res=1 errno=0 00:12:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 754.787769][ T26] audit: type=1804 audit(753.810:4): pid=2797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir338054665/syzkaller.XZohh0/11/file0" dev="vda" ino=645 res=1 errno=0 00:12:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 757.014652][ T26] audit: type=1804 audit(756.040:5): pid=2802 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/12/file0" dev="vda" ino=640 res=1 errno=0 00:12:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) 00:12:37 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 759.917373][ T26] audit: type=1804 audit(758.940:6): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir338054665/syzkaller.XZohh0/12/file0" dev="vda" ino=640 res=1 errno=0 [ 760.289561][ T26] audit: type=1804 audit(759.280:7): pid=2806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/13/file0" dev="vda" ino=645 res=1 errno=0 00:12:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) 00:12:41 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 763.876414][ T26] audit: type=1804 audit(762.900:8): pid=2809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/14/file0" dev="vda" ino=640 res=1 errno=0 [ 764.408530][ T26] audit: type=1804 audit(763.430:9): pid=2810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir338054665/syzkaller.XZohh0/13/file0" dev="vda" ino=645 res=1 errno=0 00:12:44 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 768.094319][ T26] audit: type=1804 audit(767.120:10): pid=2812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/15/file0" dev="vda" ino=640 res=1 errno=0 00:12:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 769.236788][ T26] audit: type=1804 audit(768.260:11): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir338054665/syzkaller.XZohh0/14/file0" dev="vda" ino=645 res=1 errno=0 00:12:48 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) 00:12:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 771.413419][ T26] audit: type=1804 audit(770.440:12): pid=2816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/16/file0" dev="vda" ino=640 res=1 errno=0 [ 772.533158][ T26] audit: type=1804 audit(771.520:13): pid=2818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir338054665/syzkaller.XZohh0/15/file0" dev="vda" ino=645 res=1 errno=0 00:12:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) 00:12:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 775.276472][ T26] audit: type=1804 audit(774.300:14): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/17/file0" dev="vda" ino=640 res=1 errno=0 [ 775.824015][ T26] audit: type=1804 audit(774.850:15): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir338054665/syzkaller.XZohh0/16/file0" dev="vda" ino=645 res=1 errno=0 00:12:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) 00:12:56 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) [ 778.554735][ T26] audit: type=1804 audit(777.580:16): pid=2825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/18/file0" dev="vda" ino=640 res=1 errno=0 00:12:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x6000000, 0x40000000000401}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, r0, 0x2c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delnexthop={0x18, 0x69, 0x1, 0x70bd2d}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x3, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0xff, 0x5, 0x57, 0x28, @local, @remote, 0x20, 0x80, 0x8000, 0x6}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@loopback, @remote, @local, 0xffff8b42, 0xfffb, 0x90d, 0x100, 0x7f, 0x2000068, r5}) sendfile(r1, r2, &(0x7f00000000c0)=0x10000, 0x100) [ 783.067750][ T26] audit: type=1804 audit(782.090:17): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2697831303/syzkaller.SjyoZ3/19/file0" dev="vda" ino=640 res=1 errno=0 00:13:02 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:06 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:10 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) [ 793.186971][ C1] hrtimer: interrupt took 1347500 ns 00:13:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:16 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:21 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:23 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:26 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:28 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:32 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:33 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/135, 0x87) write$dsp(r0, &(0x7f00000002c0)="9f078dd42321c613200bc0319b28c30068d7aa7efbc827a1b4da88b38da07c2c9135e9982ecefdaacfc26648efd4692844843e791d1f91ef4201b0c202b314b5", 0x40) 00:13:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x3}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:13:39 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:13:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x3}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:13:42 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:13:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x3}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:13:45 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:13:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x3}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:13:47 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:13:50 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:13:51 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:13:55 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:13:57 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:01 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5441, 0x0) 00:14:03 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:06 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:06 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:08 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:10 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:13 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:14 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) 00:14:18 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 00:14:19 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, r2, 0x22}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0xfffffffffffffc61}, 0x14}}, 0x0) close(r0) [ 862.108519][ T2740] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 862.693017][ T2740] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 862.881764][ T2740] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.883637][ T2740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 862.901313][ T2740] usb 1-1: SerialNumber: syz [ 864.880650][ T2740] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 865.140081][ T2740] usb 1-1: USB disconnect, device number 2 [ 865.590424][ T2740] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 00:14:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffffff, 'bond_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="4f46cc0cae1b"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x197) 00:14:28 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 870.184578][ T2928] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead 00:14:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffffff, 'bond_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="4f46cc0cae1b"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x197) [ 872.930226][ T2692] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 873.419979][ T2692] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 873.520459][ T2692] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.522312][ T2692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 873.523761][ T2692] usb 1-1: SerialNumber: syz [ 876.131509][ T2692] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 876.432810][ T2692] usb 1-1: USB disconnect, device number 3 [ 876.564580][ T2692] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 00:14:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffffff, 'bond_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="4f46cc0cae1b"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x197) 00:14:40 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 00:14:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffffff, 'bond_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="4f46cc0cae1b"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x197) [ 883.908975][ T2039] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 884.349287][ T2039] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 884.550395][ T2039] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.551986][ T2039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 884.553345][ T2039] usb 1-1: SerialNumber: syz [ 886.542032][ T2039] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 886.762459][ T2039] usb 1-1: USB disconnect, device number 4 [ 887.024119][ T2039] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 00:14:50 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 00:14:50 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 895.254166][ T2039] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 895.702702][ T2039] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 895.828318][ T2739] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 896.240017][ T2039] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.241278][ T2039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 896.242257][ T2039] usb 2-1: SerialNumber: syz [ 896.318638][ T2739] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 896.511765][ T2739] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.513654][ T2739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 896.537449][ T2739] usb 1-1: SerialNumber: syz [ 897.949314][ T2739] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 897.952747][ T2739] CPU: 0 PID: 2739 Comm: kworker/0:5 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 897.954840][ T2739] Hardware name: riscv-virtio,qemu (DT) [ 897.957415][ T2739] Workqueue: usb_hub_wq hub_event [ 897.958791][ T2739] Call Trace: [ 897.959475][ T2739] [] dump_backtrace+0x2e/0x3c [ 897.960823][ T2739] [] show_stack+0x34/0x40 [ 897.961919][ T2739] [] dump_stack_lvl+0xe4/0x150 [ 897.963060][ T2739] [] dump_stack+0x1c/0x24 [ 897.963938][ T2739] [] panic+0x24a/0x634 [ 897.964750][ T2739] [] schedule+0x0/0x14c [ 897.966129][ T2739] [] preempt_schedule_common+0x4e/0xde [ 897.967391][ T2739] [] preempt_schedule+0x34/0x36 [ 897.968278][ T2739] [] __kernfs_new_node+0x5e8/0x5f2 [ 897.969217][ T2739] [] kernfs_new_node+0x66/0xbe [ 897.970088][ T2739] [] __kernfs_create_file+0x4e/0x1e8 [ 897.971026][ T2739] [] sysfs_add_file_mode_ns+0x138/0x254 [ 897.972007][ T2739] [] internal_create_group+0x274/0x722 [ 897.972990][ T2739] [] internal_create_groups.part.0+0x64/0xe8 [ 897.974030][ T2739] [] sysfs_create_groups+0x2c/0x48 [ 897.975009][ T2739] [] device_add+0x656/0x129e [ 897.976290][ T2739] [] netdev_register_kobject+0xcc/0x208 [ 897.977420][ T2739] [] register_netdevice+0x8ee/0xc6a [ 897.978472][ T2739] [] register_netdev+0x3a/0x5a [ 897.979456][ T2739] [] usbnet_probe+0xe5a/0x14c8 [ 897.980525][ T2739] [] usb_probe_interface+0x21c/0x57a [ 897.981781][ T2739] [] really_probe+0x1a6/0x89e [ 897.982905][ T2739] [] __driver_probe_device+0x24a/0x2d4 [ 897.984343][ T2739] [] driver_probe_device+0x60/0x1a4 [ 897.985265][ T2739] [] __device_attach_driver+0x17c/0x224 [ 897.986584][ T2739] [] bus_for_each_drv+0x132/0x1a6 [ 897.987471][ T2739] [] __device_attach+0x1e0/0x372 [ 897.988364][ T2739] [] device_initial_probe+0x1c/0x26 [ 897.989224][ T2739] [] bus_probe_device+0x144/0x154 [ 897.990408][ T2739] [] device_add+0x91e/0x129e [ 897.991714][ T2739] [] usb_set_configuration+0xafe/0xf6a [ 897.993107][ T2739] [] usb_generic_driver_probe+0xb2/0x122 [ 897.994779][ T2739] [] usb_probe_device+0xa8/0x204 [ 897.996556][ T2739] [] really_probe+0x1a6/0x89e [ 897.997703][ T2739] [] __driver_probe_device+0x24a/0x2d4 [ 897.999048][ T2739] [] driver_probe_device+0x60/0x1a4 [ 898.000824][ T2739] [] __device_attach_driver+0x17c/0x224 [ 898.002077][ T2739] [] bus_for_each_drv+0x132/0x1a6 [ 898.003333][ T2739] [] __device_attach+0x1e0/0x372 [ 898.004897][ T2739] [] device_initial_probe+0x1c/0x26 [ 898.006863][ T2739] [] bus_probe_device+0x144/0x154 [ 898.008836][ T2739] [] device_add+0x91e/0x129e [ 898.010244][ T2739] [] usb_new_device+0x5c8/0xd78 [ 898.011427][ T2739] [] hub_event+0x1b3e/0x3364 [ 898.012607][ T2739] [] process_one_work+0x654/0xffe [ 898.013705][ T2739] [] worker_thread+0x360/0x8fa [ 898.014838][ T2739] [] kthread+0x19e/0x1fa [ 898.016695][ T2739] [] ret_from_exception+0x0/0x10 [ 898.018684][ T2739] SMP: stopping secondary CPUs [ 898.022077][ T2739] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:20:21 Registers: info registers vcpu 0 pc ffffffff8011c6fc mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000080 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff8010b26a mcause 0000000000000009 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8011c6fc x2/sp ffffaf80106b1e70 x3/gp ffffffff85863ac0 x4/tp ffffaf800fe56100 x5/t0 ffffffff84a9afb8 x6/t1 fffff5ef020d63c4 x7/t2 0000000000000000 x8/s0 ffffaf80106b1fc0 x9/s1 1ffff5f0020d63d4 x10/a0 ffffaf80106b2040 x11/a1 00000000000f0000 x12/a2 ffff8f801584e000 x13/a3 ffffffff8011c6fc x14/a4 0000000000040000 x15/a5 0000000000040000 x16/a6 0000000000f00000 x17/a7 ffffaf80106b1e27 x18/s2 ffffaf80106b2080 x19/s3 ffffaf80106b2040 x20/s4 0000000000000000 x21/s5 0000000000000001 x22/s6 ffffffff8588c1a0 x23/s7 ffffffff8588c3e0 x24/s8 ffffaf80106b1f40 x25/s9 ffffffff84a88520 x26/s10 ffffffff858655c0 x27/s11 ffffaf80106b2120 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef020d63c4 x30/t5 fffff5ef020d63c5 x31/t6 ffffaf80106b1e38 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80115a04 mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff831a195c sepc ffffffff8010b26a mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff801159f6 x2/sp ffffaf8010737350 x3/gp ffffffff85863ac0 x4/tp ffffaf80073ee100 x5/t0 0000000000046000 x6/t1 5a50cfdc1f31be00 x7/t2 000000c000587e5c x8/s0 ffffaf8010737470 x9/s1 ffffffff8343c840 x10/a0 ffffaf80073eeb1c x11/a1 0000000000000007 x12/a2 1ffff5f000e7dd63 x13/a3 ffffffff801159f6 x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 0000000000f00000 x17/a7 ffffffff80b08bfe x18/s2 ffffaf8010737400 x19/s3 ffffaf80073ef100 x20/s4 ffffffff8586fd20 x21/s5 ffffaf80073ee100 x22/s6 ffffffff86c1a620 x23/s7 0000000000001000 x24/s8 ffffffff85889780 x25/s9 1ffff5f0020e6e70 x26/s10 ffffaf805a9e7418 x27/s11 ffffffff8016da88 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f0020e6e18 x31/t6 0000000000083fe0 f0/ft0 3f8456c1412572c8 f1/ft1 3f847ae147ae147b f2/ft2 41cd98d35a063027 f3/ft3 416312d000000000 f4/ft4 4120abe000000000 f5/ft5 4036fa2f045e7833 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000