last executing test programs: 4.730860783s ago: executing program 2 (id=2068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x398e77003fe2742}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x4008845) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xe}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200408c0}, 0x24000084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x7, 0xffff425c, {{0x8, 0x4, 0x0, 0x4, 0x20, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast2, @multicast2, {[@end, @end, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x5, ';EI'}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@deltfilter={0xec, 0x2d, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff7}, {0xfff2, 0x6}, {0x6, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x87}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7c}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x2, 0xfb}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x80, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x10}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xb}}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x0, 0xee, 0x5, {0x5, 0x2, 0x7, 0x4, 0x7ff, 0x7}, {0x2, 0x1, 0x3, 0x8, 0x6, 0x8}, 0x0, 0x6, 0x6}}]}, @TCA_FW_MASK={0x8, 0x5, 0xffffffff}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = syz_open_dev$hiddev(&(0x7f0000000600), 0x4, 0x460001) ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f0000000640)) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14, 0x80800) sendto$packet(r7, &(0x7f0000000700)="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", 0xfc, 0x10, &(0x7f0000000800)={0x11, 0xc, r5, 0x1, 0xc, 0x6, @remote}, 0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3e8, 0x20, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000091}, 0x8000) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x300, 0x70bd27, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x800) r9 = syz_open_dev$mouse(&(0x7f0000000a80), 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000bc0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in6=@private0, 0x4e23, 0x8, 0x4e24, 0x7f09, 0xa, 0x10, 0x20, 0x89, 0x0, r10}, {0x8, 0xffffffff, 0x200, 0xffffffffffffffff, 0x9, 0x1, 0xa6b8, 0x7}, {0x101, 0x800, 0x1, 0x2}, 0x400, 0x0, 0x2, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x2, 0xd2, 0xa49, 0x6, 0xfffffffd}}, 0xe8) write$UHID_INPUT(r9, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000001d80)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, @nl=@unspec, @in={0x2, 0x4e21, @private=0xa010102}, 0x8, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001d40)='gre0\x00', 0x8, 0x5, 0x8d0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={r9, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000002f80)={'syztnl2\x00', &(0x7f0000002f00)={'ip6gre0\x00', r5, 0x2f, 0x1, 0x0, 0xffffffc0, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00', 0x1, 0x7807, 0x10, 0xe}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000030c0)={{r7, 0xffffffffffffffff}, &(0x7f0000003040), &(0x7f0000003080)='%-010d \x00'}, 0x20) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003100)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x8, '\x00', r8, r9, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0x29, 0x9, &(0x7f0000001e40)=@raw=[@jmp={0x5, 0x1, 0x5, 0x1, 0x1, 0x4, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x1000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000001ec0)='GPL\x00', 0x6, 0x1000, &(0x7f0000001f00)=""/4096, 0x40f00, 0x0, '\x00', r13, @fallback=0xb, r9, 0x8, &(0x7f0000002fc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000003000)={0x3, 0x6, 0x6}, 0x10, 0x0, r9, 0xa, &(0x7f0000003180)=[r14, r9, r15, r9, r9, r9, r9, r9], &(0x7f00000031c0)=[{0x4, 0x5, 0x8, 0x1}, {0x3, 0x1, 0xf, 0xc}, {0x0, 0x2, 0x26330, 0x1}, {0x5, 0x3, 0x5, 0x3}, {0x4, 0x1, 0xe, 0x4}, {0x1, 0x4, 0xb, 0x5}, {0x1, 0x5, 0xf, 0x8}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x2, 0x3}, {0x5, 0x5, 0x8}], 0x10, 0xd4}, 0x94) socket(0xa, 0x80000, 0x2b) syz_emit_vhci(&(0x7f0000003340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "cf402f5a25733c804b0b9f305e8cb475e275ffcac5bf407e209db7c66475b25d1834c209d1fba93adeafa71437e98034a9a83fde2c2bbf1fc2a8fc946cb65781668c4ad0fc84fb9da92f0a13991965df157060bf4486ad587b183d72e0b0ef2581da703d2e55e1ae64b0e53576ac5707279f455e76d72793bb5129425806b407991f0f6ef98c7b40449b31cee026218da6aa04a918c74b61fa833e70b7fad90c5711ac595be9838f910d26e07c958d0816d88122952f40a0c25d3fa5ecf748d201e0c4dffdf1936548e95f8126edfa433ad0caa1d1b2e626ea7d65a5d236be67403637bc17ced6464927a73c78690928500434eb76b6b2e4df6967464535e05c539803af0156a05a147106b9eeed31ab0ca11b5106a24ee41ab6400d25bdf311fd455fd380d04d1a8918a5e51e5a35fd9e19c65b6f3d23c432e5f27d07e9772194c16fa4500b90ab9adafb914d948d6bc82192b0ad260532a02a2253c31292431cd711424de9924c51c547cb2153f7c52aa69fdf5ac9606cf134a2fc520dd674e452278e6c952f93cb1b8a66f46c7b71fda5bbd89246bc289be9c938ce6a9c34656746477822e3c15fdbe5bd5f430babfedb321bdf774e6a063b636f8baf2a8f8e5da305448b42df0df28df1b9de1b9ce01330ca4e1d99998bb4af840510e24f890821cc7d95e8d7c2e3bb32ed521d722909cc30808758c9548e73eed4b0c840f831e0a48d4d7c6b828704d1aea5647a777962d0a4f7e8f92b25df04050dac10d771646d9e24181570200e68647a1dd39ec4ae22d6de69b446f1ba760ba3d38b7a26a3237bc8cce6bbcb6f7171ef7fbe7c288305156a559e79183cf04b096d5cabf77cb723eaa7513e3f5a80df788874b91ba2d7028e67b3ea088bac40d3b00ffaedb070db03033f1c9848dae5d342801c233153ba2cb4f13cc7aff71d4ceee2fe4875b85c8ee46557a5fd63513349b2a4c6268bcd257b5fd99c4ec56e4f688c866f186170c126b21aeb71da1ce2b6522fd4bc19dd6c1efe313634e5f76ee5b5bbf0812a56c95dde34bc828fab279e89f98eb23a93c9f6e25a0053732dc75f7584d663271a0317e9d77b6ff08362b8df187a5475d4cdee3ec9c22cf0c9f778665a3c5860c2375c30e38aa705f10050e7e1a112361f854b0393d6c6e19f23e15d09d581c5f1ad25b3dced2d32e015cb248fae1119da2dadac4f2212b4a6524cd3577fd8855cb5c5690f80d22add7db47afec749825972cec1077e4d803ed38a85ba19ef22a74fa9f1cb90eeaa0776d14f29c1481faefec735240f164fc35cf4d7418bc7815e4ad74fcc3859fd8baab7b70490f823de62c1848f7af8c075e377658ab60874746072cc2421676f1965159333254f732ad12e17e6bde7c3e8f3569aa4566228af0d00e919bc9d285273dfe35a77c8147113f2f8c7fef450fa475b03f03fd62a5c778b56bd40beb3b738735e50b6f1439f686e1d253bebfa9faef2463cbc80980017adfb3057b3e6cfe493587a8b06a67d5bd0e8e4920fac16d44fdaef026e90cc085c0de74e09b333bd950b67d506024d49777a424fdb02e3a855c4556f539f6756992f3354f4c05a0accc44db9507c7c44aff08eee85d8378a8d8ceb6334e7a772873fe216e7b2fa5ca7294a683cc5011104efe28607fa4eda014b76cce4c3e77ae583019480883f421b71ffc591dcebb3e951680828a507f90763ae81471c0d86b4ffc4eafbd839fe5831802c8d0b02db135cd5b0cda843c9750f80e3962a762e104ab02f97cd962b7372bed5a91d5464fe3cb1c9b3bb754056dd2bcf2f25a355784a9dc461468443f900ca16caa350d8d664f20b062c021fc5f9cd69186204c51a8909961607dd5500211af8d65d051e15de32653cab54b59a4f49fbb55d70db3a05a46722bad3b45d4868a13d025ac3eab70e3bc2367a92321ae1cbfd200564324ff5b2405e649b876e3eaae5276d559563f16045bdb7d3712700a61a12b4d975927b36f477d988716e2dfe99546df2761a16a8f786d5dcbab0ffcb2d2d7227c5e0dc0fb9e70f19ff91fa88e6bef1942735a5134926da8b1672f0d74aed92b01df9d23b320623bc73062af804a18edc47bc7d116a39acc483124b704f355bacccdfecc35ad41f14199ed0c80344293e64355ac77e5a2a8b02b5fe865708672bb3ca740ac63e652cf75b6d23f20e8864da08c49685d72afba883b6d38a3f03c2a4fb855a7b1f9217b2f81e1cdc423333dd0146f159fefb33f0a5777d21856b05082f9ad08e8f1f3398f4c61110277063d3010398b71d022fb84d883ecc9a79e519a8f7ccee796fedf182d1d20e9d887482578ae1acdf0c57e2c42abf43e53e1a50c5baa54614a14b2cebb2064c976e85c15a258be20b4b286361719c8e655cc9005e691f5b2b436be7218605ce7b76eaa10730b8119c8f65de54014d274d158bc45a8999d4a431a74f632c4154c63241a1ace757136a90b1485e695fdfab14161b29d264c3659653edcd7a873551465f9cae65f4bda8af21608f6bb58cebbf0ec165cada4fbe9d45fc017a906342bc517d1bd39db0ce376d90a6dcb53f00943c639ef3bf6ebfd5822d29b044de8d1b171f79ab5203bee9072733dcb4475270447e8d30debef0296ea6af7a219a76e96942b9f84d8b03d07611c3c4f636b47de9ad71c665df3b60fb2f836453e21c72504a0bb4fef9f19935e7beebe9341362a3fd8ceea1e98a350d78fcbc001c480354f9832bf7509bc93c9a75e76864bd73a88b65c14846b6c0a971cc03af9ee92847810e992c55d6be7686c9ec8425d3dfa93997b97016763817d41dfee67595a2aaeeb6bbce578b77a2ce5009465309a0a7d31ce2dcceecf30220765c03b34c9e8a3131d2caeb99415003ec99a8b5a8780b4079be1edbcdc2aeb25a1851747e80e643677813002a49b4b8edd9c57df5f3da4a4f5705a3d38aab73ba9ee157cedcdcf8e1b05ef91a83599578990079393ae7f60b3d062622d302a6f8fbdff97191d479d855af38e87b2b23a535d22a02a29d34b6c4bf8cf130c8d17fe7b704be1857f171074c3c0a37097fe556ef92e6de164ccf662f1d8b094c2d05dbc72c684640a5447d47a0e4be26b2f079de86874d0c839453b98670ce61316186f88fd52046aa8ffe786548e579f7fa0bcf4918ce41f079db88a5c5c4aff8579bfb21ae486201c478665023cd1adbfedc41cbb4aff370a95b02e2f8d7a38d815756dec28e6101f8a8c5e81a1556639112eb6910169fe89a512df62f0429718af167232c921a137131d0bb6a33a002b4a83f9f89094441cd014cb731d19917e42e2d8baf36948632a66a703484d209dc197e8d6be4f806cb4674c38f6e70270f00cf51c099d6965bfffaafd543339212ad87cab97f523a44b2a46dd62e782d9e359815e6531fb90854758dc45ec06eae3426b899fb7cf6e431760b128c65332f29347caefefd90f72269ee0693307f09ba231a9dacc4ced5223b38c95264d52d1214546ff18fc57be2dfbc56e6e025f657bdac0dbecdb771f4deb4c54414fc5c4dedebbb68184da577d4793ffaac6ee341d00e845246eef06562f08530461698fff989cf08a9769ba0ac9dac34711875e9bb14516a1ac7c240ee7ba8c487226641b1d4915897ae82c7a604b4a58af25e0e173b03d5ccb1cce24847f38207bd019a1dd44233f8fbfd9b58d82fd4a0e9212b81362c570ab1680f75576436a54866e0cdcb2bf61529d895310e05e0715dc0b7b578c9ccd94f547adbc87283f68daa6422054ba0c3b9b357b3cfb78ae7650663b38e08c19d6e100df848176fd27b0d8f8cf59475f35da7422a918e6b22decd2fa36eb795f409cdfe498bc1093a297be9b494ab72269d23855b24b3f5760a0bff3c16f60d26468a3b6fd0ed1fb85f0cad5c7cc565b03fbfbd31e8eccfc3fa534be0d4cad2b4e8b3d49460838b28b14aab6d3855c4f78a6b370546aeace33690768580d7db8b3dca55271d6c0d66d29f6d7990359815a9c63ba5376121bb812d368ac9a3d34810890a6d6cc9649ee28e592fc68465d7902a33326b140d5d069a4366d28435a4a156ff7e50afd2622140770a43c58e58035a2ef78f6dba9a375b5249dee2cbdfb07a068c61122e52fb4f28dbe10be3df4a81253645fb1386aa36ea03ab0f90e290ba000fe4a151a2cc9333ef63c49d47d0147b7e2ccdea79af958c1cf7d98c7cbea31c06baffff9231de9d8163078d2c5009c8ad1ecff59b4cd603b46d13feac6a4fc8f231522b231540a314236a15c62e9affc9332fad8d66943366f577415b947036c943755102f32488c88ed2c763ac0a1dc39bf4b40a326c6dc50ae51a92cdada76fcf9913811048a4cbf57267a10720a9127e034c325c2a5c19864f0250869da4f06b7b761e17cf1b214632bb21ee875e84ac6775d382235e68b318ca54c7f68c23b89c5b24f60593cd36da2dac3f42039c2a8521ead70bfc8c5baedf551b4448aa9f54f4dd01780c26db3779796177210b40079d21b00a6664deb7d795ac2cc96c29c803d1884454bf45df078bdf2b13d83eb9423bc3f7156a1bbacf4fb0df8ad3e2637233e08f625848edefb65454d52a0b9a715d53e993154a2fe1dd81cbe49120a2c58346b1f909ff0ed7b85fc20297a9bc3a912978f3311de40884d63c9248e1a301289bf62028fa6b6a9f03d79bc758ae972fd023c7f67f24c7d030ab53a885a42edd861b2102717c0bb7b55209cb23c5101e8d1085bbc20299ad2b438f79ff9dbbab3e0a86d9deebff420f44ce8cdc3a3f717163aff0eb18e7a3d5c31cbe08378f271d2d9197be780f54c0fffcd3d2648091b46c8b14a411666b769469200938ebf48944848dc1f3c4891b57ea7f0bc10f760b3702d6caae808a036ce58ed4a5a580af0a392de8448f68c0df5f35813625096bcbab26447b83a9e1deaa6388111b637b3b015930a913d3a9ded619409dfdaa8e32d8413a13cd9f315ae0373d3aec6dac7cc575202e0f2c5ea6012a8c33296fb930b5a4188ff067735fd2e739fb5e06245d6857f6ba2cd89851bbbf15cb1db1bd2813180186e729431fde56c75740c90e6da42afe0d5017daf95872777a407bb489cf8e166f2976077d443a1e4fe8255e3024a925d7c8c8482b0cc2a9ac2b224071707b50204794b3450d11012e3d3395f92b3ec3b37b94aef286b7b3bc42c1948bf39c7dd80adc02676fcc6ce6e690da593881870bb36e8b20a7e823556b481ee65e0bdcc4444a27bf4856fb82e027452759480885d06e1261f191f54a7827a40e73ed45b299565f4d0317d1dc5a1b0ffe98e1017227c3ebe57bd4e9a9fbf26e78c75d0810ff2f17f288766d357bff229b59b378b48d2e175366213edb5b9d7713e0a42cf7c3bb5927132af29004b2b40df0fb831f1acf92863811a07b3621fd3ac88311c60adcb722249e2288fffd4020805b06f13d3c7e1949e9f038b593b3a282ef5adfead2e2be8a79153dfe872cad92cf9ded2888390915eef758e0129d5162428d2d5c9f05db73ee65aad5c718619a6ae7bbbf4a6c4e0d65c0985e0d565cf0ab638a84ac3f029b0c5ce199c8ddb58d6519898fbf2f0b3393917c0473a16014fa8320b9dfb11a9aa686df01a952a5bf3df6db06538ff54c25903af3518bf5184561f029a5312f20f9c98571955536a63165550759565b20d67c516e0f889a123df368dd9e585505850dd59d8537f3058851cc991a86027294377dac873625722362f93f909bfce13ac6e45b0ba8b140c9e8bb60839bb85c946118996f7d5f"}, 0x1004) 4.629999927s ago: executing program 2 (id=2069): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000180)={0x7, 0x5, 0xffffffff, 0x0, 0x6, "c601795929bc88b2984fb6676c0e4a681e10cc"}) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1405, 0x821, 0x70bd29, 0x25dfdbfe, "", [{{0x8, 0x1, 0x40000002}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) 4.439942786s ago: executing program 2 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000208}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd70007c9bdf256300000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000900000059000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x4800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000140)={0x0, "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"}) set_mempolicy(0x4, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000208}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd70007c9bdf256300000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000900000059000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x4800) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f0000000080)) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000140)={0x0, "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"}) (async) set_mempolicy(0x4, 0x0, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 4.439304603s ago: executing program 2 (id=2071): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f00000000c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000140)={0x6, 0x4}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000180)=0x4) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000001c0)) splice(r0, &(0x7f0000000200)=0x81, r1, &(0x7f0000000240)=0x9, 0x10001, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000280)=""/163, &(0x7f0000000340)=0xa3) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000380)=0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000003c0)={0x1, 0x5, 0x3}) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000400)=""/116) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x810) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000580)=0x4) r4 = syz_usb_connect$uac2(0x2, 0xce, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x2, 0x10, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0xd, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xa, 0x40, 0xd7}, [@source_unit={0x8, 0x24, 0xa, 0x1, 0x3, 0xd3, 0x7}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x1, "d0f2"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x4e, "d2a8a55120a3"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x62}, @extension_unit={0xd, 0x24, 0x9, 0x3, 0x7fff, 0xc, "26962be72027"}, @processing_unit={0xb, 0x24, 0x8, 0x4, 0x3, [0x3, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x8, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xb, 0xfa, {0x8, 0x25, 0x1, 0x80, 0xc, 0xf, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x8, 0xff, 0x87, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xf, 0x7f, 0x1, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x14, 0x6, 0x40, {0x8, 0x25, 0x1, 0x80, 0xc, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x6, 0xff, 0x9, 0xff, 0xc}, 0x39, &(0x7f0000000700)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x8000, 0xf, 0x0, [0x3f00, 0x30, 0xf, 0x101ffff, 0x60]}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x2, 0xff0f, 0x5, [0xc030, 0xc03f]}]}, 0x1, [{0xde, &(0x7f0000000740)=@string={0xde, 0x3, "b2bb0e7594601c2ed9295762aab73249ebbc0c6243ab2c9254375e44ae2a423391401c058689a5f2102a827b229f43d215d9a3fb8404b7fce55d73697275acd4321ccb2b201da4cf28de866aad37644aad115ef051dcb8b5e66e0113cc1383bd68d8391cf9aadfc374bb4c47edadac294fcb47ef1fd6f21f481e5774e1fca421a63e7f0dcfcda71de1e4efb9f6f836c29703921b8fafd4b9b0176f48d6216f2e55e9257645f4f9e18b240831c7c44d7443ad8a4085d87c9f929c6afb2ef9a67c1f391821d682f040e83cfe4f9a818f67d67d61b5a7ca8f571564af1d"}}]}) syz_usb_control_io$uac2(r4, &(0x7f0000000940)={0x14, &(0x7f0000000880)={0x0, 0x30, 0x51, {0x51, 0xd, "eaff597284cfaa399bac7673353a4290b099c993d156a9f195847c80776a3932d9fdabc9d7735e38be8aa2228148517a17bb2cbae09138e01fd4fa49a8a5af18cfd47f012a84dca7e676edccea721c"}}, &(0x7f0000000900)={0x0, 0x3, 0x32, @string={0x32, 0x3, "3b43e75e79d91cbcbec92a2a6167cc347f6adc283c49acb16ecfa3943f9a0df3ca72edef68307c128e0503b909fc2b1e"}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x20, 0x15, 0x5e, "12b63e837f70d15f8f18f0681aa45907f72e177016ad0cfe4f5018470833078e310931a090932289bb3fbe721892df92952bd0768575365b22a6773de6bcbdfdd3e49b4a5de4a6c413c544f1c1c6ffd89f642072dd42013f6bd09b9e1cb5"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a80)={0x20, 0x81, 0x3, "fef555"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "eb29"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "8991"}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "9ede5495"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "a34142"}}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000c40)=""/57) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000c80)={0x0, 0x1}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000d00)={r5, 0x6, 0x10, 0x3, 0x8}, &(0x7f0000000d40)=0x18) syz_usb_control_io$uac2(r4, &(0x7f0000000f00)={0x14, &(0x7f0000000d80)={0x40, 0xf, 0xfe, {0xfe, 0x2, "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"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x20, 0x3, 0x40, "929f920be537aa8eee3def7c0710800755fe196d9b67cd00656b6765616f8782751c069ad6279d2166fd01ea01ab568404f1b8fa6e926420ba709b88d79ca626"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000001040)={0x20, 0x81, 0x2, "3412"}, &(0x7f0000001080)={0x20, 0x82, 0x1, '8'}, &(0x7f00000010c0)={0x20, 0x83, 0x1, "b9"}, &(0x7f0000001100)={0x20, 0x84, 0x1, 'L'}, &(0x7f0000001140)={0x20, 0x85, 0x3, "acfb3b"}}) ioctl$TIOCCBRK(r2, 0x5428) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000001200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001500)=[@text32={0x20, &(0x7f0000001480)="640f01c9c4e2790a120f350fa4fc050f78a3c7200000c744240000000000c74424027ccdfe31c7442406000000000f011c24b805000000b9e00000000f01c10f01c466660f3881540e8266ba410066ed", 0x50}], 0x1, 0x4, &(0x7f0000001540), 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x479d365a19b1b940}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24008010) 1.670210162s ago: executing program 0 (id=2102): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x4c}, 0x1, 0x2000000000000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) (async) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r5, 0x80796c) (async) ftruncate(r5, 0x80796c) pread64(0xffffffffffffffff, &(0x7f0000001300)=""/16, 0x10, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmmsg$inet(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="0a4d771b6ba865bf388f013d1c3c05bfb27c93220d5989e877b29c40e45a586df0ab0140a6dd80e38642e8051624bceb18cf536997a21e6b91769f308f62af8db2b36da21e58508749debd498ea5716110b73eedd03b548e7c0a1625b2aef1870b80e1d0fd74c8fbd56605680e677fd191087771189b66edf6ccf709a9668a9fbf9d5a9da3cd0da0913d859ce135f074775f7eb7655ed062b1e9605c0e8efe74e1a378c33734e16eb1f322f888896e4485b8e4b0056c7663f0", 0xb9}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="8641c398657b8008521126272bbb5a8e02e8448fa983c879b0a023bdb91f1a534a115a05653e34338e61d048cc5cfe98f95d326a5c111e40326c8f46f155dbaa8b350b39162567967885c21ddc6c9db715baaea51d59ba509594d81e837ea748c142525a2349ce80fcbdaec203e7", 0x6e}, {&(0x7f0000001580)="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", 0x1000}], 0x4, &(0x7f0000002580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x6c, 0x1, 0xf, [{@loopback, 0x9baa}, {@multicast1, 0x9}, {@broadcast, 0xda}, {@rand_addr=0x64010109, 0x9}, {@empty, 0x5}, {@broadcast, 0x4}, {@loopback, 0x6}]}, @end, @timestamp_addr={0x44, 0x24, 0x93, 0x1, 0x1, [{@multicast2, 0x5f}, {@private=0xa010100, 0x79c}, {@broadcast, 0xd}, {@local, 0x7fff}]}, @timestamp_prespec={0x44, 0x24, 0x2, 0x3, 0x5, [{@private=0xa010102}, {@broadcast, 0xfff}, {@loopback, 0x2}, {@rand_addr=0x64010101, 0x1ff0}]}, @timestamp_prespec={0x44, 0x24, 0x5b, 0x3, 0x0, [{@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0xe68}, {@private=0xa010100, 0x6}]}, @lsrr={0x83, 0x13, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @private=0xa010102]}, @generic={0x89, 0x4, "144d"}, @noop, @noop]}}}], 0x168}}], 0x2, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1, 0xd4e, 0x17) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1.511181485s ago: executing program 0 (id=2103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b011d0cfce62e9195a2d9c41b948c201679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a400", 0x31) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 1.439131145s ago: executing program 0 (id=2104): socket(0x1d, 0x3, 0x87) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00058700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) (rerun: 32) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x10000, 0x3) 1.438866005s ago: executing program 0 (id=2105): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0000000000'], 0x79) 1.381185372s ago: executing program 0 (id=2106): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="fa67d1601057a4214ed8a796bdd4f381171e4158a3678c004348f80e670348d164baf16c5cd730b20a535afdbfbe5ceca3a8e7a100132f2695460b88e78586c7e9f59ac9bf4d658f5e17cfd927c61ca346e43c4dac948d5fd5666cedde1a185aa76b5ac1588ec526ff35316a6e35db5624f745364e620ac9254f05f3422ed626dd8d48897aaf48240029552759b5f4a3da1367afdd7890e0f1056e6d", 0x9c}, {&(0x7f0000000080)="eada5eef206c7e5eccb99d", 0xb}], 0x2, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x98, 0x117, 0x2, 0x80, "c8f653cb44cbc1212ad84e09c550066ae597584b8a9750ed0fe05154db52fdc09e80095930fb7ee8efda5e9ba41a9ecfcbbea53bc670dd320ae3891ef0f38cf4189199d10564e3089304510170a46e8b8b794e13ff797bb04069824264749298c2317f0b77703fb98f2d4db8e369c073ccebbcdac34020f26e4051a9f42a78d1"}, @iv={0x70, 0x117, 0x2, 0x55, "902430c7b0abf7ae8402bbb3202d57671082c42e8b32f3139419109976ddf157ca4c136d9adbc8083307114ab13a304ad5ff9d9cbd90584a8c7217a621f2fb66575ca15b0a49ff70f76c3151fcb75d6e6532019749"}, @assoc={0x18, 0x117, 0x4, 0x5dae}], 0x138, 0x40c0}], 0x1, 0x20008000) ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 1.38097009s ago: executing program 2 (id=2107): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xa1) keyctl$update(0x2, r2, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800900000014000380100001"], 0x30}, 0x1, 0x0, 0x0, 0x34008814}, 0xc010) 770.374521ms ago: executing program 2 (id=2111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES64], 0x46) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x7fbfffff}], 0x1, 0x2000, 0x0) io_uring_setup(0xd4b, &(0x7f0000000100)={0x0, 0xa9f8, 0x8000, 0x1, 0xae, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008900fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 529.75654ms ago: executing program 3 (id=2116): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) (async) fchdir(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000810000"], 0x0, 0x26}, 0x28) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000000)={0xc, r5}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f00000003c0)) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x40, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xea, 0x8, 0x0, 0x0}}, 0x10) 529.598751ms ago: executing program 3 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x2, 0x0, 0x0, "7fa5bf073cff73aa"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfd, 0x0, 0xff, 0x0, 0x0, "71ec6d721744cd529f07f76cf8cfcad4c4ec6511ec028c5028564a56c2baed7f897fe841c155a2b2a4ca17947364f29d2f9c79224d13d6af5b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa7202aced6d8ea8d3bf1006e3df08b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18f2e7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea8587eee87ec5d42c3ef0619022c00", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x24004000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={r5, 0x101}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={r5, 0xfd, "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"}, &(0x7f0000000180)=0x105) 528.980697ms ago: executing program 3 (id=2118): r0 = gettid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r2 = socket$inet6(0xa, 0x2, 0xe) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0xd7, "04970260355010c93bcab638c5233bdc487eb70a2b1f6c6e17d300c1a769c21cf9279284bf574a2a1f6aa8175032397e77c2deeee23a31149d62dcdea4219a12c6ea4067e85c6bdfc3584c0c84c9d139e1d791862b09d0b3c2595681f955aac02c3799254bc8ccbefed163582b726995795c370190023fcd44bd87db38a03f6e6c2f0aab189f727c62df0d17e7316a85400b41e796c817577958f41a73381ef4633eaaebd8f39871f3e26341d131395e95aec97d3778322e203c90fa595ddc8ffa936325f5a496bae5e5a36846d1280e9e68b3cb86e8b7"}, &(0x7f0000000140)=0xfb) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000180)={0x5, 0x9, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1, 0x7b, 0x4, 0x6, "321144a5647c0698cb012a62d073283d0df4c59295a9083de0c1a263f071f537"}) r3 = socket(0x9, 0x3, 0xc6) r4 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x6, 0x4000) ioctl$FE_READ_SNR(r4, 0x80026f48, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x44, 0x0, "83632ecbe437d8447cfb2dbdcb752bb92ef3c5154f9baaec885df4b45078c4afcf190df8e692929b45059f2366dea090c823be573ea7d08d24947ecad3fc631584ad7a3d0930c3cd2953c85af13f88f0"}, 0xd8) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000380)={0x27, 0x3, 0x0, {0x1, 0x6, 0x0, '-]@-%\xd3'}}, 0x27) r7 = getpgid(r0) rt_tgsigqueueinfo(r0, r7, 0x10, &(0x7f00000003c0)={0xf, 0x9, 0x4ca}) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r8, 0x40096101, &(0x7f0000000880)={{&(0x7f0000000800)={'GENERAL\x00', {&(0x7f0000000540)=@adf_str={@format={'Dc', '3', 'NumConcurrentSymRequests\x00'}, {"439e975abccd4c0df11d3d3152a25ed9182fc6e2f012331a6f4c0148498972568dba32f2f85854ccd7276a27c8d11d6758e63062074f66f7fec384e4e38928aa"}, {&(0x7f0000000480)=@adf_str={@normal='NumberCyInstances\x00', {"7c817d0e88fd84033b1e05511262a2a7beca346a5168ef24dd72f3204e30c0d4212cc425248109a041209d5fe51b7c779cf3d7d46b68cd6ea267fdb6f253cc27"}}}}}, {&(0x7f0000000780)={'Accelerator0\x00', {&(0x7f00000006c0)=@adf_str={@normal='NumberCyInstances\x00', {"82c50c104609785bb8de464682452d067161ec0a9a4b9da97bfa5a3f4d28c5e199cc41969b62f4350ef0163fd7abdbb13412d0e3281952ea7e8357423d71889a"}, {&(0x7f0000000600)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingEnabled\x00'}, {0xa}}}}}}}}}, 0x9}) openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x20001, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x104, r9, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004}, 0x880) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x11c, r9, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xabb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x46e1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4040) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000d40)=0x100, 0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1ff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$vhost_msg(r11, &(0x7f00000010c0)={0x1, {&(0x7f0000000ec0)=""/212, 0xd4, &(0x7f0000000fc0)=""/244, 0x2, 0x1}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f0000001140)={0x3, 0x1, 'client1\x00', 0x6, "2503e8b5f1dd6625", "04586eaf75fbf52fca6851656964508cd75dc54c52ed5b6cd4739c8a15c06161", 0x80000000, 0x6}) mkdir(&(0x7f0000001200)='./file0\x00', 0x26) 368.126058ms ago: executing program 3 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000058000180440004001f0001000a000000000090040000000000000000000000000000000100000000100002000a00000000000000fe8000000000000000000000000000bb000000000d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) 367.013325ms ago: executing program 1 (id=2120): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x41, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0xfffffffe, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600)) 291.268648ms ago: executing program 3 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20ffef00", @ANYRES16=r1, @ANYBLOB="09032cbd7000000000001d0000000c0001800800030005000000"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20ffef00", @ANYRES16=r1, @ANYBLOB="09032cbd7000000000001d0000000c0001800800030005000000"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 289.979182ms ago: executing program 3 (id=2122): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="73634c109437ecc21d59669634805d0becb0c3143cdd44d26eca0cef27e261cb076d89d6dc1fa0a08d276716a1fffeb7dca0dc885e0ac61683f29d85b094404372aa152516d2b1696c7171f41118af88f2f1ca6f46632976bf6b0f84", 0x5c}, {&(0x7f0000000000)="f1e080f6f7", 0x5}, {&(0x7f00000001c0)="d691c9f220", 0x5}, {&(0x7f0000000200)="f16c247121c93f32e86e6f29a95dd89aeb695750587cfc06103ab113fb799b15e4861e7cb387d7a7a1c290dde8dfe045a950618e7ecb", 0x36}, {&(0x7f0000000240)="17e73f46ab82f92b10f8b8b701aed360f17d4139a0bae0101cec7c2c4e5d9536b92f5b38f124208ae89615474bc34606967370cd86abec5ec84214b599da034c7f0e61a06dc14534d5a1c2ffe8f077510cd00c27699d84463bc1f648da0fa61204c887deae79481715bc476622b0b0c8535274afd09653a86879f40bee6591b70fc6b0915a37d55977d0a594b559c6584d1ec8d91188fc8910491ed68a", 0x9d}, {&(0x7f0000000300)="f5052cc9c27f881217dc017dfd7aef53324c68a7cb334fac0bf1414eafc64fe40798ff69531c0eb0990963a68499979d", 0x30}, {&(0x7f0000000340)="5ab874f63914fe2f295c59ba9b52f79a5d181e8af5b628e713c19cfecea7de28df0c95845e598801b5c10b62e6d22c9e5fb14cb9ed3c769fa2f39e7c0144efe0a3ea6f9ad8a82d0e2d1b8ce934faf04e7c22ff8eedfbe97150b381d1a81753a0d242f8841be39f3cbceafa11b580da7148e7eef658027452fdd6df438b7426c14d159ab0497b1901ffb8910e2e8a3c8b0b18eb6d0f8eece9d479dd8209ac73afb0f0a0c497c64bf5be9480b45aad132993a620b7ebf07109c9205111f0e67d337ea67ac9f2f11d59caa4daa40c602f5178c7d68c4e3d52", 0xd7}, {&(0x7f0000000440)="ff1a89fb66aed48711dcfc7663ed95b4ea3d0dad98e29d28283e3b5dcf057e2bf399bdaf1387274bb5e7151e23df40c6253925c5319f795ab72bd2daf0878d34226f3e8df07d4af15861fd9fcc4efde673066a3f18d33af8bb1e764f23f74718ea822152e1b1d88cb73e9a6e", 0x6c}, {&(0x7f00000004c0)="2cf9740dca360f1b75216007fd1a4ed86d4e7457a42399ac54bcebf8454c42ed4cb9920c592a4f1a6d57dc0b395f52c394929cd4465dc251282d9846", 0x3c}], 0x9}}, {{&(0x7f00000005c0)=@generic={0x29, "6ccf0fc6c14133d003ad8bf200abcc752cc6f8fc89fb0a1937320f133b3808aba1d4102aad2edb934182da874bce1ee1af3f937e7f2e0426a2a3249e91fe471ea13fecaf9f94b41d41bb1c2bb0dc6d56bb154c1dc810339af0a112111f5283445d4ecf29f1b9bec9104665b2905f2248b3337bd1a7b551daf4e3bdaba884"}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)="0e5ee6c4b795998d7d86448d0bb10256413c1cf8c612e583526543bab93fca7a6b", 0x21}, {&(0x7f0000000680)="4a4b78d5c738b6a7c09e6d476729679071a70d68cf89b9514b05f49b67d8a4d2daf2d5c4963e97a291c88f6b5b74052c43ab3227e9c74f3e81b1cadfb1a2212c5f038a4b8839eb82095bb0f1b635933a1413cff6786e00e4bd739ee11bd4bd5933e6bcf6d9c04a535857dc69e76eee5061ec8f96c0ecf0f948972c55e6f8736c5bccb904b82b8fd9daee99592c0e4c6a987e3c939007254066c99e35eb81f481", 0xa0}, {&(0x7f0000000740)="e7af13b7c094343bf0362ab995b3d5d3c94ab6ec68796ea6825cacb4f90814ce231bbe92013335fe1367ef3dae7d5d91fac060a489b5efd4ea67c118bf1afb45f5ae9126b8de4b5c2814007c3f8e5c703e99deb59505d3888ea57e8e328a3311000c4ecbf28f4051a677e1dcc736ff35b6e275d19944e8c7ac83c4f86d0e9d9ba7", 0x81}, {&(0x7f0000000800)="417897badcb086fb8312a0170fea5b70371beb7fbb3e35648db978cda16577b7cc89720a2cdc506f6f2a467791b6c751bfbc0116ce6805598b822dfe5118ca50b1bd4a2adc7c89082b955fdf3004a3f7596ecd793c71e4883c29ce3a03ee64108aa59d54174d2b44b55aa8864b111155def347467664666d9f2e2c10d867d665e7918ff6367ba512e79f7cd5fd4122c7242d644302b1785e8a986160", 0x9c}], 0x4}}, {{&(0x7f0000000900)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)="4629c095cad1f0ff", 0x8}], 0x1, &(0x7f0000000a00)=[{0xc8, 0x134, 0x38f31b42, "99814a789bef764c0c501b1fa556b5b229222b4523205ed1104fdd107a98309fa6d77c65e84742971a4d786498543916d361f25b464faade4023d7b9c93b974ab319ac2d95952ee97be91d42c0f75a2e2b9f9ffb2007a931710c54ed75a5b6f1b9baa21c3eca6d6f125e29497ef8d096ca339096cddad21c9bb6b2e592b4205be21e6b24756f9b458921fe39d4b17610cce85bf623ca3ea3913c707c05ba6e57a4b9e5f30e85fc945e39a339fcacf8a082b3fd23"}], 0xc8}}], 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f5, 0x0, 0xa7e}]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0xfff8, 0x6, 0x4, 0x5}) 200.252151ms ago: executing program 1 (id=2123): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='keyring\x00', 0xffffffffffffffff) 199.432581ms ago: executing program 1 (id=2124): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000'], 0x79) 131.008529ms ago: executing program 1 (id=2125): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="6d9f3c4769abd012301d4adc2b9df4ee98ae0324783c6b9cd791", 0x1a}], 0x1}}], 0x1, 0x2008000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000940)="97389df07f0f5f99afd046", 0xb, 0x800, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 130.843573ms ago: executing program 1 (id=2126): mincore(&(0x7f0000d98000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/145) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000640)=@vmx={0x104, 0x0, 0x2080, {0x54000, 0xfec00000, {}, 0x1, 0x6}, {"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", "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"}}) fstatfs(r3, &(0x7f0000000100)=""/162) 403.725µs ago: executing program 1 (id=2127): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x2) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) 0s ago: executing program 0 (id=2128): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700"], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r4, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x100, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0bf66a8e8b5fbad5839270c36d586a591f161f65f9cf5832305b860438f4e65e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "27c12352191ca8e8403cdb3d83f94430ed06c5e815b2064d623e89657a2366d2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1689d5d378e414d287b2f47938e53588"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b29bb7f00a6a9cc59e02cf5ab06ed47319bf5ff21adaae58d3741339ab62f231"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x801) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f00000002c0)={[{@dyn}]}) read$FUSE(r9, &(0x7f0000002c80)={0x2020}, 0x2020) lseek(r8, 0x164, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x800, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2129): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast2, @local, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_deladdr={0x18, 0x15, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x10, 0x78, 0xc8, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) syz_emit_ethernet(0xd9, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0xa3, 0x3a, 0xff, @remote, @mcast2, {[@routing={0x56, 0x10, 0x2, 0x9, 0x0, [@local, @mcast1, @loopback, @mcast2, @loopback, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "a78ce54006598080a8"}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, &(0x7f0000000140), 0x4, 0x0) dup3(r5, r8, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r7, 0x4068aea3, &(0x7f0000000200)={0xd4, 0x0, 0x100000000}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24044000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r10, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x41000, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) kernel console output (not intermixed with test programs): 53] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 131.670144][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.700709][ T840] usb 5-1: USB disconnect, device number 6 [ 131.703925][ T40] audit: type=1400 audit(1772681532.186:745): avc: denied { ioctl } for pid=9582 comm="syz.3.1019" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.760037][ T9588] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 131.770859][ T9588] romfs: unable to set blocksize [ 131.770859][ T9588] [ 131.774061][ T53] usb 6-1: USB disconnect, device number 17 [ 131.885947][ T9593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.439714][ T9609] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 132.478680][ T40] audit: type=1400 audit(1772681532.966:746): avc: denied { setopt } for pid=9610 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.489490][ T40] audit: type=1400 audit(1772681532.976:747): avc: denied { checkpoint_restore } for pid=9610 comm="syz.3.1029" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.551146][ T9616] syz_tun: entered allmulticast mode [ 132.796079][ T9639] hfs: can't find a HFS filesystem on dev sr0 [ 132.806409][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 132.809965][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 132.984060][ T9649] pimreg3: entered allmulticast mode [ 133.020186][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 133.306668][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 133.309734][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 133.478772][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 133.547155][ T9702] overlay: ./file0 is not a directory [ 133.602734][ T9711] tmpfs: Unknown parameter 'usrquota$' [ 133.898402][ T9736] fuse: Bad value for 'fd' [ 133.988111][ T9748] macsec1: entered promiscuous mode [ 134.270815][ T9769] tmpfs: Unknown parameter 'usrquota ' [ 134.312754][ T9779] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1085'. [ 134.350145][ T9787] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 134.422126][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 134.769380][ T9834] netlink: 'syz.3.1104': attribute type 11 has an invalid length. [ 134.835394][ T9839] IPv4: Oversized IP packet from 172.20.20.24 [ 134.840236][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 134.843417][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 135.287733][ T9842] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 135.293040][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 135.293049][ T40] audit: type=1400 audit(1772681535.776:761): avc: denied { relabelto } for pid=9841 comm="syz.2.1108" name="file0" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_exec_t:s0" [ 135.306729][ T9842] syzkaller0: entered promiscuous mode [ 135.309231][ T9842] syzkaller0: entered allmulticast mode [ 135.313639][ T40] audit: type=1400 audit(1772681535.786:762): avc: denied { associate } for pid=9841 comm="syz.2.1108" name="file0" dev="tmpfs" ino=1459 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_exec_t:s0" [ 135.327239][ T9842] MTD: Couldn't look up '/dev/sg0': -15 [ 135.329817][ T9842] /dev/sg0: Can't lookup blockdev [ 135.332434][ T40] audit: type=1400 audit(1772681535.816:763): avc: denied { mounton } for pid=9841 comm="syz.2.1108" path="/270/file0" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_exec_t:s0" [ 135.341717][ T9842] jfs: Unknown parameter 'grpquota$' [ 135.625224][ T40] audit: type=1400 audit(1772681536.106:764): avc: denied { rmdir } for pid=5921 comm="syz-executor" name="file0" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_exec_t:s0" [ 135.625913][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 135.717358][ T40] audit: type=1400 audit(1772681536.206:765): avc: denied { getopt } for pid=9849 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.757285][ T9852] PID 9852 killed due to inadequate hugepage pool [ 135.785859][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 135.792889][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 135.800020][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.800307][ T40] audit: type=1400 audit(1772681536.286:766): avc: denied { read write } for pid=9857 comm="syz.0.1112" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.803557][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.815269][ T40] audit: type=1400 audit(1772681536.286:767): avc: denied { read write } for pid=9857 comm="syz.0.1112" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.818406][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.828616][ T40] audit: type=1400 audit(1772681536.286:768): avc: denied { open } for pid=9857 comm="syz.0.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.832559][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.841706][ T40] audit: type=1400 audit(1772681536.286:769): avc: denied { ioctl } for pid=9857 comm="syz.0.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.845454][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.859782][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.865576][ T9858] overlay: Unknown parameter 'subj_type' [ 135.995929][ T9870] __nla_validate_parse: 2 callbacks suppressed [ 135.995941][ T9870] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1116'. [ 136.001132][ T9870] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.008809][ T9867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1115'. [ 136.069883][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 136.071696][ T29] usbtmc 8-1:16.0: can't read capabilities [ 136.100257][ T9880] xt_l2tp: v2 doesn't support IP mode [ 136.173434][ T9892] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 136.194947][ T9892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.243788][ T9892] bond4: (slave veth5): Enslaving as an active interface with a down link [ 136.270612][ T40] audit: type=1400 audit(1772681536.756:770): avc: denied { create } for pid=9845 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.341471][ T9] usb 8-1: USB disconnect, device number 9 [ 136.367716][ T9892] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 136.391338][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 136.429421][ T9897] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.434150][ T9897] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 136.484559][ T9898] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 136.503983][ T9905] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1125'. [ 136.600876][ T9916] sctp: Trying to GSO but underlying device doesn't support it. [ 136.645011][ T9923] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1128'. [ 136.756912][ T9895] (syz.2.1123,9895,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 136.757838][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 136.760340][ T9895] (syz.2.1123,9895,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 136.776617][ T9895] (syz.2.1123,9895,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 136.776644][ T9895] (syz.2.1123,9895,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 136.842862][ T9939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9939 comm=syz.0.1133 [ 136.852058][ T9939] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 136.852829][ T9941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1134'. [ 136.860288][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 136.863673][ T9941] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1134'. [ 136.868044][ T9941] netlink: 'syz.1.1134': attribute type 3 has an invalid length. [ 136.869679][ T9944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.870827][ T9941] netlink: 'syz.1.1134': attribute type 2 has an invalid length. [ 136.873228][ T9944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.875953][ T9941] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1134'. [ 136.879139][ T9944] vhci_hcd vhci_hcd.0: Device attached [ 136.911668][ T9946] vhci_hcd: connection closed [ 136.912855][ T9255] vhci_hcd vhci_hcd.2: stop threads [ 136.916215][ T9255] vhci_hcd vhci_hcd.2: release socket [ 136.923335][ T9255] vhci_hcd vhci_hcd.2: disconnect device [ 136.993549][ T9969] loop2: detected capacity change from 0 to 7 [ 137.004475][ T9580] Dev loop2: unable to read RDB block 7 [ 137.006954][ T9580] loop2: unable to read partition table [ 137.008977][ T9580] loop2: partition table beyond EOD, truncated [ 137.013544][ T9969] Dev loop2: unable to read RDB block 7 [ 137.016435][ T9969] loop2: unable to read partition table [ 137.018978][ T9969] loop2: partition table beyond EOD, truncated [ 137.021118][ T9969] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 137.066375][ T29] IPVS: starting estimator thread 0... [ 137.079528][ T63] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 137.176163][ T9981] IPVS: using max 44 ests per chain, 105600 per kthread [ 137.247787][T10002] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 137.250762][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.257403][T10002] vhci_hcd vhci_hcd.0: Device attached [ 137.265286][T10000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=10000 comm=syz.2.1153 [ 137.270046][T10000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10000 comm=syz.2.1153 [ 137.395951][ T840] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 137.505889][ T29] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 137.517376][ T5993] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 137.565796][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 137.570917][ T840] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.577634][ T840] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.582173][ T840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 137.585211][ T840] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.590154][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.596330][ T840] usb 6-1: config 0 descriptor?? [ 137.678955][ T5993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.683345][ T5993] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.695925][ T5993] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 137.699942][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.703357][ T5993] usb 5-1: Product: syz [ 137.705172][ T5993] usb 5-1: Manufacturer: syz [ 137.715717][ T5993] usb 5-1: SerialNumber: syz [ 137.719969][ T5993] usb 5-1: config 0 descriptor?? [ 137.850115][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.926196][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.930441][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.942703][T10002] ufs: You didn't specify the type of your ufs filesystem [ 137.942703][T10002] [ 137.942703][T10002] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 137.942703][T10002] [ 137.942703][T10002] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 137.957908][T10002] ufs: failed to set blocksize [ 138.007409][ T840] hid_parser_main: 22 callbacks suppressed [ 138.007429][ T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 138.012339][T10003] usb 37-1: recv xbuf, 0 [ 138.013240][ T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 138.017078][ T9254] vhci_hcd vhci_hcd.0: stop threads [ 138.020246][ T9254] vhci_hcd vhci_hcd.0: release socket [ 138.021030][ T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 138.023129][ T9254] vhci_hcd vhci_hcd.0: disconnect device [ 138.024246][ T5993] usb 5-1: USB disconnect, device number 7 [ 138.026922][ T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 138.033512][ T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 138.038200][ T840] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 138.076614][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 138.209085][ T53] usb 6-1: USB disconnect, device number 18 [ 138.448939][T10057] loop2: detected capacity change from 0 to 7 [ 138.453718][ T9580] Dev loop2: unable to read RDB block 7 [ 138.455791][ T9580] loop2: unable to read partition table [ 138.457785][ T9580] loop2: partition table beyond EOD, truncated [ 138.462686][T10057] Dev loop2: unable to read RDB block 7 [ 138.465050][T10057] loop2: unable to read partition table [ 138.467750][T10057] loop2: partition table beyond EOD, truncated [ 138.470514][T10057] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 138.839040][T10094] fuse: Bad value for 'fd' [ 139.046393][T10118] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 139.051021][T10119] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 139.110135][T10119] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 139.118456][T10127] iommufd_mock iommufd_mock3: Adding to iommu group 12 [ 139.148101][T10119] team_slave_0: entered promiscuous mode [ 139.150338][T10119] team_slave_1: entered promiscuous mode [ 139.152673][T10133] fuse: Bad value for 'fd' [ 139.160515][T10119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.171979][T10127] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 139.596159][T10145] overlayfs: failed to resolve './file1': -2 [ 139.948487][T10162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.423988][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 140.424002][ T40] audit: type=1400 audit(1772681540.906:778): avc: denied { write } for pid=10187 comm="syz.3.1212" lport=54580 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 140.595749][ T5993] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 140.605080][ T40] audit: type=1400 audit(1772681541.086:779): avc: denied { ioctl } for pid=10204 comm="syz.2.1215" path="socket:[39266]" dev="sockfs" ino=39266 ioctlcmd=0xae90 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.745747][ T5993] usb 6-1: device descriptor read/64, error -71 [ 140.767885][T10212] xt_hashlimit: size too large, truncated to 1048576 [ 140.902545][ T40] audit: type=1400 audit(1772681541.386:780): avc: denied { read } for pid=10226 comm="syz.2.1222" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 140.911974][ T40] audit: type=1400 audit(1772681541.386:781): avc: denied { open } for pid=10226 comm="syz.2.1222" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 140.929317][T10225] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 140.985767][ T5993] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 141.135762][ T5993] usb 6-1: device descriptor read/64, error -71 [ 141.142623][ T40] audit: type=1400 audit(1772681541.626:782): avc: denied { setopt } for pid=10237 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.246021][ T5993] usb usb6-port1: attempt power cycle [ 141.284927][ T40] audit: type=1400 audit(1772681541.766:783): avc: denied { unlink } for pid=10260 comm="syz.3.1230" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.286071][T10261] overlayfs: conflicting options: nfs_export=on,index=off [ 141.293866][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 141.316750][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.320573][T10261] batadv_slave_0: entered promiscuous mode [ 141.349027][ T40] audit: type=1400 audit(1772681541.836:784): avc: denied { write } for pid=10258 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.350093][T10259] netlink: 'syz.0.1229': attribute type 3 has an invalid length. [ 141.361697][T10259] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 141.365004][T10259] __nla_validate_parse: 6 callbacks suppressed [ 141.365013][T10259] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1229'. [ 141.563130][ T40] audit: type=1400 audit(1772681542.046:785): avc: denied { map } for pid=10273 comm="syz.0.1234" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 141.603516][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 141.606102][ T5993] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 141.607944][T10276] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 141.626427][ T5993] usb 6-1: device descriptor read/8, error -71 [ 141.875766][ T5993] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 141.896206][ T5993] usb 6-1: device descriptor read/8, error -71 [ 142.015911][ T5993] usb usb6-port1: unable to enumerate USB device [ 142.692416][T10292] overlay: ./file1 is not a directory [ 143.248024][ T40] audit: type=1400 audit(1772681543.736:786): avc: denied { write } for pid=10300 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.485759][ T29] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 143.528579][T10308] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1246'. [ 143.637649][ T29] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.642653][ T29] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.647299][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 143.650352][ T29] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 143.654440][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.660667][ T29] usb 8-1: config 0 descriptor?? [ 143.881973][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 143.884337][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 143.889499][ T29] usb 8-1: USB disconnect, device number 10 [ 143.897038][T10326] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 143.953546][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.957227][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.960613][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.964048][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.970529][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.973950][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.978477][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.981943][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.985318][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.989134][ T5998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 144.006085][ T5998] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 144.043618][ T40] audit: type=1400 audit(1772681544.526:787): avc: denied { accept } for pid=10349 comm="syz.2.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.044342][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 144.060677][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 144.075034][T10350] fido_id[10350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.247211][T10380] netlink: 'syz.1.1265': attribute type 5 has an invalid length. [ 144.249458][T10379] xt_hashlimit: invalid rate [ 144.384831][T10395] bridge3: entered promiscuous mode [ 144.441081][T10401] tun0: tun_chr_ioctl cmd 1074025675 [ 144.443548][T10401] tun0: persist enabled [ 144.446023][T10401] tun0: tun_chr_ioctl cmd 1074025675 [ 144.448456][T10401] tun0: persist enabled [ 144.828717][T10423] tmpfs: Bad value for 'mpol' [ 145.342923][T10445] 9pnet_virtio: no channels available for device ./file0 [ 145.501995][T10448] bond2: option xmit_hash_policy: invalid value (6) [ 145.508281][T10448] bond2 (unregistering): Released all slaves [ 145.537357][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 145.541854][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 145.551309][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 145.555233][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 145.560492][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 146.311975][T10458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.314118][T10458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.318432][T10458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.322250][T10458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.356706][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.360921][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.502731][T10477] fuse: Bad value for 'group_id' [ 146.504529][T10477] fuse: Bad value for 'group_id' [ 146.596027][ T5998] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 146.748802][ T5998] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.757027][ T5998] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.761608][ T5998] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.766186][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.786499][T10467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.792084][ T5998] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.929351][T10504] __nla_validate_parse: 62 callbacks suppressed [ 146.929363][T10504] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1301'. [ 146.990162][ T34] usb 7-1: USB disconnect, device number 10 [ 147.036857][T10507] fuse: Bad value for 'group_id' [ 147.038760][T10507] fuse: Bad value for 'group_id' [ 147.083452][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 147.083463][ T40] audit: type=1400 audit(1772681547.566:797): avc: denied { setattr } for pid=10508 comm="syz.3.1303" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.393965][T10529] fuse: Bad value for 'group_id' [ 147.396640][T10529] fuse: Bad value for 'group_id' [ 147.423859][T10531] bond8: Removing last arp target with arp_interval on [ 147.675891][ T5929] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.708047][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 147.780222][T10558] xfrm0 speed is unknown, defaulting to 1000 [ 147.880805][T10565] SELinux: Context system_u:object_r:gpg_helper_exec_t:s0 is not valid (left unmapped). [ 147.886523][ T40] audit: type=1400 audit(1772681548.366:798): avc: denied { relabelfrom } for pid=10564 comm="syz.1.1324" name="" dev="pipefs" ino=40163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 147.892504][T10571] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 147.903679][ T40] audit: type=1400 audit(1772681548.386:799): avc: denied { relabelto } for pid=10564 comm="syz.1.1324" name="" dev="pipefs" ino=40163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:gpg_helper_exec_t:s0" [ 147.923278][T10571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.999380][T10584] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 148.161215][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 148.168066][ T40] audit: type=1400 audit(1772681548.656:800): avc: denied { setopt } for pid=10604 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.244298][ T40] audit: type=1400 audit(1772681548.726:801): avc: denied { create } for pid=10619 comm="syz.1.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.250091][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'. [ 148.264107][ T40] audit: type=1400 audit(1772681548.746:802): avc: denied { setopt } for pid=10619 comm="syz.1.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.396038][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.398997][ T5929] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.495558][ T40] audit: type=1400 audit(1772681548.976:803): avc: denied { execute } for pid=10640 comm="syz.1.1345" path="/276/file0/cpu.stat" dev="9p" ino=72614233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.615932][ T5998] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 148.786404][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 148.926003][ T5998] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 149.087186][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 149.091571][ T5998] usb usb8-port1: attempt power cycle [ 149.425772][ T5998] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 149.446276][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 149.476246][T10677] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 149.479307][T10677] syz_tun: entered promiscuous mode [ 149.485613][T10677] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 149.595809][ T5998] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 149.602302][ T40] audit: type=1326 audit(1772681550.086:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.1.1351" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa44299c799 code=0x0 [ 149.616614][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 149.619508][ T5998] usb usb8-port1: unable to enumerate USB device [ 149.718297][T10683] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 149.756672][ T5929] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.782300][ T40] audit: type=1400 audit(1772681550.266:805): avc: denied { connect } for pid=10686 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.863697][ T40] audit: type=1400 audit(1772681550.346:806): avc: denied { mounton } for pid=10690 comm="syz.2.1354" path="/bus" dev="autofs" ino=39894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 149.863737][T10693] overlay: filesystem on ./bus not supported [ 149.901500][T10696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'. [ 149.907737][T10696] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 149.927687][ T34] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 150.076031][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 150.079212][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.083007][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.088873][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.091237][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.094301][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.099521][ T34] usb 6-1: config 0 descriptor?? [ 150.316984][T10712] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1360'. [ 150.326178][T10712] netlink: 'syz.2.1360': attribute type 3 has an invalid length. [ 150.508760][ T34] hid_parser_main: 22 callbacks suppressed [ 150.508773][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.514795][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.515221][T10717] macvtap1: entered promiscuous mode [ 150.519200][T10717] macvtap1: entered allmulticast mode [ 150.520315][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.520331][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.520343][ T34] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 150.522793][T10717] veth1_vlan: entered allmulticast mode [ 150.525445][ T34] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 150.823226][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 150.831076][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 150.836491][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1363'. [ 151.021349][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 151.200864][T10745] fuse: Bad value for 'group_id' [ 151.202703][T10745] fuse: Bad value for 'group_id' [ 151.204752][T10746] fuse: Bad value for 'group_id' [ 151.206777][T10746] fuse: Bad value for 'group_id' [ 151.290320][T10750] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.298832][T10750] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 151.302551][T10750] nbd: error processing sock list [ 151.399825][T10752] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 151.553846][T10769] openvswitch: netlink: Message has 8 unknown bytes. [ 151.590392][T10774] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 151.596405][T10774] block nbd0: NBD_DISCONNECT [ 151.598771][T10774] block nbd0: Send disconnect failed -32 [ 151.692051][T10784] overlayfs: failed to resolve './file1': -2 [ 151.697505][ T34] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 151.803698][T10790] geneve1: left allmulticast mode [ 151.811028][T10790] ipip0: left allmulticast mode [ 151.813878][T10790] macvtap1: left allmulticast mode [ 151.817933][T10790] veth1_vlan: left allmulticast mode [ 151.870087][T10794] syzkaller0: entered promiscuous mode [ 151.872026][T10794] syzkaller0: entered allmulticast mode [ 152.154302][T10805] fuse: Unknown parameter 'grou00000000000000000000' [ 152.200370][T10809] 9pnet_fd: Insufficient options for proto=fd [ 152.257486][T10809] 9pnet_fd: Insufficient options for proto=fd [ 152.820109][T10838] fuse: Unknown parameter 'grou00000000000000000000' [ 153.205789][ T34] usb 6-1: device descriptor read/64, error -71 [ 153.445756][ T34] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 153.455802][ T34] usb 6-1: device reset changed ep0 maxpacket size! [ 153.460685][ T5993] usb 6-1: USB disconnect, device number 23 [ 153.595801][ T5993] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 153.757370][ T5993] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.761467][ T5993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.765252][ T5993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.769355][ T5993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.775287][ T5993] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.779411][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.783063][ T5993] usb 6-1: Product: syz [ 153.785033][ T5993] usb 6-1: Manufacturer: syz [ 153.793785][ T5993] cdc_wdm 6-1:1.0: skipping garbage [ 153.796080][ T5993] cdc_wdm 6-1:1.0: skipping garbage [ 153.799758][ T5993] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 153.802462][ T5993] cdc_wdm 6-1:1.0: Unknown control protocol [ 153.999054][ T5993] usb 6-1: USB disconnect, device number 24 [ 154.445790][ T1026] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 154.586079][ T1026] usb 6-1: device descriptor read/64, error -71 [ 154.772492][T10860] __nla_validate_parse: 4 callbacks suppressed [ 154.772504][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1405'. [ 154.835784][ T1026] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 154.890509][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 154.890520][ T40] audit: type=1400 audit(1772681555.376:809): avc: denied { mounton } for pid=10861 comm="syz.2.1406" path="/proc/1087/task" dev="proc" ino=41250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 154.985753][ T1026] usb 6-1: device descriptor read/64, error -71 [ 155.096031][ T1026] usb usb6-port1: attempt power cycle [ 155.316720][T10879] netlink: 'syz.2.1412': attribute type 1 has an invalid length. [ 155.332141][T10879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.338900][T10879] random: crng reseeded on system resumption [ 155.376890][T10882] sp0: Synchronizing with TNC [ 155.441638][ T40] audit: type=1400 audit(1772681555.926:810): avc: denied { map } for pid=10881 comm="syz.2.1413" path="socket:[40627]" dev="sockfs" ino=40627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.451681][ T40] audit: type=1400 audit(1772681555.926:811): avc: denied { read } for pid=10881 comm="syz.2.1413" path="socket:[40627]" dev="sockfs" ino=40627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.455918][ T1026] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 155.486415][ T1026] usb 6-1: device descriptor read/8, error -71 [ 155.534951][T10885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1414'. [ 155.596877][ T40] audit: type=1400 audit(1772681556.086:812): avc: denied { read } for pid=10884 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.663109][ T40] audit: type=1400 audit(1772681556.146:813): avc: denied { append } for pid=10890 comm="syz.0.1416" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.671429][T10891] program syz.0.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.677114][ T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 155.725768][ T1026] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 155.746727][ T1026] usb 6-1: device descriptor read/8, error -71 [ 155.838213][ T53] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.841678][ T53] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.845820][ T53] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.849777][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.854554][T10903] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1417'. [ 155.861339][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 155.862447][T10883] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.864952][T10896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 155.866523][ T1026] usb usb6-port1: unable to enumerate USB device [ 155.872422][ T53] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.950325][T10909] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 155.984096][T10913] fuse: Unknown parameter 'group_id00000000000000000000' [ 156.020275][T10915] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 156.038786][T10915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.068136][T10918] overlay: Bad value for 'workdir' [ 156.079252][ T1026] usb 7-1: USB disconnect, device number 11 [ 156.081095][T10918] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 156.092519][T10920] MTD: Couldn't look up '/dev/sg0': -15 [ 156.094528][T10920] /dev/sg0: Can't lookup blockdev [ 156.271437][ T5929] Bluetooth: hci3: unexpected event for opcode 0x043c [ 156.362952][T10934] netlink: 'syz.0.1429': attribute type 6 has an invalid length. [ 156.388788][T10931] netlink: 'syz.1.1428': attribute type 2 has an invalid length. [ 156.393918][T10931] netlink: 'syz.1.1428': attribute type 1 has an invalid length. [ 156.398824][T10931] netlink: 'syz.1.1428': attribute type 1 has an invalid length. [ 156.404095][T10931] netlink: 'syz.1.1428': attribute type 2 has an invalid length. [ 156.410391][T10931] netlink: 'syz.1.1428': attribute type 2 has an invalid length. [ 156.421869][T10934] netlink: 'syz.0.1429': attribute type 4 has an invalid length. [ 156.425300][T10934] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1429'. [ 156.592332][T10948] mkiss: ax0: crc mode is auto. [ 156.693162][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 156.782338][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1437'. [ 156.791099][T10961] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.808461][T10961] bond6: (slave ip6erspan0): Enslaving as a backup interface with an up link [ 156.851130][T10971] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 156.854319][T10971] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.859313][T10971] vhci_hcd vhci_hcd.0: Device attached [ 156.865410][T10972] vhci_hcd: cannot find the pending unlink 7 [ 156.888298][ T40] audit: type=1400 audit(1772681557.376:814): avc: denied { ioctl } for pid=10974 comm="syz.3.1441" path="net:[4026532990]" dev="nsfs" ino=4026532990 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.901628][ T9250] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 156.926074][T10972] vhci_hcd: connection closed [ 156.928406][ T9250] vhci_hcd vhci_hcd.0: stop threads [ 156.933085][ T9250] vhci_hcd vhci_hcd.0: release socket [ 156.935095][ T9250] vhci_hcd vhci_hcd.0: disconnect device [ 156.946420][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 156.992692][ T1026] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 157.027605][T10980] xfrm0 speed is unknown, defaulting to 1000 [ 157.028430][ T9250] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 157.057478][T10981] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:23 [ 157.169070][ T1026] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.173697][ T1026] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.174023][T10998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 157.192694][T10999] bond9: (slave gretap1): making interface the new active one [ 157.195842][ T1026] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.197877][T10999] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 157.200112][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.228424][T10965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.239249][ T1026] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.492323][T10965] 9p: Bad value for 'rfdno' [ 157.535260][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1453'. [ 157.577425][ T34] usb 6-1: USB disconnect, device number 29 [ 157.682136][T11035] FAT-fs (sr0): bogus number of reserved sectors [ 157.684602][T11035] FAT-fs (sr0): Can't find a valid FAT filesystem [ 157.765924][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 157.781112][T11044] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 157.797615][T11047] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 157.912244][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.270821][T11094] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 168.278356][T11096] fuse: Bad value for 'fd' [ 168.278768][T11094] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1464'. [ 168.284235][T11094] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1464'. [ 168.296436][T11094] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1464'. [ 168.324175][T11103] trusted_key: encrypted_key: keylen parameter is missing [ 168.406052][T11122] validate_nla: 2 callbacks suppressed [ 168.406064][T11122] netlink: 'syz.1.1470': attribute type 17 has an invalid length. [ 168.411195][T11122] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1470'. [ 168.414433][T11122] macvtap0: entered allmulticast mode [ 168.416459][T11122] veth0_macvtap: entered allmulticast mode [ 168.418952][T11122] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 168.428165][T11125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1471'. [ 168.432487][T11125] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.442698][T11125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.446128][T11125] IPv6: NLM_F_CREATE should be set when creating new route [ 168.452182][T11117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1469'. [ 168.455057][ T40] audit: type=1400 audit(1772681568.936:815): avc: denied { append } for pid=11123 comm="syz.0.1471" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.579969][T11140] fuse: Invalid rootmode [ 168.612340][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 168.623875][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1476'. [ 168.650032][ T40] audit: type=1400 audit(1772681569.136:816): avc: denied { write } for pid=11145 comm="syz.0.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 168.663736][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 168.687947][T11146] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.701891][T11147] vlan4: entered promiscuous mode [ 168.703944][T11147] bond7: entered promiscuous mode [ 168.706764][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 168.709331][T11150] xfrm0 speed is unknown, defaulting to 1000 [ 168.736876][ T40] audit: type=1400 audit(1772681569.226:817): avc: denied { mounton } for pid=11158 comm="syz.0.1482" path="/434/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 168.802512][ T40] audit: type=1400 audit(1772681569.286:818): avc: denied { read } for pid=11168 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.924161][T11181] Mount JFS Failure: -22 [ 168.959600][T11184] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 168.966068][T11185] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 169.000575][T11187] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 169.011912][T11187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 169.034435][T11187] bond10: (slave gretap2): making interface the new active one [ 169.038289][T11187] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 169.187988][ T40] audit: type=1400 audit(1772681569.676:819): avc: denied { bind } for pid=11193 comm="syz.0.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.253472][T11207] tmpfs: Bad value for 'mpol' [ 170.200769][T11231] Malformed UNC in devname [ 170.200769][T11231] [ 170.203890][T11231] CIFS: VFS: Malformed UNC in devname [ 170.277774][ T40] audit: type=1400 audit(1772681570.756:820): avc: denied { bind } for pid=11240 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.327241][T11250] fuse: Bad value for 'rootmode' [ 170.458166][T11266] netlink: 'syz.3.1512': attribute type 6 has an invalid length. [ 170.673110][T11283] fuse: Bad value for 'rootmode' [ 170.761914][ T40] audit: type=1400 audit(1772681571.246:821): avc: denied { setattr } for pid=11293 comm="syz.3.1520" path="socket:[43695]" dev="sockfs" ino=43695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.770607][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.774920][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.782491][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.787017][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.801990][T11300] netlink: 'syz.0.1514': attribute type 4 has an invalid length. [ 170.810660][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.825766][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.830058][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.834385][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.845832][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.865522][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11297 comm=syz.1.1521 [ 170.962529][ T40] audit: type=1400 audit(1772681571.446:822): avc: denied { name_bind } for pid=11315 comm="syz.2.1524" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 171.138189][T11334] fuse: Bad value for 'rootmode' [ 171.535269][T11387] veth1_macvtap: mtu less than device minimum [ 171.648357][T11398] syzkaller0: entered promiscuous mode [ 171.650622][T11398] syzkaller0: entered allmulticast mode [ 172.107669][ T40] audit: type=1400 audit(1772681572.596:823): avc: denied { mounton } for pid=11418 comm="syz.3.1545" path="/399/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 172.112343][T11426] fuse: Unknown parameter 'use00000000000000000000' [ 172.849325][ T40] audit: type=1800 audit(1772681573.336:824): pid=11443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1552" name="file0" dev="9p" ino=72613959 res=0 errno=0 [ 172.937639][T11448] fuse: Unknown parameter 'use00000000000000000000' [ 173.269602][T11480] xfrm0 speed is unknown, defaulting to 1000 [ 173.405839][ T1026] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.506465][ T40] audit: type=1400 audit(1772681573.996:825): avc: denied { mounton } for pid=11491 comm="syz.1.1566" path="/313/file0" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.566154][T11495] can0: slcan on ttyS3. [ 173.575869][ T5993] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 173.585985][ T1026] usb 5-1: Using ep0 maxpacket: 8 [ 173.589007][ T1026] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 173.591832][ T1026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.601436][ T1026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.604773][ T1026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 173.611543][ T1026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 173.615947][ T1026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.621314][ T1026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.625499][ T1026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.736509][T11499] can0 (unregistered): slcan off ttyS3. [ 173.746005][ T5993] usb 8-1: Using ep0 maxpacket: 32 [ 173.760565][ T5993] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.764006][ T5993] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.784872][ T5993] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 173.788074][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.790738][ T5993] usb 8-1: Product: syz [ 173.792153][ T5993] usb 8-1: Manufacturer: syz [ 173.793707][ T5993] usb 8-1: SerialNumber: syz [ 173.801590][ T5993] usb 8-1: config 0 descriptor?? [ 173.843105][ T1026] usb 5-1: GET_CAPABILITIES returned 0 [ 173.845029][ T1026] usbtmc 5-1:16.0: can't read capabilities [ 173.959999][T11530] fuse: Unknown parameter 'user_i00000000000000000000' [ 174.066000][ T5993] usb 8-1: USB disconnect, device number 15 [ 174.192202][T11553] __nla_validate_parse: 4 callbacks suppressed [ 174.192219][T11553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1579'. [ 174.215900][T11553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1579'. [ 174.284456][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 174.310859][T11562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.329517][T11562] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 174.335373][ T40] audit: type=1400 audit(1772681574.816:826): avc: denied { shutdown } for pid=11561 comm="syz.2.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.425726][ T9255] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.545803][ T9253] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.629830][T11581] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.110687][T11591] 9pnet_virtio: no channels available for device syz [ 175.150344][T11593] ata1.00: invalid multi_count 128 ignored [ 175.210380][ T40] audit: type=1326 audit(1772681575.696:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.2.1592" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc91179c799 code=0x0 [ 175.257612][T11593] SET target dimension over the limit! [ 175.298256][T11593] ata1.00: invalid multi_count 128 ignored [ 175.564099][T11603] fuse: Unknown parameter 'user_id00000000000000000000' [ 175.639986][ T40] audit: type=1400 audit(1772681576.126:828): avc: denied { ioctl } for pid=11610 comm="syz.1.1598" path="socket:[45374]" dev="sockfs" ino=45374 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.709779][ T5929] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 175.719615][T11612] overlayfs: statfs failed on './file0' [ 176.108333][ T5993] usb 5-1: USB disconnect, device number 8 [ 176.226003][T11639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1603'. [ 176.587365][T11645] /dev/sr0: Can't open blockdev [ 176.897857][T11662] fuse: Bad value for 'fd' [ 176.951642][T11630] delete_channel: no stack [ 177.017478][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1612'. [ 177.226224][T11675] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1614'. [ 177.248547][T11676] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1614'. [ 177.252545][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 177.343196][T11693] fuse: Bad value for 'fd' [ 177.385728][ T40] audit: type=1400 audit(1772681577.866:829): avc: denied { setcurrent } for pid=11695 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 177.393890][ T40] audit: type=1401 audit(1772681577.876:830): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 177.458589][T11705] xt_hashlimit: size too large, truncated to 1048576 [ 177.481834][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 177.486737][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1623'. [ 177.713640][T11721] fuse: Bad value for 'fd' [ 177.784369][ T40] audit: type=1326 audit(1772681578.266:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11722 comm="syz.1.1630" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44299c799 code=0x0 [ 177.968141][T11745] fuse: Unknown parameter '0x0000000000000003' [ 178.224620][T11757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.256442][ T53] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 178.360457][ T40] audit: type=1400 audit(1772681578.846:832): avc: denied { map } for pid=11766 comm="syz.2.1646" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 178.370976][ T40] audit: type=1400 audit(1772681578.846:833): avc: denied { execute } for pid=11766 comm="syz.2.1646" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 178.386385][ T53] usb 8-1: device descriptor read/64, error -71 [ 178.516253][T11767] tipc: Enabling of bearer rejected, failed to enable media [ 178.639388][ T53] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 178.688180][T11780] tmpfs: Invalid uid '0x00000000ffffffff' [ 178.692050][T11780] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 178.698797][T11780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.775761][ T53] usb 8-1: device descriptor read/64, error -71 [ 178.886106][ T53] usb usb8-port1: attempt power cycle [ 178.964881][ T40] audit: type=1400 audit(1772681579.446:834): avc: denied { connect } for pid=11786 comm="syz.1.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.225758][ T53] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 179.257952][ T53] usb 8-1: device descriptor read/8, error -71 [ 179.451516][T11808] selinux_netlink_send: 57 callbacks suppressed [ 179.451533][T11808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=11808 comm=syz.1.1658 [ 179.452155][T11809] __nla_validate_parse: 3 callbacks suppressed [ 179.452169][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 179.464699][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 179.497510][ T53] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 179.516657][ T53] usb 8-1: device descriptor read/8, error -71 [ 179.539389][T11812] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 179.559764][T11812] bond5: entered promiscuous mode [ 179.562304][T11812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.607524][T11812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.610123][T11812] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.614029][T11812] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 179.622531][T11812] bond5: (slave vxcan3): making interface the new active one [ 179.625360][T11812] vxcan3: entered promiscuous mode [ 179.628449][ T53] usb usb8-port1: unable to enumerate USB device [ 179.631857][T11812] vxcan3: left promiscuous mode [ 179.750570][T11822] nfs4: Bad value for 'source' [ 179.975857][T11837] fuse: Unknown parameter '0x0000000000000003' [ 180.021716][ T40] audit: type=1800 audit(1772681580.506:835): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1667" name="file0" dev="tmpfs" ino=2540 res=0 errno=0 [ 180.033662][ T40] audit: type=1804 audit(1772681580.516:836): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1667" name="/newroot/469/file0" dev="tmpfs" ino=2540 res=1 errno=0 [ 180.120884][T11851] xt_l2tp: missing protocol rule (udp|l2tpip) [ 180.160670][ T40] audit: type=1326 audit(1772681580.646:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.0.1673" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8a3a796517 code=0x0 [ 180.209662][T11855] macsec0: entered promiscuous mode [ 180.212072][T11855] macsec0: entered allmulticast mode [ 180.213930][T11855] veth1_macvtap: entered allmulticast mode [ 180.283481][T11856] kvm: pic: non byte write [ 180.947084][T11865] hfsplus: unable to find HFS+ superblock [ 181.032688][T11873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1678'. [ 181.032843][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1678'. [ 181.042138][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1678'. [ 181.088537][ T40] audit: type=1400 audit(1772681581.576:838): avc: denied { read } for pid=11878 comm="syz.0.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.278469][T11886] overlayfs: missing 'lowerdir' [ 181.930187][T11888] Bluetooth: MGMT ver 1.23 [ 182.226211][ T5993] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 182.386985][ T5993] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 182.389903][ T5993] usb 6-1: config 0 has no interface number 0 [ 182.392720][ T5993] usb 6-1: too many endpoints for config 0 interface 212 altsetting 66: 255, using maximum allowed: 30 [ 182.396810][ T5993] usb 6-1: config 0 interface 212 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 182.401672][ T5993] usb 6-1: config 0 interface 212 has no altsetting 0 [ 182.406486][ T5993] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 182.410375][ T5993] usb 6-1: config 0 has no interface number 0 [ 182.412829][ T5993] usb 6-1: too many endpoints for config 0 interface 212 altsetting 66: 255, using maximum allowed: 30 [ 182.418025][ T5993] usb 6-1: config 0 interface 212 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 182.423786][ T5993] usb 6-1: config 0 interface 212 has no altsetting 0 [ 182.434116][ T5993] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 182.444084][ T5993] usb 6-1: config 0 has no interface number 0 [ 182.446509][ T5993] usb 6-1: too many endpoints for config 0 interface 212 altsetting 66: 255, using maximum allowed: 30 [ 182.450592][ T5993] usb 6-1: config 0 interface 212 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 182.456331][ T5993] usb 6-1: config 0 interface 212 has no altsetting 0 [ 182.461140][ T5993] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 182.464515][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 182.468452][ T5993] usb 6-1: Product: syz [ 182.470425][ T5993] usb 6-1: Manufacturer: syz [ 182.472258][ T5993] usb 6-1: SerialNumber: syz [ 182.476197][ T5993] usb 6-1: config 0 descriptor?? [ 182.619512][T11924] netlink: 'syz.3.1688': attribute type 4 has an invalid length. [ 182.689542][ T5993] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 182.693408][ T5993] dvb-usb: bulk message failed: -22 (2/0) [ 182.720407][ T5993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.725392][ T5993] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 182.730598][ T5993] usb 6-1: media controller created [ 182.752443][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.776310][ T5993] cxusb: set interface failed [ 182.777989][ T5993] dvb-usb: bulk message failed: -22 (1/0) [ 182.818885][ T5993] DVB: Unable to find symbol mt352_attach() [ 182.822116][ T5993] dvb-usb: bulk message failed: -22 (5/0) [ 182.825995][T11929] program syz.3.1690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.826741][ T5993] zl10353_read_register: readreg error (reg=127, ret==-121) [ 182.829263][T11929] ata1.00: non-matching transfer count (0/2304) [ 182.832602][ T5993] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 182.895710][ T5993] rc_core: IR keymap rc-dvico-mce not found [ 182.897806][ T5993] Registered IR keymap rc-empty [ 182.903120][ T5993] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 182.909827][ T5993] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input32 [ 182.916469][ T5993] dvb-usb: schedule remote query interval to 100 msecs. [ 182.919863][ T5993] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 182.926070][ T5993] usb 6-1: USB disconnect, device number 30 [ 183.048665][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1693'. [ 183.068590][ T5993] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 183.174645][T11855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.180632][T11943] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 183.184254][T11943] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1696'. [ 183.188988][T11943] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1696'. [ 183.193082][T11943] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1696'. [ 183.302477][T11956] program syz.2.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.306171][T11956] ata1.00: non-matching transfer count (0/2304) [ 183.316464][ T5998] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 183.331950][ T40] audit: type=1400 audit(1772681583.816:839): avc: denied { getopt } for pid=11959 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.383794][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 183.486403][ T5998] usb 8-1: Using ep0 maxpacket: 16 [ 183.493163][ T5998] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.498788][ T5998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.503740][ T5998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 7168, setting to 1024 [ 183.509137][ T5998] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 183.513564][ T5998] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.522921][ T5998] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.527763][ T5998] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.531460][ T5998] usb 8-1: Manufacturer: syz [ 183.535902][ T5998] usb 8-1: config 0 descriptor?? [ 183.785835][ T5998] rc_core: IR keymap rc-hauppauge not found [ 183.788484][ T5998] Registered IR keymap rc-empty [ 183.791319][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.821953][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.837370][ T5998] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 183.853567][ T5998] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input33 [ 183.867463][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.896690][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.920418][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.937017][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.956547][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 183.976153][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 184.006981][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 184.028281][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 184.046654][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 184.066207][ T5998] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 184.090705][ T5998] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 184.095461][ T5998] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.110847][ T5998] usb 8-1: USB disconnect, device number 20 [ 184.184589][ T40] audit: type=1400 audit(1772681584.666:840): avc: denied { create } for pid=11991 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 184.199453][ T40] audit: type=1400 audit(1772681584.686:841): avc: denied { write } for pid=11991 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 184.208914][ T40] audit: type=1400 audit(1772681584.696:842): avc: denied { nlmsg_tty_audit } for pid=11991 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 184.638123][ T40] audit: type=1400 audit(1772681585.126:843): avc: denied { write } for pid=12015 comm="syz.3.1718" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 184.646696][ T40] audit: type=1400 audit(1772681585.126:844): avc: denied { ioctl } for pid=12015 comm="syz.3.1718" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 185.073681][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.078851][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.097622][T12054] __nla_validate_parse: 2 callbacks suppressed [ 185.097639][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 185.213825][T12056] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.281755][T12061] ip6t_REJECT: ECHOREPLY is not supported [ 185.316357][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.427243][ T40] audit: type=1400 audit(1772681585.916:845): avc: denied { write } for pid=12066 comm="syz.2.1732" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.435268][T12067] binder: BINDER_SET_CONTEXT_MGR already set [ 185.437450][T12067] binder: 12066:12067 ioctl 4018620d 200000000100 returned -16 [ 185.441661][T12067] binder: BINDER_SET_CONTEXT_MGR already set [ 185.443756][T12067] binder: 12066:12067 ioctl 4018620d 200000004a80 returned -16 [ 185.485829][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 185.492058][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.500979][ T9] usb 5-1: string descriptor 0 read error: -22 [ 185.504047][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 185.519670][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.544428][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 185.633285][T12074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.637108][T12074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.672611][T12075] 9p: Could not find request transport: virvio [ 185.696300][ T40] audit: type=1400 audit(1772681586.186:846): avc: denied { append } for pid=12073 comm="syz.1.1735" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.696395][T12075] random: crng reseeded on system resumption [ 185.732778][ T9] usb 5-1: USB disconnect, device number 9 [ 185.746639][T12074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.755710][T12074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.816238][T12074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.819864][T12074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.887071][T12092] program syz.3.1739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.903619][T12074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.907337][T12074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.064791][ T9252] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.068779][ T9252] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.079782][ T9249] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.082733][ T9249] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.093469][ T9252] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.096534][ T9252] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.106943][ T9249] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.109989][ T9249] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.275160][ T53] libceph: connect (1)[c::]:6789 error -101 [ 186.277442][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 186.399172][T12103] ceph: No mds server is up or the cluster is laggy [ 186.399570][ T40] audit: type=1400 audit(1772681586.886:847): avc: denied { map } for pid=12102 comm="syz.0.1743" path="socket:[50220]" dev="sockfs" ino=50220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.489088][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 186.495469][T12129] cgroup: noprefix used incorrectly [ 186.632900][T12142] xt_hashlimit: size too large, truncated to 1048576 [ 186.734715][ T40] audit: type=1400 audit(1772681587.216:848): avc: denied { mounton } for pid=12132 comm="syz.1.1750" path="/374/file0" dev="tmpfs" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 186.782514][T12152] dlm: no locking on control device [ 186.870612][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 186.908460][T12165] SET target dimension over the limit! [ 187.169943][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'. [ 187.175871][ T53] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 187.325771][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 187.329364][ T53] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 187.332463][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.344007][ T53] pvrusb2: Hardware description: Terratec Grabster AV400 [ 187.346952][ T53] pvrusb2: ********** [ 187.348711][ T53] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 187.352123][ T53] pvrusb2: Important functionality might not be entirely working. [ 187.355479][ T53] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 187.361113][ T53] pvrusb2: ********** [ 187.503800][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 187.539277][ T2487] pvrusb2: Invalid write control endpoint [ 187.600621][ T2487] pvrusb2: Invalid write control endpoint [ 187.602618][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 187.610160][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 187.613274][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 187.617441][ T2487] pvrusb2: Device being rendered inoperable [ 187.619597][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 187.622163][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 187.630303][ T2487] pvrusb2: Attached sub-driver cx25840 [ 187.632356][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 187.635883][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 187.727618][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 187.746394][T12165] pvrusb2: Attempted to execute control transfer when device not ok [ 187.785944][ T9] usb 7-1: USB disconnect, device number 12 [ 187.849923][T12183] bridge_slave_1: left allmulticast mode [ 187.852581][T12183] bridge_slave_1: left promiscuous mode [ 187.855336][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.861969][T12183] bridge_slave_0: left allmulticast mode [ 187.864634][T12183] bridge_slave_0: left promiscuous mode [ 187.867843][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.153132][ T40] audit: type=1400 audit(1772681588.636:849): avc: denied { execute } for pid=12195 comm="syz.3.1768" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 188.322638][T12206] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 188.376994][T12211] loop9: detected capacity change from 0 to 7 [ 188.418869][T11100] Dev loop9: unable to read RDB block 7 [ 188.420900][T11100] loop9: unable to read partition table [ 188.422935][T11100] loop9: partition table beyond EOD, truncated [ 188.439522][T12211] Dev loop9: unable to read RDB block 7 [ 188.444191][T12212] kvm: kvm [12210]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 188.444552][T12211] loop9: unable to read partition table [ 188.452723][T12212] kvm: kvm [12210]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 188.453707][T12211] loop9: partition table beyond EOD, truncated [ 188.475938][T12211] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 188.583219][T12222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1776'. [ 188.815412][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 188.833740][T12231] hsr_slave_1 (unregistering): left promiscuous mode [ 188.868705][T12233] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 188.871407][T12233] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.213341][T12247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1785'. [ 189.271530][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.277851][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.302123][T12256] ptrace attach of "/syz-executor exec"[5921] was attempted by "/syz-executor exec"[12256] [ 189.400727][T12266] veth0: entered promiscuous mode [ 189.805728][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 189.814932][T12282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.844864][T12284] netlink: 'syz.0.1793': attribute type 4 has an invalid length. [ 189.929820][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 189.929836][ T40] audit: type=1400 audit(1772681590.416:851): avc: denied { watch watch_reads } for pid=12285 comm="syz.0.1794" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 189.958923][ T9] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 189.962435][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 53248, setting to 64 [ 189.966519][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 189.970437][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.973682][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.976798][ T9] usb 8-1: Product: syz [ 189.978344][ T9] usb 8-1: Manufacturer: syz [ 189.980046][ T9] usb 8-1: SerialNumber: syz [ 189.983169][ T9] usb 8-1: config 0 descriptor?? [ 189.990457][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 189.992568][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 189.997152][ T9] usb 8-1: selecting invalid altsetting 0 [ 190.030083][T12293] random: crng reseeded on system resumption [ 190.306454][ T1026] usb 8-1: USB disconnect, device number 21 [ 190.454235][T12315] program syz.0.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.462961][T12315] sch_fq: defrate 4294967295 ignored. [ 190.532972][T12317] nfs: Unknown parameter '' [ 190.536173][T12317] SELinux: Context TIPCv2 is not valid (left unmapped). [ 190.545827][ T40] audit: type=1400 audit(190.455:852): avc: denied { relabelto } for pid=12316 comm="syz.0.1805" name="file1" dev="tmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="TIPCv2" [ 190.568537][ T40] audit: type=1400 audit(190.455:853): avc: denied { associate } for pid=12316 comm="syz.0.1805" name="file1" dev="tmpfs" ino=2836 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="TIPCv2" [ 190.645163][ T40] audit: type=1400 audit(190.555:854): avc: denied { unlink } for pid=5925 comm="syz-executor" name="file1" dev="tmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="TIPCv2" [ 190.859048][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 191.006072][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 191.010765][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.015516][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.022530][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 191.027079][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.030992][ T9] usb 6-1: Product: syz [ 191.033065][ T9] usb 6-1: Manufacturer: syz [ 191.035340][ T9] usb 6-1: SerialNumber: syz [ 191.043298][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 191.047050][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 191.252974][ T9] r8152-cfgselector 6-1: USB disconnect, device number 31 [ 191.798961][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.802162][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.805144][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.808584][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.813299][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.817113][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.821216][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.824357][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.828194][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.831318][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.834205][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.837889][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.841447][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.844734][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.848329][T12364] overlay: filesystem on ./bus not supported as upperdir [ 191.948927][T12375] __nla_validate_parse: 5 callbacks suppressed [ 191.948942][T12375] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1826'. [ 192.200560][T12383] netlink: 'syz.0.1828': attribute type 1 has an invalid length. [ 192.203316][T12383] netlink: 'syz.0.1828': attribute type 2 has an invalid length. [ 192.331333][T12392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1831'. [ 192.334842][T12392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1831'. [ 192.379783][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'. [ 192.383227][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'. [ 192.472806][T12406] syzkaller0: entered promiscuous mode [ 192.474729][T12406] syzkaller0: entered allmulticast mode [ 192.481432][T12406] tipc: Enabled bearer , priority 0 [ 192.489958][T12405] tipc: Resetting bearer [ 192.500682][T12405] tipc: Disabling bearer [ 192.597500][T12414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.603674][T12414] block device autoloading is deprecated and will be removed. [ 192.681576][T12429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12429 comm=syz.2.1838 [ 192.739460][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 192.743349][ T40] audit: type=1400 audit(192.655:855): avc: denied { validate_trans } for pid=12428 comm="syz.2.1838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 192.806605][T12443] macsec0: entered promiscuous mode [ 192.809137][T12443] macsec0: entered allmulticast mode [ 192.811548][T12443] veth1_macvtap: entered allmulticast mode [ 193.025178][ T40] audit: type=1804 audit(192.935:856): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1844" name="/newroot/551/file1" dev="tmpfs" ino=2987 res=1 errno=0 [ 193.034496][T12455] binder: 12454:12455 ioctl 4018620d 200000004a80 returned -22 [ 193.038824][T12455] binder: 12454:12455 ioctl c0306201 2000000004c0 returned -14 [ 193.061007][T12455] binder: 12454:12455 ioctl c0306201 2000000001c0 returned -14 [ 193.086314][ T9] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 193.237313][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.240682][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.243612][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 193.247792][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 193.250989][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.255499][T12449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.259424][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 193.261519][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 193.264138][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 193.266529][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 193.269745][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 193.271861][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 193.382276][ T40] audit: type=1326 audit(193.295:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12465 comm="syz.0.1849" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a3a79c799 code=0x0 [ 193.734440][T12479] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 194.463767][T12510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.517729][T12513] SELinux: syz.3.1861 (12513) set checkreqprot to 1. This is no longer supported. [ 194.524731][ T40] audit: type=1400 audit(194.435:858): avc: denied { setcheckreqprot } for pid=12512 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 194.592935][T12517] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1863'. [ 194.616192][T12517] netlink: 'syz.2.1863': attribute type 39 has an invalid length. [ 194.619922][T12517] veth0_macvtap: left promiscuous mode [ 194.803178][ T40] audit: type=1400 audit(194.715:859): avc: denied { create } for pid=12527 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 194.813226][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 195.313809][ T40] audit: type=1326 audit(195.225:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12547 comm="syz.3.1872" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd02579c799 code=0x0 [ 195.325711][ T40] audit: type=1400 audit(195.235:861): avc: denied { ioctl } for pid=12549 comm="syz.0.1873" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 195.325897][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 195.487114][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.491012][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.494360][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.499274][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.502484][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.507102][ T29] usb 7-1: config 0 descriptor?? [ 195.918528][ T29] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 195.927075][T12574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12574 comm=syz.0.1880 [ 196.272483][ T40] audit: type=1400 audit(196.185:862): avc: denied { setattr } for pid=12584 comm="syz.3.1884" name="HCI" dev="sockfs" ino=50095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.276707][T12585] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.426219][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 196.466753][T12601] geneve1: entered allmulticast mode [ 196.578059][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.583238][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.587725][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.590250][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 196.593381][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.598207][ T9] usb 5-1: config 0 descriptor?? [ 196.701416][T12611] tipc: Enabling of bearer rejected, failed to enable media [ 196.765825][ T1026] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 196.839992][T12448] cdc_wdm 6-1:1.0: Error autopm - -16 [ 196.840284][ T53] usb 6-1: USB disconnect, device number 32 [ 196.861181][ T29] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 196.877163][ T29] usb 7-1: USB disconnect, device number 13 [ 196.931711][ T1026] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 196.938653][ T1026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 196.943715][ T1026] usb 8-1: Product: syz [ 196.947503][ T1026] usb 8-1: Manufacturer: syz [ 196.950256][ T1026] usb 8-1: SerialNumber: syz [ 196.958998][ T1026] usb 8-1: config 0 descriptor?? [ 196.966742][ T1026] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 196.970717][ T1026] dvb-usb: bulk message failed: -22 (2/0) [ 196.976961][T12617] fido_id[12617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 196.979302][ T1026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.986784][ T1026] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 196.990447][ T1026] usb 8-1: media controller created [ 197.002894][ T1026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.021458][ T9] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x3 [ 197.024475][ T9] hid-steam 0003:28DE:1102.0009: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 197.096461][ T9] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' connected [ 197.102099][ T9] input: Steam Controller as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:28DE:1102.0009/input/input36 [ 197.116629][ T9] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x3 [ 197.129299][ T9] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 197.223134][ T840] usb 5-1: USB disconnect, device number 10 [ 197.239414][ T1026] cxusb: set interface failed [ 197.241800][ T1026] dvb-usb: bulk message failed: -22 (1/0) [ 197.272760][ T1026] DVB: Unable to find symbol mt352_attach() [ 197.276999][ T1026] dvb-usb: bulk message failed: -22 (5/0) [ 197.279797][ T1026] zl10353_read_register: readreg error (reg=127, ret==-121) [ 197.283722][ T1026] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 197.345798][ T1026] rc_core: IR keymap rc-dvico-mce not found [ 197.348511][ T1026] Registered IR keymap rc-empty [ 197.352102][ T1026] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 197.358827][ T1026] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input37 [ 197.408756][ T840] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' disconnected [ 197.421140][ T1026] dvb-usb: schedule remote query interval to 100 msecs. [ 197.424308][ T1026] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 197.430589][ T1026] usb 8-1: USB disconnect, device number 22 [ 197.524133][ T1026] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 197.539949][T12634] mkiss: ax0: crc mode is auto. [ 197.852653][ T40] audit: type=1400 audit(197.765:863): avc: denied { map } for pid=12648 comm="syz.1.1900" path="socket:[52412]" dev="sockfs" ino=52412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.865952][ T40] audit: type=1400 audit(197.765:864): avc: denied { accept } for pid=12648 comm="syz.1.1900" path="socket:[52412]" dev="sockfs" ino=52412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.874397][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1896'. [ 197.889990][ T40] audit: type=1400 audit(197.795:865): avc: denied { setattr } for pid=12654 comm="syz.3.1901" name="XDP" dev="sockfs" ino=52415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 198.168527][ T40] audit: type=1400 audit(198.085:866): avc: denied { mount } for pid=12675 comm="syz.0.1907" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.177682][ T40] audit: type=1400 audit(198.085:867): avc: denied { mounton } for pid=12675 comm="syz.0.1907" path="/575/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.178069][T12676] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.185119][ T40] audit: type=1400 audit(198.085:868): avc: denied { read } for pid=12675 comm="syz.0.1907" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.245903][ T40] audit: type=1400 audit(198.165:869): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.926413][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 198.963395][T12711] can: request_module (can-proto-0) failed. [ 199.029531][ T5929] Bluetooth: hci3: unexpected event for opcode 0x040e [ 199.032248][T12718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.081827][T12720] loop5: detected capacity change from 0 to 4096 [ 199.106976][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.110247][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.113438][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.120302][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 199.123374][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 199.126328][ T9] usb 7-1: Product: syz [ 199.127740][ T9] usb 7-1: Manufacturer: syz [ 199.129262][ T9] usb 7-1: SerialNumber: syz [ 199.279416][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.335469][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.536110][ T9] usb 7-1: USB disconnect, device number 14 [ 199.541595][ T9] usblp0: removed [ 199.956894][T12741] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.986981][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.135871][ T9] usb 5-1: device descriptor read/64, error -71 [ 200.376048][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.508851][ T9] usb 5-1: device descriptor read/64, error -71 [ 200.636792][ T9] usb usb5-port1: attempt power cycle [ 200.642528][T12758] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 200.672800][T12758] bond7: entered promiscuous mode [ 200.674804][T12758] bond7: entered allmulticast mode [ 200.677925][T12758] 8021q: adding VLAN 0 to HW filter on device bond7 [ 200.694290][T12757] erspan1: entered allmulticast mode [ 200.700972][T12757] bond7: (slave erspan1): making interface the new active one [ 200.704384][T12757] erspan1: entered promiscuous mode [ 200.708628][T12757] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 200.863413][T12766] binder: BINDER_SET_CONTEXT_MGR already set [ 200.866267][T12766] binder: 12765:12766 ioctl 4018620d 2000000000c0 returned -16 [ 200.880313][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 200.880327][ T40] audit: type=1400 audit(200.795:873): avc: denied { listen } for pid=12765 comm="syz.2.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.985783][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 201.036415][ T9] usb 5-1: device descriptor read/8, error -71 [ 201.058902][T12774] netlink: 700 bytes leftover after parsing attributes in process `syz.2.1942'. [ 201.058906][T12775] netlink: 700 bytes leftover after parsing attributes in process `syz.2.1942'. [ 201.068655][T12774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.306107][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 201.326210][ T9] usb 5-1: device descriptor read/8, error -71 [ 201.446014][ T9] usb usb5-port1: unable to enumerate USB device [ 201.584221][T12744] kexec: Could not allocate control_code_buffer [ 201.692360][T12783] Invalid option length (1048180) for dns_resolver key [ 202.146534][ T40] audit: type=1400 audit(201.995:874): avc: denied { lock } for pid=12781 comm="syz.3.1944" path="socket:[54669]" dev="sockfs" ino=54669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 202.819541][T12795] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 202.848178][T12792] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 203.013824][T12799] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1946'. [ 203.020677][T12800] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1946'. [ 203.942696][T12836] netlink: 'syz.1.1956': attribute type 10 has an invalid length. [ 203.945461][T12836] team_slave_0: left promiscuous mode [ 203.947695][T12836] team_slave_1: left promiscuous mode [ 203.948823][T12840] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 203.958483][T12836] team0: Cannot enslave team device to itself [ 204.021419][ T40] audit: type=1400 audit(203.935:875): avc: denied { map } for pid=12835 comm="syz.1.1956" path="socket:[54819]" dev="sockfs" ino=54819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 204.030594][T12852] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 204.078212][T12853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 204.080062][T12857] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 204.086042][T12854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 204.096525][T12857] UDF-fs: Scanning with blocksize 2048 failed [ 204.100431][T12857] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 204.103635][T12857] UDF-fs: Scanning with blocksize 4096 failed [ 204.347146][T12869] netlink: 'syz.3.1963': attribute type 39 has an invalid length. [ 204.408107][T12869] veth0_macvtap: left promiscuous mode [ 204.437416][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 204.441202][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 204.647005][T12877] netlink: 'syz.0.1967': attribute type 3 has an invalid length. [ 204.756955][T12884] affs: No valid root block on device nullb0 [ 204.787628][T12887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.856452][T12891] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 204.865227][T12891] CIFS mount error: No usable UNC path provided in device string! [ 204.865227][T12891] [ 204.885909][T12891] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 204.944364][T12899] CIFS mount error: No usable UNC path provided in device string! [ 204.944364][T12899] [ 204.970942][T12899] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.018940][ T40] audit: type=1400 audit(204.935:876): avc: denied { write } for pid=12897 comm="syz.2.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.107677][T12903] netlink: 'syz.3.1975': attribute type 5 has an invalid length. [ 205.385900][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.557322][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 205.565813][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.570433][ T29] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.579496][ T29] usb 5-1: string descriptor 0 read error: -22 [ 205.582480][ T29] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 205.587372][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.621322][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 205.801929][ T29] usb 5-1: USB disconnect, device number 15 [ 206.247027][T12924] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.250455][T12924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.252602][T12924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.304359][T12946] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.418407][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'. [ 206.422983][T12959] block nbd1: Unsupported socket: should be TCP or UNIX. [ 206.424176][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 206.476942][T12962] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 206.479961][T12962] SELinux: failed to load policy [ 206.538273][T12968] program syz.1.1993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.654277][T12989] syzkaller0: entered promiscuous mode [ 206.658364][T12989] syzkaller0: entered allmulticast mode [ 206.663373][T12989] tipc: Enabled bearer , priority 0 [ 206.689559][T12988] tipc: Resetting bearer [ 206.704995][T12988] tipc: Disabling bearer [ 206.938871][T13013] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 206.976132][T13013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2004'. [ 207.411775][T13037] ./cgroup: Can't lookup blockdev [ 207.453998][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 207.515771][ T5929] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.855520][T13050] ip6gre2: entered promiscuous mode [ 207.866113][T13050] ip6gre2: entered allmulticast mode [ 207.982730][ T40] audit: type=1400 audit(207.895:877): avc: denied { execute } for pid=13060 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 208.007443][ T40] audit: type=1400 audit(207.895:878): avc: denied { execute_no_trans } for pid=13060 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 208.046643][T13064] team_slave_0: entered allmulticast mode [ 208.101439][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.109618][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.114003][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.117201][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.121181][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.146418][T13064] wg1: entered allmulticast mode [ 208.170673][T13069] xfrm0 speed is unknown, defaulting to 1000 [ 208.247207][ T8919] bond0: (slave syz_tun): Releasing backup interface [ 208.323811][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.327800][ T5929] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.329946][ T5929] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.371552][T13069] chnl_net:caif_netlink_parms(): no params data found [ 208.377071][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.380369][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.383851][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.389942][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.393234][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.396886][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.401125][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.404588][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.411764][T13088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'. [ 208.498332][T13099] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 208.505942][T13100] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 208.561410][T13108] tmpfs: Unknown parameter 's' [ 208.582342][T13069] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.584964][T13069] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.588252][T13069] bridge_slave_0: entered allmulticast mode [ 208.592143][T13069] bridge_slave_0: entered promiscuous mode [ 208.596876][T13069] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.599609][T13069] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.602192][T13069] bridge_slave_1: entered allmulticast mode [ 208.605995][T13069] bridge_slave_1: entered promiscuous mode [ 208.660246][ T9255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.664952][ T9255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.690317][T13069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.695014][T13069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.710447][T13069] team0: Port device team_slave_0 added [ 208.713711][T13069] team0: Port device team_slave_1 added [ 208.737330][ T9255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.741232][ T9255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.751872][T13069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.754295][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.763347][T13069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.768074][T13069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.770491][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.779494][T13069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.802684][T13069] hsr_slave_0: entered promiscuous mode [ 208.805098][T13069] hsr_slave_1: entered promiscuous mode [ 208.808032][T13069] debugfs: 'hsr0' already exists in 'hsr' [ 208.810059][T13069] Cannot create hsr debugfs directory [ 208.825053][ T9255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.828891][ T9255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.916171][ T9255] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 209.097744][T13083] overlayfs: statfs failed on './file0' [ 209.134040][ T9255] team0: left allmulticast mode [ 209.136870][ T9255] team_slave_0: left allmulticast mode [ 209.139588][ T9255] team_slave_1: left allmulticast mode [ 209.142278][ T9255] team0: left promiscuous mode [ 209.144629][ T9255] team_slave_0: left promiscuous mode [ 209.149451][ T9255] team_slave_1: left promiscuous mode [ 209.154318][ T9255] bridge0: port 3(team0) entered disabled state [ 209.160923][ T9255] bridge_slave_0: left allmulticast mode [ 209.162960][ T9255] bridge_slave_0: left promiscuous mode [ 209.165003][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.433183][ T9255] bond6 (unregistering): (slave ip6erspan0): Removing an active aggregator [ 209.438595][ T9255] bond6 (unregistering): (slave ip6erspan0): Releasing backup interface [ 209.860821][ T9255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.908608][ T9255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.967654][ T9255] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 209.986446][ T9255] bond0 (unregistering): Released all slaves [ 209.993728][ T9255] bond1 (unregistering): Released all slaves [ 210.000407][ T9255] bond2 (unregistering): Released all slaves [ 210.006937][ T9255] bond3 (unregistering): Released all slaves [ 210.014778][ T9255] bond4 (unregistering): (slave veth5): Releasing active interface [ 210.047516][ T9255] bond4 (unregistering): Released all slaves [ 210.054218][ T9255] bond5 (unregistering): Released all slaves [ 210.062694][ T9255] bond6 (unregistering): Released all slaves [ 210.074429][ T9255] bond7 (unregistering): Released all slaves [ 210.088276][T13113] erspan0: entered promiscuous mode [ 210.090733][T13113] gretap0: entered promiscuous mode [ 210.093120][T13113] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 210.096715][T13113] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 210.165875][ T63] Bluetooth: hci4: command tx timeout [ 210.214905][ T9255] tipc: Left network mode [ 210.273202][T13135] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 210.311473][ T9255] IPVS: stopping backup sync thread 10683 ... [ 210.433287][T13142] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 210.441342][T13142] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 210.563241][T13069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.580256][T13069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.585595][T13069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.591010][T13069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.640803][T13069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.653696][T13069] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.661004][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.663480][ T9249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.682265][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.684796][ T9251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.818861][T13069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.824392][ T9255] hsr_slave_0: left promiscuous mode [ 210.827976][ T9255] hsr_slave_1: left promiscuous mode [ 210.830966][ T9255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.834156][ T9255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.845411][ T9255] veth1_vlan: left allmulticast mode [ 210.849667][ T9255] veth1_macvtap: left promiscuous mode [ 210.852350][ T9255] veth0_macvtap: left promiscuous mode [ 210.854706][ T9255] veth1_vlan: left promiscuous mode [ 210.856872][ T9255] veth0_vlan: left promiscuous mode [ 210.909528][ T9255] pimreg3 (unregistering): left allmulticast mode [ 211.000682][T13127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.004964][T13127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.007330][T13127] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.009480][T13127] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 211.019405][T13127] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 211.021980][ T9255] team0 (unregistering): Port device team_slave_1 removed [ 211.029079][ T9255] team0 (unregistering): Port device team_slave_0 removed [ 211.105841][ T9255] lo (unregistering): left allmulticast mode [ 211.117998][T13171] 9pnet_virtio: no channels available for device syz [ 211.144740][T13175] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 211.150422][T13175] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 211.154426][T13175] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.164709][T13069] veth0_vlan: entered promiscuous mode [ 211.197424][T13069] veth1_vlan: entered promiscuous mode [ 211.232994][T13069] veth0_macvtap: entered promiscuous mode [ 211.240145][T13069] veth1_macvtap: entered promiscuous mode [ 211.265388][T13177] hfsplus: unable to find HFS+ superblock [ 211.267967][T13069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.279983][T13069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.289700][ T767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.295914][ T767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.301249][ T767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.304248][ T767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.337527][ T40] audit: type=1400 audit(211.255:879): avc: denied { getopt } for pid=13184 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 211.338294][T13185] xt_cgroup: path and classid specified [ 211.568821][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.572633][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.592395][ T9253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.597619][ T9253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.619361][ T40] audit: type=1400 audit(211.535:880): avc: denied { mounton } for pid=13069 comm="syz-executor" path="/syzkaller.hiEKEU/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 211.631580][ T40] audit: type=1400 audit(211.545:881): avc: denied { mounton } for pid=13069 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 211.660195][ T9255] IPVS: stop unused estimator thread 0... [ 211.666505][ T40] audit: type=1400 audit(211.575:882): avc: denied { write } for pid=13069 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 211.678931][ T40] audit: type=1400 audit(211.575:883): avc: denied { open } for pid=13069 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 211.730688][ T40] audit: type=1400 audit(211.645:884): avc: denied { write } for pid=13206 comm="syz.3.2056" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 211.730939][T13206] mmap: syz.3.2056 (13206): VmData 37593088 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 211.763930][T13210] trusted_key: encrypted_key: keylen parameter is missing [ 211.774344][T13210] loop4: detected capacity change from 0 to 7 [ 211.787875][T13210] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 211.789906][T13210] loop4: partition table partially beyond EOD, truncated [ 211.792754][T13210] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 211.814838][T11100] udevd[11100]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 211.850437][T13212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.851645][T13218] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 211.853408][T13212] overlayfs: missing 'lowerdir' [ 211.888512][T13222] bridge_slave_1: left allmulticast mode [ 211.890405][T13222] bridge_slave_1: left promiscuous mode [ 211.892243][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.897256][T13222] bridge_slave_0: left allmulticast mode [ 211.899121][T13222] bridge_slave_0: left promiscuous mode [ 211.901024][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.116306][T13237] debugfs: 'ttyS3' already exists in 'caif_serial' [ 212.315805][ T5929] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.516762][ T40] audit: type=1400 audit(212.435:885): avc: denied { getopt } for pid=13258 comm="syz.2.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.806374][ T1026] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 212.967911][ T1026] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 212.971651][ T1026] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 4 [ 212.977696][ T1026] usb 7-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 212.980825][ T1026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.983577][ T1026] usb 7-1: Product: syz [ 212.984984][ T1026] usb 7-1: Manufacturer: syz [ 212.987622][ T1026] usb 7-1: SerialNumber: syz [ 213.021470][T13301] dvmrp0: entered allmulticast mode [ 213.035879][ T5929] Bluetooth: hci4: command 0x040f tx timeout [ 213.035987][ T5930] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.197236][ T1026] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 213.220442][ T1026] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 213.221296][T11935] udevd[11935]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 213.248298][T11100] udevd[11100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.293311][ T40] audit: type=1400 audit(213.205:886): avc: denied { setopt } for pid=13320 comm="syz.0.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.540167][ T40] audit: type=1400 audit(213.455:887): avc: denied { mounton } for pid=13349 comm="syz.1.2086" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 213.543028][T13350] befs: (nullb0): No write support. Marking filesystem read-only [ 213.553115][T13350] befs: (nullb0): invalid magic header [ 213.758817][T13355] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 213.821297][T13361] loop2: detected capacity change from 0 to 7 [ 213.824577][T11100] Dev loop2: unable to read RDB block 7 [ 213.827575][T11100] loop2: AHDI p1 p2 p3 p4 [ 213.829171][T11100] loop2: partition table partially beyond EOD, truncated [ 213.832055][T11100] loop2: p1 start 1601398130 is beyond EOD, truncated [ 213.834393][T11100] loop2: p2 start 1702059890 is beyond EOD, truncated [ 213.836957][T11100] loop2: p3 size 3070370205 extends beyond EOD, truncated [ 213.843530][T13361] Dev loop2: unable to read RDB block 7 [ 213.845548][T13361] loop2: AHDI p1 p2 p3 p4 [ 213.845731][ T1026] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 213.847402][T13361] loop2: partition table partially beyond EOD, truncated [ 213.853376][T13361] loop2: p1 start 1601398130 is beyond EOD, truncated [ 213.855933][T13361] loop2: p2 start 1702059890 is beyond EOD, truncated [ 213.858156][T13361] loop2: p3 size 3070370205 extends beyond EOD, truncated [ 213.881848][T11100] udevd[11100]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 213.892554][T11100] udevd[11100]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 213.996994][ T1026] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.000410][ T1026] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.005247][ T1026] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 214.009621][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.015551][ T1026] usb 6-1: config 0 descriptor?? [ 214.021982][ T1026] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 214.612099][T13382] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 214.614801][T13382] cramfs: wrong magic [ 214.722771][T13384] netlink: 'syz.3.2092': attribute type 4 has an invalid length. [ 214.768268][T13388] __nla_validate_parse: 32 callbacks suppressed [ 214.768283][T13388] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2094'. [ 214.788050][T13388] overlay: Unknown parameter 'audit' [ 214.793198][T13388] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.797593][T13388] overlayfs: failed to set xattr on upper [ 214.800220][T13388] overlayfs: ...falling back to redirect_dir=nofollow. [ 214.802958][T13388] overlayfs: ...falling back to index=off. [ 214.804918][T13388] overlayfs: ...falling back to uuid=null. [ 214.807129][T13388] overlayfs: conflicting lowerdir path [ 215.019721][ T63] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 215.115776][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 215.588279][ T5993] usb 7-1: USB disconnect, device number 15 [ 215.680437][T13432] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 215.825741][ T34] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 215.972132][T13434] overlayfs: unescaped trailing colons in lowerdir mount option. [ 215.985767][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 215.992396][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.996082][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.000678][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.004922][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.009758][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.013818][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.150480][T13439] netlink: 'syz.3.2110': attribute type 12 has an invalid length. [ 216.153105][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 216.156790][T13439] netlink: 'syz.3.2110': attribute type 12 has an invalid length. [ 216.159542][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 216.163576][T13439] netlink: 'syz.3.2110': attribute type 9 has an invalid length. [ 216.220979][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 216.223500][ T34] usbtmc 5-1:16.0: can't read capabilities [ 216.239821][T13445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2113'. [ 216.243120][T13446] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2113'. [ 216.384328][T13453] program syz.3.2115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.429538][ T840] usb 5-1: USB disconnect, device number 16 [ 216.507359][T13461] QAT: Device 9 not found [ 216.511314][T13461] QAT: Invalid ioctl -1061399727 [ 216.614152][ T9] usb 6-1: USB disconnect, device number 33 [ 216.759757][ T40] audit: type=1400 audit(216.675:888): avc: denied { mount } for pid=13477 comm="syz.1.2123" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 217.076946][T13496] [ 217.077836][T13496] ====================================================== [ 217.080214][T13496] WARNING: possible circular locking dependency detected [ 217.082579][T13496] syzkaller #0 Tainted: G L [ 217.084678][T13496] ------------------------------------------------------ [ 217.087085][T13496] syz.1.2129/13496 is trying to acquire lock: [ 217.089135][T13496] ffff88805ba07068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 217.091937][T13496] [ 217.091937][T13496] but task is already holding lock: [ 217.094407][T13496] ffff88801ce9c420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x237/0x370 [ 217.097379][T13496] [ 217.097379][T13496] which lock already depends on the new lock. [ 217.097379][T13496] [ 217.100872][T13496] [ 217.100872][T13496] the existing dependency chain (in reverse order) is: [ 217.103925][T13496] [ 217.103925][T13496] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 217.106481][T13496] mnt_want_write+0x6f/0x450 [ 217.108295][T13496] ovl_create_object+0x12b/0x3b0 [ 217.110197][T13496] lookup_open.isra.0+0xc47/0x11b0 [ 217.112109][T13496] path_openat+0x2291/0x31a0 [ 217.113879][T13496] do_file_open+0x20e/0x430 [ 217.115585][T13496] do_sys_openat2+0x10d/0x1e0 [ 217.117426][T13496] __x64_sys_openat+0x12d/0x210 [ 217.119396][T13496] do_syscall_64+0x106/0xf80 [ 217.121157][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.123426][T13496] [ 217.123426][T13496] -> #3 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 217.126486][T13496] down_read+0x99/0x460 [ 217.128494][T13496] lookup_slow+0x42/0x70 [ 217.130807][T13496] path_lookupat+0x5e8/0xc40 [ 217.133335][T13496] filename_lookup+0x202/0x590 [ 217.135844][T13496] kern_path+0x37/0x50 [ 217.138059][T13496] lookup_bdev+0xd8/0x280 [ 217.139904][T13496] resume_store+0x1d6/0x460 [ 217.141857][T13496] kobj_attr_store+0x58/0x80 [ 217.143658][T13496] sysfs_kf_write+0xf2/0x150 [ 217.145368][T13496] kernfs_fop_write_iter+0x3e0/0x5f0 [ 217.147559][T13496] vfs_write+0x6ac/0x1070 [ 217.149417][T13496] ksys_write+0x12a/0x250 [ 217.151275][T13496] do_syscall_64+0x106/0xf80 [ 217.153297][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.155845][T13496] [ 217.155845][T13496] -> #2 (&of->mutex){+.+.}-{4:4}: [ 217.158714][T13496] __mutex_lock+0x1a2/0x1b90 [ 217.160751][T13496] kernfs_seq_start+0x4f/0x2a0 [ 217.162881][T13496] seq_read_iter+0x2c1/0x1270 [ 217.164945][T13496] kernfs_fop_read_iter+0x46c/0x610 [ 217.167180][T13496] copy_splice_read+0x4ba/0xb90 [ 217.169164][T13496] do_splice_read+0x285/0x370 [ 217.171115][T13496] splice_direct_to_actor+0x2a1/0xa30 [ 217.173285][T13496] do_splice_direct+0x174/0x240 [ 217.175427][T13496] do_sendfile+0xadc/0xe20 [ 217.177401][T13496] __x64_sys_sendfile64+0x1d8/0x220 [ 217.179667][T13496] do_syscall_64+0x106/0xf80 [ 217.181725][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.184263][T13496] [ 217.184263][T13496] -> #1 (&p->lock){+.+.}-{4:4}: [ 217.187036][T13496] __mutex_lock+0x1a2/0x1b90 [ 217.189102][T13496] seq_read_iter+0xe1/0x1270 [ 217.191155][T13496] proc_reg_read_iter+0x220/0x310 [ 217.193338][T13496] copy_splice_read+0x4ba/0xb90 [ 217.195480][T13496] do_splice_read+0x285/0x370 [ 217.197572][T13496] splice_file_to_pipe+0x82/0x120 [ 217.199787][T13496] do_sendfile+0x366/0xe20 [ 217.201785][T13496] __x64_sys_sendfile64+0x1d8/0x220 [ 217.204030][T13496] do_syscall_64+0x106/0xf80 [ 217.206081][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.208597][T13496] [ 217.208597][T13496] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 217.211560][T13496] __lock_acquire+0x14b8/0x2630 [ 217.213720][T13496] lock_acquire+0x1cf/0x380 [ 217.215743][T13496] __mutex_lock+0x1a2/0x1b90 [ 217.217794][T13496] pipe_lock+0x69/0x80 [ 217.219693][T13496] iter_file_splice_write+0x1fd/0x10a0 [ 217.222114][T13496] do_splice+0x109c/0x1fd0 [ 217.224091][T13496] __do_splice+0x237/0x370 [ 217.226088][T13496] __x64_sys_splice+0x187/0x250 [ 217.228210][T13496] do_syscall_64+0x106/0xf80 [ 217.230271][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.232785][T13496] [ 217.232785][T13496] other info that might help us debug this: [ 217.232785][T13496] [ 217.236757][T13496] Chain exists of: [ 217.236757][T13496] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#6 [ 217.236757][T13496] [ 217.242052][T13496] Possible unsafe locking scenario: [ 217.242052][T13496] [ 217.244968][T13496] CPU0 CPU1 [ 217.247091][T13496] ---- ---- [ 217.249212][T13496] rlock(sb_writers#6); [ 217.250923][T13496] lock(&ovl_i_mutex_dir_key[depth]); [ 217.254045][T13496] lock(sb_writers#6); [ 217.256664][T13496] lock(&pipe->mutex); [ 217.258397][T13496] [ 217.258397][T13496] *** DEADLOCK *** [ 217.258397][T13496] [ 217.261627][T13496] 1 lock held by syz.1.2129/13496: [ 217.263659][T13496] #0: ffff88801ce9c420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x237/0x370 [ 217.267229][T13496] [ 217.267229][T13496] stack backtrace: [ 217.269597][T13496] CPU: 1 UID: 0 PID: 13496 Comm: syz.1.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.269624][T13496] Tainted: [L]=SOFTLOCKUP [ 217.269630][T13496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.269640][T13496] Call Trace: [ 217.269647][T13496] [ 217.269654][T13496] dump_stack_lvl+0x100/0x190 [ 217.269686][T13496] print_circular_bug.cold+0x178/0x1c7 [ 217.269712][T13496] check_noncircular+0x146/0x160 [ 217.269738][T13496] __lock_acquire+0x14b8/0x2630 [ 217.269763][T13496] ? __kasan_kmalloc+0xaa/0xb0 [ 217.269784][T13496] ? __kmalloc_noprof+0x301/0x850 [ 217.269804][T13496] lock_acquire+0x1cf/0x380 [ 217.269824][T13496] ? pipe_lock+0x69/0x80 [ 217.269837][T13496] ? __pfx___might_resched+0x10/0x10 [ 217.269853][T13496] __mutex_lock+0x1a2/0x1b90 [ 217.269868][T13496] ? pipe_lock+0x69/0x80 [ 217.269880][T13496] ? pipe_lock+0x69/0x80 [ 217.269893][T13496] ? __pfx___mutex_lock+0x10/0x10 [ 217.269910][T13496] ? trace_kmalloc+0x101/0x130 [ 217.269922][T13496] ? __kasan_kmalloc+0xaa/0xb0 [ 217.269943][T13496] ? pipe_lock+0x69/0x80 [ 217.269953][T13496] pipe_lock+0x69/0x80 [ 217.269965][T13496] iter_file_splice_write+0x1fd/0x10a0 [ 217.269980][T13496] ? futex_unqueue+0x13d/0x2c0 [ 217.270004][T13496] ? __pfx_iter_file_splice_write+0x10/0x10 [ 217.270019][T13496] ? __lock_acquire+0x4a5/0x2630 [ 217.270041][T13496] ? find_held_lock+0x2b/0x80 [ 217.270063][T13496] ? __pfx_iter_file_splice_write+0x10/0x10 [ 217.270077][T13496] do_splice+0x109c/0x1fd0 [ 217.270093][T13496] ? find_held_lock+0x2b/0x80 [ 217.270110][T13496] ? __might_fault+0xc5/0x140 [ 217.270129][T13496] ? __pfx_do_splice+0x10/0x10 [ 217.270145][T13496] __do_splice+0x237/0x370 [ 217.270159][T13496] ? __pfx___do_splice+0x10/0x10 [ 217.270176][T13496] __x64_sys_splice+0x187/0x250 [ 217.270196][T13496] do_syscall_64+0x106/0xf80 [ 217.270210][T13496] ? clear_bhb_loop+0x40/0x90 [ 217.270225][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.270239][T13496] RIP: 0033:0x7fa44299c799 [ 217.270251][T13496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.270264][T13496] RSP: 002b:00007fa44392a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 217.270277][T13496] RAX: ffffffffffffffda RBX: 00007fa442c15fa0 RCX: 00007fa44299c799 [ 217.270286][T13496] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000009 [ 217.270294][T13496] RBP: 00007fa442a32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 217.270303][T13496] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 217.270312][T13496] R13: 00007fa442c16038 R14: 00007fa442c15fa0 R15: 00007ffeb0dbb6a8 [ 217.270327][T13496] [ 217.275958][ T5930] Bluetooth: hci4: command 0x040f tx timeout [ 219.435774][ T5930] Bluetooth: hci4: command 0x040f tx timeout [ 221.525777][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 223.596313][ T63] Bluetooth: hci4: command 0x040f tx timeout [ 225.675978][ T63] Bluetooth: hci4: command 0x040f tx timeout