last executing test programs: 1m21.01376942s ago: executing program 3 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) 1m20.903644326s ago: executing program 3 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) syz_open_dev$vcsu(0x0, 0x6, 0x80100) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000300), 0x16042, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) truncate(&(0x7f0000000000)='./file0\x00', 0x82) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x68811}, 0x8010) 1m20.733924661s ago: executing program 3 (id=178): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x200, 0xff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000240)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000180)={r3}) (async, rerun: 64) r4 = socket(0x10, 0x3, 0xfffffff7) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x34, 0x2e, 0x1, 0x4070bd2d, 0x200006, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x5, 0xfff1}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async, rerun: 64) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (rerun: 64) 1m20.733642931s ago: executing program 3 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000680)=""/156, 0x9c}], 0x4, 0xd6, 0xfff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) 1m20.62396064s ago: executing program 3 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000008000a00", @ANYRES32, @ANYBLOB="1c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001300)={&(0x7f000002a000/0x3000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f000002d000/0x2000)=nil, &(0x7f000002d000/0x1000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000000300)="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", 0x1000, r1}, 0x68) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m20.23389485s ago: executing program 3 (id=190): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000442b4953ed05000100070000000900020073797a30000000000c00078008001240fffffffe11000300686173683a69702c6d61726b0000000005a06affe26afea800050002000000dd411fd88351bffeae7cd0261921331bd6548993f97cf0bc8ab189bfc95eb4b5adacca7af9bd2712e854e026351d4cf37d5b996e94896c3e68ed8fe001d0e2f9defcbac8144e442763c00f44947f30be9861d93d0f563705765516f798cc60cd6f69ae070ac636fe76faa5aa29d932937fa3ce"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x1) 1m20.177017325s ago: executing program 32 (id=190): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000442b4953ed05000100070000000900020073797a30000000000c00078008001240fffffffe11000300686173683a69702c6d61726b0000000005a06affe26afea800050002000000dd411fd88351bffeae7cd0261921331bd6548993f97cf0bc8ab189bfc95eb4b5adacca7af9bd2712e854e026351d4cf37d5b996e94896c3e68ed8fe001d0e2f9defcbac8144e442763c00f44947f30be9861d93d0f563705765516f798cc60cd6f69ae070ac636fe76faa5aa29d932937fa3ce"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x1) 1m20.132645516s ago: executing program 1 (id=192): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x40200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7fff, 0x80000001, 0xfffffff3, 0x2, 0x4, 0x1, 0x3, 0x6, 0x27, 0x5, 0x5, 0xb, 0x13, 0x4, 0xff, 0x1d9}}]}}]}, 0x170}}, 0x24040004) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) listen(r4, 0x3) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$HIDIOCGRAWINFO(r7, 0x80084803, &(0x7f0000000000)=""/157) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x401, 0x0, 0x0, 0xc43c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x40, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x7, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x6, 0x6, 0x40, 0x400, 0x0, 0xbd, 0x0, 0xff, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000000)) 1m19.332811988s ago: executing program 1 (id=193): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, 0x0, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000000c0)="da82e97095eada8e029adfb07edc714aecb28a7fd9750ef27a25f4aa8f220ec3c34c658be8520ff3fd78824347f31ddaebbbdaeabd247464808ec32e5376bf68bed7ad16a51b2ffdef8553a9557e8ce7c86f8def0c9d89427526d8c8ad3632bdd59a10a2a36ae1a25d9f1617298cc3146084c8093207bcc2df28f666af465732ae4155fe05091da29617022c4dcb31") (async) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000010) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) 1m19.283767551s ago: executing program 1 (id=194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x2, 0x4) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x181800, 0x0) (async, rerun: 32) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (rerun: 32) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x18081) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000080)={0x3, 0x1c, &(0x7f0000000040)="838a50d9f15a3569598abe130602bddc670207ce0ebe8b26c1cb2f94"}) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 1m19.233813007s ago: executing program 1 (id=195): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0'}, 0xb) flistxattr(r0, &(0x7f0000000040)=""/56, 0x38) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x402) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)=[{0x34, '\x00', @data=0x4}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae0100000092ea54c7be", 0x20) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m19.141889762s ago: executing program 1 (id=196): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000100)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000140)='udf\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000140)='udf\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m19.140909053s ago: executing program 1 (id=198): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0xc000}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) socket$nl_netfilter(0x10, 0x3, 0xc) 1m4.02760287s ago: executing program 33 (id=198): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0xc000}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) socket$nl_netfilter(0x10, 0x3, 0xc) 39.826986163s ago: executing program 0 (id=733): r0 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r1, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4040, 0xfffb, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) r2 = syz_open_dev$dri(0x0, 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000640), 0x0, 0x2, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x0, r4, r3}) 39.77131879s ago: executing program 0 (id=735): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@weak_binder={0x77622a85, 0x181}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 39.745923971s ago: executing program 0 (id=739): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00000e8000/0x4000)=nil, 0x4000}, 0x2}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x74, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 38.473470297s ago: executing program 0 (id=753): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syzkaller0\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d3, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) creat(&(0x7f0000000040)='./file0\x00', 0x1) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000162"], 0xa, 0x1) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 37.610274875s ago: executing program 0 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$link(0x8, r4, r3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16=r3, @ANYRES8=r3, @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r7 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r6, 0x9) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000340), 0x9, 0x402) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0x80045700, &(0x7f0000000380)) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) io_setup(0x206, &(0x7f0000000200)) io_setup(0x226, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x0, r1}) 37.352786874s ago: executing program 0 (id=779): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8842, 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0xb) 37.277166281s ago: executing program 34 (id=779): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8842, 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0xb) 3.1889173s ago: executing program 2 (id=1124): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) pwrite64(r0, 0x0, 0x0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000180)}, 0x20) pwrite64(r0, &(0x7f0000000480)="736e8c6fc4db1e7e16254040a6f619d722a78ccab6efbd8fde538d0f379b8833ab2c4103e869113386700dc894854aee29c6e4e167780b4ef9c78ce754c2f738d6a3b171122b74bec8a1c124783f139629cbb52a370630b9938f287b63625bfe356102e3333c2a295d7de7cae6836c8a443c397b5be0ea25b4052fc10e9f1c34dd88f5ec9ff742b244e5a0f4274b6aba6144835d016e96376cf3d4a495d2e47da3d6ecb1435c48d3f989e9dd9fcd", 0xae, 0x9) close_range(r1, 0xffffffffffffffff, 0x0) 1.660156206s ago: executing program 4 (id=1144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044804) r3 = socket$unix(0x1, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f00000001c0)=0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0x221, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x804c}, 0x24004000) 1.585564225s ago: executing program 2 (id=1147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$unix(0x1, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x9, {"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", 0x1000}}, 0x1006) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000091}, 0x808) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 1.431524405s ago: executing program 4 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0xea3b}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0xa3637586d74a7eb9, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r3, 0x4b34, 0x3bf) r4 = fsopen(0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@local, @local, 0x1, "c1cfc79a1a0681be78367f868d5cd14cc894930564930bddf3b9e5526697bcfc", 0x5, 0x6, 0xfffffff7, 0x80}, 0x3c) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r9, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) 1.42771819s ago: executing program 2 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) close(0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x3, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000600000000000000000000000500000000000000020000000000009107000000096e3d00000000757365725f696400"], 0x30) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7, 0x810000, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x6, {0x4, 0x5, 0x7, 0x6, 0x8003, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, r2, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.352448866s ago: executing program 6 (id=1153): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x8}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000003010103"], 0x14}, 0x1, 0x0, 0x0, 0x24008890}, 0x200000d0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.202541711s ago: executing program 5 (id=1156): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc/socket\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x4, 0x8, 0xc66c, 0x21, 0x0, "7f0900006b3beb000000009e9d00000800", 0x0, 0x5}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x700, 0xc3, 0x621}}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 968.36965ms ago: executing program 6 (id=1157): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00), 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 32) 967.702156ms ago: executing program 5 (id=1158): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) (async) flock(r0, 0x2) (async) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 967.399776ms ago: executing program 6 (id=1159): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) recvfrom$packet(r2, &(0x7f00000001c0)=""/119, 0x77, 0x20001, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 911.337216ms ago: executing program 5 (id=1160): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="0300000010000100000000000f00000085ff00003d000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 911.031683ms ago: executing program 6 (id=1161): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) fanotify_init(0xf00, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000a40)) 862.763112ms ago: executing program 5 (id=1162): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x7, @sdr={0x3447504d, 0x8}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x7, @sdr={0x3447504d, 0x8}}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) (async) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000000000/0x3000)=nil, 0x6000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x13047}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x13047}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 662.700684ms ago: executing program 5 (id=1163): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000000}) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000006000000200000000057090049030500"/32, @ANYRES32=0x0], 0x20, 0x24048082}, 0x0) 661.039755ms ago: executing program 5 (id=1164): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070002000000000000000000060005000d101000", 0x24) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r0, 0x0, 0x0) 532.10911ms ago: executing program 2 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x32, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1e, 0x0, @gue={{0x1, 0x0, 0x2, 0x2, 0x100, @void}, "700b4247ffcd04f8c848dd168b4c800bc17b"}}}}}}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000240), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) socket(0x28, 0xa, 0x8) 412.657097ms ago: executing program 4 (id=1166): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3900004700bb65e1c3e4ffff010000004003250056000002008000eef40546e61461000000001000000007fd17e5ffff48d97804502a99fff88600"/72, 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3900004700bb65e1c3e4ffff010000004003250056000002008000eef40546e61461000000001000000007fd17e5ffff48d97804502a99fff88600"/72, 0x48}], 0x1) (async) 362.870466ms ago: executing program 4 (id=1167): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44044c81}, 0x0) fstat(r0, &(0x7f0000000040)) (async) fstat(r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "3f669e76f4a4cb63b8bed51f0d192ac64013bf7ce86e341c3c4023ab0284c750", "7a6419e195178434853a3e9b1a944eaa61a5241fa8ecdbefd94b3b70919cb924", "046fed1109542c0adf35ad7318fc6dc1d4212ea4e435b8f7b89db292aa416b43", "16892c77c7349da2ee9172d62169e4b2f530a4bf4fbd158b6ec757f84da86657", "509dce10f40cff0ee40e4b1ef8bb86a2b9e300007bd4bf806f43b8ede700", "44dfa4c216a462b788788b70", 0x1, 0x1, 0xbe5d, 0x8, 0x80000000}}) 222.61653ms ago: executing program 4 (id=1168): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x77, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600), 0x4) 222.297062ms ago: executing program 4 (id=1169): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfff9, 0xa, 0x80, 0x3089}, {0x8, 0x6f, 0x3, 0x200}, {0x7, 0x2, 0x4, 0xffffffff}]}) (async) r1 = semget$private(0x0, 0x6, 0x3b1) semop(r1, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x80, 0x5}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000540)=""/4096) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r3, 0x30d, 0x0, 0xfffffffc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 162.567941ms ago: executing program 2 (id=1170): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000100003050100"/20, @ANYRES32=0x0, @ANYBLOB="000000008008000010001280080001007674690004000280"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRES16=r1, @ANYBLOB="0102005dc503cbdd9684d500020008000321", @ANYRES32=r3, @ANYRESOCT=r0], 0x30}}, 0x0) 162.117768ms ago: executing program 2 (id=1171): r0 = socket(0xb, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001380)=""/152, 0x98}, {&(0x7f0000001540)=""/191, 0xbf}], 0x3}}], 0x1, 0x10160, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x2040) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xbc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000001300)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xdddd0000, 0x1000, &(0x7f0000007000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @enum64={0xd, 0x1, 0x0, 0x13, 0x0, 0xc, [{0x8, 0x80000001, 0x4}]}]}, {0x0, [0x5f, 0x61, 0x61, 0x5f]}}, &(0x7f0000001240)=""/69, 0x42, 0x45, 0x0, 0x0, 0x10000, @value=r6}, 0x28) r7 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x50, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '|q'}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r12 = syz_pidfd_open(r7, 0x0) fsetxattr$trusted_overlay_redirect(r12, &(0x7f0000000040), 0x0, 0x0, 0x2) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r13, &(0x7f0000001680)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x30, r14, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, ':@},\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000880) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x13, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 548.594µs ago: executing program 6 (id=1172): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0xd651, 0x72b) sync_file_range(r0, 0x1, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000010470000000000060000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186900000a00000000000000070000008510000001000000057e0600fcffffff9da9fcff1000000018350000050000000000000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x14, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0xc, 0x1000, 0xa0}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001380)=[r1, r1], &(0x7f00000013c0)=[{0x1, 0x4, 0x7, 0x8}, {0x2, 0x2, 0x3, 0xb}, {0x3, 0x3, 0x0, 0x6}], 0x10, 0xb3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 0s ago: executing program 6 (id=1173): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): usb 10-1: Manufacturer: syz [ 101.287321][ T6518] usb 10-1: SerialNumber: syz [ 101.363202][ T845] libceph: connect (1)[c::]:6789 error -101 [ 101.370493][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 101.375290][ T845] libceph: connect (1)[c::]:6789 error -101 [ 101.377380][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 101.403477][ T8015] Bluetooth: MGMT ver 1.23 [ 101.414371][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.419873][ T845] libceph: connect (1)[c::]:6789 error -101 [ 101.422584][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 101.505711][ T6518] usbhid 10-1:1.0: can't add hid device: -71 [ 101.507819][ T6518] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 101.514680][ T6518] usb 10-1: USB disconnect, device number 10 [ 101.633781][ T845] libceph: connect (1)[c::]:6789 error -101 [ 101.636736][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 101.692612][ T845] libceph: connect (1)[c::]:6789 error -101 [ 101.695467][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 101.716216][ T8019] bridge0: port 3(team0) entered disabled state [ 101.718606][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.721213][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.725068][ T8019] bridge0: entered allmulticast mode [ 101.735650][ T8019] netlink: 'syz.4.668': attribute type 9 has an invalid length. [ 101.738245][ T8019] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.668'. [ 101.803111][ T8023] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.670'. [ 101.973138][ T5744] Bluetooth: hci2: unexpected subevent 0x18 length: 28 > 19 [ 101.975765][ T5744] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 102.141187][ T845] libceph: connect (1)[c::]:6789 error -101 [ 102.144331][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 102.187387][ T8012] ceph: No mds server is up or the cluster is laggy [ 102.190721][ T8015] ceph: No mds server is up or the cluster is laggy [ 102.201580][ T845] libceph: connect (1)[c::]:6789 error -101 [ 102.205742][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 102.295299][ T8041] binder: 8040:8041 ioctl c0306201 0 returned -14 [ 102.335534][ T8045] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.342323][ T8047] tipc: Started in network mode [ 102.344257][ T8045] CIFS mount error: No usable UNC path provided in device string! [ 102.344257][ T8045] [ 102.346005][ T8047] tipc: Node identity ac14140f, cluster identity 4711 [ 102.349814][ T8045] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 102.353572][ T8047] tipc: New replicast peer: 255.255.255.255 [ 102.357852][ T8047] tipc: Enabled bearer , priority 10 [ 102.372242][ T50] usb 7-1: USB disconnect, device number 11 [ 102.424869][ T5744] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 102.480279][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 102.480293][ T40] audit: type=1400 audit(102.383:663): avc: denied { create } for pid=8054 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.521409][ T8053] netlink: 'syz.5.684': attribute type 13 has an invalid length. [ 102.544842][ T1485] libceph: connect (1)[c::]:6789 error -22 [ 102.547899][ T1485] libceph: mon0 (1)[c::]:6789 connect error [ 102.610544][ T5885] libceph: connect (1)[c::]:6789 error -22 [ 102.619430][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 102.724571][ T40] audit: type=1400 audit(102.633:664): avc: denied { mount } for pid=8077 comm="syz.0.690" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.731461][ T8078] devpts: Bad value for 'max' [ 102.731944][ T40] audit: type=1400 audit(102.643:665): avc: denied { remount } for pid=8077 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.755147][ T40] audit: type=1400 audit(102.663:666): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.801190][ T50] libceph: connect (1)[c::]:6789 error -22 [ 102.803675][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 102.881061][ T5799] libceph: connect (1)[c::]:6789 error -22 [ 102.883955][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 102.893932][ T40] audit: type=1400 audit(102.803:667): avc: denied { getopt } for pid=8090 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.044690][ T40] audit: type=1400 audit(102.953:668): avc: denied { map } for pid=8101 comm="syz.5.699" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 103.052572][ T40] audit: type=1400 audit(102.953:669): avc: denied { execute } for pid=8101 comm="syz.5.699" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 103.121851][ T5885] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 103.162032][ T8111] fuse: Unknown parameter 'dd' [ 103.248196][ T40] audit: type=1400 audit(103.153:670): avc: denied { write } for pid=8117 comm="syz.0.705" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 103.254069][ T8120] netlink: 'syz.5.706': attribute type 5 has an invalid length. [ 103.281153][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 103.284530][ T5885] usb 9-1: unable to get BOS descriptor or descriptor too short [ 103.288629][ T5885] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.293846][ T5885] usb 9-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 103.296970][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.299770][ T5885] usb 9-1: Product: syz [ 103.301664][ T5885] usb 9-1: Manufacturer: syz [ 103.303373][ T5885] usb 9-1: SerialNumber: syz [ 103.312399][ T50] libceph: connect (1)[c::]:6789 error -22 [ 103.314854][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 103.363831][ T5799] tipc: Node number set to 2886997007 [ 103.370916][ T8065] ceph: No mds server is up or the cluster is laggy [ 103.373644][ T8069] ceph: No mds server is up or the cluster is laggy [ 103.402334][ T5799] libceph: connect (1)[c::]:6789 error -22 [ 103.405857][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 103.445310][ T40] audit: type=1804 audit(103.353:671): pid=8124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.708" name="/newroot/180/file0" dev="tmpfs" ino=979 res=1 errno=0 [ 103.516025][ T5885] usb 9-1: USB disconnect, device number 10 [ 103.557409][ T40] audit: type=1400 audit(103.463:672): avc: denied { remount } for pid=8134 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.669199][ T8140] syzkaller0: entered promiscuous mode [ 103.671229][ T8140] syzkaller0: entered allmulticast mode [ 104.046696][ T8142] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.051490][ T8142] overlayfs: failed to set xattr on upper [ 104.053523][ T8142] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.062059][ T8142] overlayfs: ...falling back to metacopy=off. [ 104.064481][ T8142] overlayfs: ...falling back to index=off. [ 104.067559][ T8142] overlayfs: ...falling back to uuid=null. [ 104.117662][ T8147] qnx6: unable to read the first superblock [ 104.119817][ T8147] qnx6: unable to read the first superblock [ 104.122365][ T8147] qnx6: unable to read the first superblock [ 104.189693][ T8153] sctp: [Deprecated]: syz.0.726 (pid 8153) Use of int in maxseg socket option. [ 104.189693][ T8153] Use struct sctp_assoc_value instead [ 104.405435][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 104.410952][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 104.450072][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 104.453841][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 104.454072][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.459718][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.689120][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 104.692106][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 104.721144][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 104.724187][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 105.036623][ T8176] __nla_validate_parse: 4 callbacks suppressed [ 105.036658][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 105.112306][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 105.188946][ T8197] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 105.212014][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 105.214662][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 105.221747][ T8158] ceph: No mds server is up or the cluster is laggy [ 105.224065][ T8167] ceph: No mds server is up or the cluster is laggy [ 105.231131][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 105.234459][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 105.373385][ T8213] xt_hashlimit: size too large, truncated to 1048576 [ 105.539649][ T8218] loop3: detected capacity change from 0 to 7 [ 105.545550][ C3] blk_print_req_error: 138 callbacks suppressed [ 105.545565][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.552161][ C3] buffer_io_error: 138 callbacks suppressed [ 105.552202][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.563186][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.566995][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.570986][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.574923][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.578149][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.582062][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.587418][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.590717][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.594395][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.598377][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.602023][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.605615][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.608896][ T8218] ldm_validate_partition_table(): Disk read failed. [ 105.612084][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.615823][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.620135][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.623632][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.626350][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.629305][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 105.630728][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.630779][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 105.634065][ T8218] Dev loop3: unable to read RDB block 0 [ 105.639561][ T8218] loop3: unable to read partition table [ 105.644451][ T8218] loop3: partition table beyond EOD, truncated [ 105.647758][ T8218] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 105.786842][ T5885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.790411][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.794193][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.797389][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.801360][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.805238][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.806852][ T5885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.813135][ T10] usb 9-1: config 0 has no interfaces? [ 105.814647][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.819795][ T5885] usb 5-1: Product: syz [ 105.820425][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.820923][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.744'. [ 105.822138][ T5885] usb 5-1: Manufacturer: syz [ 105.822279][ T8232] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 105.825870][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.829139][ T8232] romfs: unable to set blocksize [ 105.829139][ T8232] [ 105.834575][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 105.835956][ T10] usb 9-1: Product: syz [ 105.838503][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 105.840590][ T5885] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 105.842454][ T10] usb 9-1: Manufacturer: syz [ 105.844288][ T5885] cdc_wdm 5-1:1.0: Unknown control protocol [ 105.846120][ T10] usb 9-1: SerialNumber: syz [ 105.859863][ T10] usb 9-1: config 0 descriptor?? [ 105.891115][ T8234] tmpfs: Group quota inode hardlimit too large. [ 106.036097][ T8210] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 106.043199][ T5885] usb 5-1: USB disconnect, device number 6 [ 106.087187][ T10] usb 9-1: USB disconnect, device number 11 [ 106.259613][ T8245] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 106.263779][ T8245] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 106.324438][ T8250] syzkaller0: entered promiscuous mode [ 106.326436][ T8250] syzkaller0: entered allmulticast mode [ 106.340597][ T8250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8250 comm=syz.2.752 [ 106.345450][ T8250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8250 comm=syz.2.752 [ 106.381576][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.629391][ T8248] input: syz1 as /devices/virtual/input/input20 [ 106.805703][ T8277] binder: 8276:8277 ioctl 40046210 0 returned -14 [ 106.838198][ T8281] capability: warning: `syz.4.761' uses deprecated v2 capabilities in a way that may be insecure [ 106.872487][ T8279] program syz.5.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.917551][ T8285] netlink: 'syz.4.763': attribute type 8 has an invalid length. [ 106.970614][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 106.997939][ T8288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.764'. [ 107.002009][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.006285][ T8288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.764'. [ 107.010488][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.015846][ T8288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.764'. [ 107.016402][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.019306][ T8288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.764'. [ 107.022965][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.025303][ T8294] netlink: 36 bytes leftover after parsing attributes in process `syz.5.766'. [ 107.026819][ T8288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.764'. [ 107.030099][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.039307][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.044040][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.048455][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.052307][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.055974][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.059311][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.063067][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.066425][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.070017][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.074424][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.078658][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.083158][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.087281][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.091389][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.095195][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.099517][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.103436][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.106717][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.110026][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.114409][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.118034][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.123611][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.127446][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.130593][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.134660][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.138556][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.142821][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.146856][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.151329][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.155937][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.160265][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.166771][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.171061][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.174676][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.178658][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.182167][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.185280][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.188384][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.192116][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.195569][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.198659][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.202096][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.205239][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.208374][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.211545][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.214608][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.218131][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.221389][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.224501][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.227606][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.230885][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.235028][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.238788][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.243609][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.247787][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.252653][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.255762][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.258951][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.262118][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.265216][ T8287] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.378434][ T8302] xt_hashlimit: size too large, truncated to 1048576 [ 107.407608][ T8255] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.420802][ T845] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 107.505122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.550741][ T845] usb 10-1: device descriptor read/64, error -71 [ 107.800730][ T845] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 107.876792][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 107.876810][ T40] audit: type=1400 audit(363.786:689): avc: denied { read write } for pid=8323 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.884810][ T5732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.896293][ T40] audit: type=1400 audit(363.786:690): avc: denied { open } for pid=8323 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.904576][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.921616][ T845] usb 10-1: device descriptor read/64, error -71 [ 107.924106][ T5732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.937322][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.940801][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.041100][ T845] usb usb10-port1: attempt power cycle [ 108.400736][ T845] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 108.441237][ T845] usb 10-1: device descriptor read/8, error -71 [ 108.690689][ T845] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 108.721186][ T845] usb 10-1: device descriptor read/8, error -71 [ 108.831124][ T845] usb usb10-port1: unable to enumerate USB device [ 108.943244][ T8320] bond0: entered promiscuous mode [ 108.945583][ T8320] bond_slave_0: entered promiscuous mode [ 108.947953][ T8320] bond_slave_1: entered promiscuous mode [ 108.950973][ T8320] gretap0: entered promiscuous mode [ 108.953684][ T8320] hsr1: entered promiscuous mode [ 108.989565][ T8330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=8330 comm=syz.4.780 [ 109.235193][ T8354] binder: 8353:8354 ioctl 4018620d 0 returned -22 [ 109.339156][ T8362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.395985][ T8377] vcan1: entered allmulticast mode [ 109.398002][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.405494][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.410886][ T8323] bridge_slave_0: entered allmulticast mode [ 109.417856][ T8323] bridge_slave_0: entered promiscuous mode [ 109.424813][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.430764][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.433727][ T8323] bridge_slave_1: entered allmulticast mode [ 109.437186][ T8323] bridge_slave_1: entered promiscuous mode [ 109.459952][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.465753][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.485087][ T8323] team0: Port device team_slave_0 added [ 109.490276][ T8323] team0: Port device team_slave_1 added [ 109.514630][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.520687][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.529435][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.534404][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.536726][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.545774][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.556026][ T8385] syzkaller1: entered allmulticast mode [ 109.581830][ T8323] hsr_slave_0: entered promiscuous mode [ 109.584602][ T8323] hsr_slave_1: entered promiscuous mode [ 109.587270][ T8323] debugfs: 'hsr0' already exists in 'hsr' [ 109.589728][ T8323] Cannot create hsr debugfs directory [ 109.682380][ T8389] binder: 8388:8389 ioctl 4018620d 0 returned -22 [ 109.724720][ T8323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.729749][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.732640][ T8323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.737221][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.740156][ T8323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.744320][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.747110][ T8323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.750279][ T40] audit: type=1400 audit(365.656:691): avc: denied { create } for pid=8395 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.751032][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.760692][ T40] audit: type=1400 audit(365.666:692): avc: denied { write } for pid=8395 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.773360][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.775826][ T8323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.778380][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.781111][ T8323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.813465][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.821684][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.825037][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.827760][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.841612][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.844015][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.849509][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.851925][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.041380][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 110.050832][ T5744] Bluetooth: hci1: command tx timeout [ 110.059640][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.102243][ T40] audit: type=1400 audit(366.016:693): avc: denied { ioctl } for pid=8413 comm="syz.4.801" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 110.191335][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 110.197654][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 110.201300][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 110.207082][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.207576][ T8323] veth0_vlan: entered promiscuous mode [ 110.211613][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 110.213187][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 110.221998][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.222358][ T8323] veth1_vlan: entered promiscuous mode [ 110.224969][ T10] usb 7-1: Product: syz [ 110.228755][ T10] usb 7-1: Manufacturer: syz [ 110.230496][ T10] usb 7-1: SerialNumber: syz [ 110.243231][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 110.244886][ T8323] veth0_macvtap: entered promiscuous mode [ 110.250757][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input21 [ 110.252697][ T8323] veth1_macvtap: entered promiscuous mode [ 110.268928][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.276108][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.283740][ T213] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.290865][ T213] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.294369][ T213] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.300582][ T213] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.351443][ T40] audit: type=1400 audit(366.266:694): avc: denied { write } for pid=8426 comm="syz.5.802" name="/" dev="9p" ino=78402157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.362499][ T213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.365231][ T213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.388082][ T213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.391642][ T213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.397997][ T40] audit: type=1400 audit(366.306:695): avc: denied { mounton } for pid=8323 comm="syz-executor" path="/syzkaller.60jIhv/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 110.408640][ T40] audit: type=1400 audit(366.316:696): avc: denied { mounton } for pid=8323 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 110.464966][ T8432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8432 comm=syz.6.786 [ 110.473278][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.478105][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.502982][ T10] imon:send_packet: packet tx failed (-71) [ 110.520957][ T10] imon 7-1:155.0: panel buttons/knobs setup failed [ 110.524763][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 110.527553][ T10] (id 0x00) [ 110.531809][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.570741][ T10] rc_core: IR keymap rc-imon-pad not found [ 110.572788][ T10] Registered IR keymap rc-empty [ 110.574563][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 110.578117][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 110.581864][ T10] imon:send_packet: packet tx failed (-71) [ 110.600732][ T10] imon 7-1:155.0: remote input dev register failed [ 110.603064][ T10] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 110.627499][ T10] imon 7-1:155.0: unable to initialize intf0, err 0 [ 110.630070][ T10] imon:imon_probe: failed to initialize context! [ 110.632345][ T10] imon 7-1:155.0: unable to register, err -19 [ 110.636656][ T10] usb 7-1: USB disconnect, device number 12 [ 110.711820][ T8439] binder: 8438:8439 ioctl 4018620d 0 returned -22 [ 110.740880][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 110.826073][ T8445] macvtap1: entered promiscuous mode [ 110.828000][ T8445] macvtap1: entered allmulticast mode [ 110.852207][ T8450] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 110.859488][ T8450] __nla_validate_parse: 63 callbacks suppressed [ 110.859500][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.809'. [ 110.891927][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 110.897918][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.912107][ T9] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.919043][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.922572][ T9] usb 11-1: Product: syz [ 110.924143][ T9] usb 11-1: Manufacturer: syz [ 110.925788][ T9] usb 11-1: SerialNumber: syz [ 110.928639][ T9] usb 11-1: config 0 descriptor?? [ 110.933923][ T9] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.937887][ T9] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 111.053903][ T8457] netlink: 64 bytes leftover after parsing attributes in process `syz.4.811'. [ 111.130862][ T8457] nbd1: detected capacity change from 0 to 2111 [ 111.137652][ T5744] block nbd1: Receive control failed (result -104) [ 111.415917][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.814'. [ 111.493532][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.546770][ T9] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 111.734661][ T8510] veth0_to_team: entered promiscuous mode [ 111.738192][ T8510] gretap0: entered promiscuous mode [ 111.741883][ T8510] debugfs: 'hsr1' already exists in 'hsr' [ 111.744390][ T8510] Cannot create hsr debugfs directory [ 111.752434][ T40] audit: type=1400 audit(367.666:697): avc: denied { create } for pid=8509 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.771042][ T40] audit: type=1400 audit(367.666:698): avc: denied { setattr } for pid=8509 comm="syz.2.818" path="socket:[26212]" dev="sockfs" ino=26212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.131054][ T5744] Bluetooth: hci1: command tx timeout [ 112.141976][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.351359][ T9] em28xx 11-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 112.356001][ T9] em28xx 11-1:0.0: board has no eeprom [ 112.381063][ T8523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.383166][ T8523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.392089][ T8523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.405037][ T8523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.408473][ T8523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.412210][ T8523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.417020][ T8523] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.423578][ T8523] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.490019][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8528 comm=syz.5.823 [ 112.640713][ T9] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 112.644213][ T9] em28xx 11-1:0.0: dvb set to bulk mode. [ 112.646193][ T1041] em28xx 11-1:0.0: Binding DVB extension [ 112.750972][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.826'. [ 112.756683][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.826'. [ 112.761304][ T8534] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.826'. [ 112.765766][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.826'. [ 112.770794][ T8534] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 112.780922][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.826'. [ 112.802171][ T5885] usb 11-1: USB disconnect, device number 2 [ 112.807761][ T5885] em28xx 11-1:0.0: Disconnecting em28xx [ 112.838738][ T1041] em28xx 11-1:0.0: Registering input extension [ 112.849095][ T5885] em28xx 11-1:0.0: Closing input extension [ 112.880009][ T8550] netlink: 'syz.2.829': attribute type 39 has an invalid length. [ 112.895291][ T8550] bridge0: port 3(syz_tun) entered disabled state [ 112.952126][ T8550] syz_tun (unregistering): left allmulticast mode [ 112.954330][ T8550] syz_tun (unregistering): left promiscuous mode [ 112.956801][ T8550] bridge0: port 3(syz_tun) entered disabled state [ 112.958601][ T5885] em28xx 11-1:0.0: Freeing device [ 113.790718][ T50] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 113.960724][ T50] usb 11-1: Using ep0 maxpacket: 32 [ 113.968459][ T50] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 113.976928][ T50] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 113.981167][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.984732][ T50] usb 11-1: Product: äƒí›¨ï£©á‰¶ß©âŒƒæ«Œç¥Šâ¡è½œè‡â”©á¢€ì§”兿ᓖ밬ｽ쒽ᨢ₇㿼äžá­‹æ†šè‹¯î…Žå¥¿äž»âŒ®á†¾ï®žÒ¬â›„象嵈漽슎བྷ밎㊫툇䞋陗喺쎙盲ൿ鶛鮴쟴ë´ì¹Žã´ŸçŽ‹Í•ì¨¢ä±£ä²¸í˜â¸¯â¾‹í‹£î—‘鶦æµáº–㮧鮠㵳 [ 113.994484][ T8563] netlink: 'syz.2.835': attribute type 3 has an invalid length. [ 113.994730][ T50] usb 11-1: Manufacturer: 喗꿃婷挣ì±æš–줨긺旛ᰎë«ï½ç‘™ë±†ã«®å¢ãëšê¥ [ 114.002673][ T50] usb 11-1: SerialNumber: 䢰特㢹ࡘ栨㨣輪弅ç¬î‚ ê¼±ãœê–—ꯃ妴뉟誕ष魂茦힋⦶踴ᮼ잸å‹ïª¯ç•æ‘’ä˜îº®î¥¡é„¦é€¬ê¯ˆì›‰ê–¡ï·¬æ·»åŸ±ê¢¹í˜›äŠ‰äµ…牢짟厥豀᳥æ¢ë£ã±æ´Šå†½çŒïµ¦åŠ­æŽ±î¾¨é䰥뾒鷭Ⱦ︧䄖찼æ¸ä¦ìŽ®â§Œéžã“™â·ºâ©±ç ©ê–®á´á¶”ឨ㽊쓜䠔㘮㈿譄穋ܷᰓￛ㪈㈼樤헀⭟텤≫⪌ﴵ쉆Ⲍ嬤ꥲ龹ç…춾锫 [ 114.047267][ T8565] fuse: blksize only supported for fuseblk [ 114.063945][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.070553][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.076713][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.118815][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027130000: rx timeout, send abort [ 114.120539][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 114.120594][ T40] audit: type=1400 audit(370.026:703): avc: denied { create } for pid=8568 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.121786][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027130000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.150355][ T40] audit: type=1400 audit(370.046:704): avc: denied { write } for pid=8568 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.160848][ T8571] netlink: 'syz.4.838': attribute type 322 has an invalid length. [ 114.238874][ T8578] nbd: must specify an index to disconnect [ 114.246021][ T8578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.843'. [ 114.316930][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 114.374297][ T8590] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.385150][ T8590] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 114.428390][ T50] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 114.436097][ T50] usb 11-1: USB disconnect, device number 3 [ 114.453895][ T8588] ip6gretap0: entered promiscuous mode [ 114.457128][ T8588] ip6gretap0: entered allmulticast mode [ 114.461222][ T5732] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.461527][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 114.463681][ T5732] Bluetooth: hci1: command 0x0419 tx timeout [ 114.533069][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.536408][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.546943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.623386][ T8596] qnx6: unable to read the first superblock [ 114.626014][ T8596] qnx6: unable to read the first superblock [ 114.628400][ T8596] qnx6: unable to read the first superblock [ 114.641032][ T40] audit: type=1400 audit(370.556:705): avc: denied { write } for pid=8598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.692467][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.728202][ T40] audit: type=1400 audit(370.636:706): avc: denied { write } for pid=8604 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.830709][ T40] audit: type=1400 audit(370.736:707): avc: denied { write } for pid=8611 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.967899][ T40] audit: type=1400 audit(370.876:708): avc: denied { append } for pid=8614 comm="syz.6.852" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.982167][ T8615] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 115.020711][ T8615] macsec1: entered promiscuous mode [ 115.022545][ T8615] macsec1: entered allmulticast mode [ 115.448011][ T8641] binder: 8640:8641 ioctl c0306201 0 returned -14 [ 115.752348][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 115.791104][ T50] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 115.900742][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 115.904150][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.907958][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.912303][ T9] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 115.915721][ T9] usb 10-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 115.918497][ T9] usb 10-1: Manufacturer: syz [ 115.924209][ T9] usb 10-1: config 0 descriptor?? [ 115.942369][ T50] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.946090][ T50] usb 11-1: config 0 has no interface number 0 [ 115.948893][ T50] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.954068][ T50] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 115.958610][ T50] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 115.963771][ T50] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 115.968630][ T50] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 115.976220][ T50] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.982352][ T50] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.986346][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.992789][ T50] usb 11-1: config 0 descriptor?? [ 116.001694][ T8654] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 116.004458][ T8654] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 116.010307][ T50] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 116.213726][ T8654] ldusb 11-1:0.55: Write buffer overflow, 1 bytes dropped [ 116.231655][ T1041] usb 11-1: USB disconnect, device number 4 [ 116.236503][ T1041] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 116.310753][ T5885] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 116.336317][ T9] input: syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:041E:3100.0004/input/input24 [ 116.414072][ T9] creative-sb0540 0003:041E:3100.0004: input,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 116.470700][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 116.475655][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 116.480156][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 116.484061][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.489665][ T5885] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 116.492882][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.495551][ T5885] usb 9-1: Product: syz [ 116.497344][ T5885] usb 9-1: Manufacturer: syz [ 116.499357][ T5885] usb 9-1: SerialNumber: syz [ 116.502748][ T5885] usb 9-1: config 0 descriptor?? [ 116.512832][ T5885] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input25 [ 116.540784][ T5744] Bluetooth: hci1: command 0x0419 tx timeout [ 116.540964][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.550162][ T50] usb 10-1: USB disconnect, device number 15 [ 116.711208][ T8676] debugfs: Bad value for 'uid' [ 116.711224][ T40] audit: type=1400 audit(372.626:709): avc: denied { remount } for pid=8675 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.712986][ T8676] debugfs: Bad value for 'uid' [ 116.725126][ T5840] usb 9-1: USB disconnect, device number 12 [ 116.725259][ C3] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 116.804329][ T40] audit: type=1400 audit(372.716:710): avc: denied { bind } for pid=8682 comm="syz.6.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.812625][ T40] audit: type=1400 audit(372.716:711): avc: denied { name_bind } for pid=8682 comm="syz.6.874" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 116.821226][ T40] audit: type=1400 audit(372.716:712): avc: denied { node_bind } for pid=8682 comm="syz.6.874" saddr=fc01:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 117.091899][ T8699] binder: 8698:8699 ioctl c0306201 0 returned -14 [ 117.138084][ T8704] Bluetooth: MGMT ver 1.23 [ 117.144354][ T8705] __nla_validate_parse: 1 callbacks suppressed [ 117.144366][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.882'. [ 117.261073][ T7607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.379143][ T8715] netlink: 408 bytes leftover after parsing attributes in process `syz.5.887'. [ 117.435699][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 117.575474][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.811527][ T5736] Bluetooth: hci4: command 0xfc11 tx timeout [ 117.816674][ T5732] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 117.900499][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.009610][ T8753] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 118.076769][ T8762] xt_hashlimit: size too large, truncated to 1048576 [ 118.129276][ T8747] fuse: Bad value for 'fd' [ 118.300355][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 118.614412][ T5732] Bluetooth: hci1: command 0x0419 tx timeout [ 118.614559][ T5736] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.736562][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.919'. [ 118.749666][ T8822] gre1: entered promiscuous mode [ 118.817462][ T8824] tipc: Enabled bearer , priority 0 [ 118.961471][ T8829] Invalid ELF header magic: != ELF [ 118.962673][ T8832] block nbd4: NBD_DISCONNECT [ 118.969669][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 119.026402][ T8836] binder: 8835:8836 ioctl c0306201 2000000009c0 returned -14 [ 119.026410][ T8837] binder: 8835:8837 ioctl c0306201 2000000009c0 returned -14 [ 119.135162][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.928'. [ 119.159893][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.930'. [ 119.390249][ T8871] random: crng reseeded on system resumption [ 119.564579][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 119.564593][ T40] audit: type=1400 audit(631.479:723): avc: denied { ioctl } for pid=8877 comm="syz.5.937" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.682108][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.724504][ T8891] random: crng reseeded on system resumption [ 119.771447][ T40] audit: type=1400 audit(631.689:724): avc: denied { append } for pid=8892 comm="syz.6.944" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 119.815247][ T213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.819295][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.823154][ T1485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.855489][ T40] audit: type=1400 audit(631.769:725): avc: denied { ioctl } for pid=8894 comm="syz.6.946" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 119.870749][ T1041] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 119.930828][ T8901] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 120.017561][ T8904] syzkaller0: entered promiscuous mode [ 120.017583][ T8904] syzkaller0: entered allmulticast mode [ 120.022178][ T1041] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 120.025231][ T1041] usb 10-1: config 0 has no interface number 0 [ 120.027842][ T1041] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.043264][ T1041] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 120.049558][ T1041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.052911][ T1041] usb 10-1: Product: syz [ 120.054682][ T1041] usb 10-1: Manufacturer: syz [ 120.056322][ T1041] usb 10-1: SerialNumber: syz [ 120.064204][ T1041] usb 10-1: config 0 descriptor?? [ 120.071192][ T1041] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 120.277030][ T1041] usb 10-1: USB disconnect, device number 16 [ 120.293146][ T1041] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 120.349882][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 120.419785][ T8932] dlm: no local IP address has been set [ 120.424401][ T8932] dlm: cannot start dlm midcomms -107 [ 120.611220][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.691088][ T5736] Bluetooth: hci1: command 0x0419 tx timeout [ 120.720299][ T8947] loop5: detected capacity change from 0 to 7 [ 120.725529][ T8947] Dev loop5: unable to read RDB block 7 [ 120.727521][ T8947] loop5: unable to read partition table [ 120.729500][ T8947] loop5: partition table beyond EOD, truncated [ 120.732042][ T8947] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.833767][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 120.900963][ T5732] Bluetooth: hci4: sending frame failed (-49) [ 120.904497][ T5736] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 121.046116][ T8966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.056244][ T8966] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 121.061325][ T8966] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.066076][ T8966] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 121.069849][ T40] audit: type=1400 audit(632.979:726): avc: denied { shutdown } for pid=8965 comm="syz.5.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.083567][ T40] audit: type=1400 audit(632.989:727): avc: denied { read } for pid=8965 comm="syz.5.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.350737][ T5885] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 121.440056][ T8987] XFS (loop4): SB validate failed with error -5. [ 121.492873][ T2192] blk_print_req_error: 10 callbacks suppressed [ 121.492891][ T2192] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 121.511715][ T5885] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 121.515576][ T5885] usb 7-1: config 0 has no interfaces? [ 121.519073][ T5885] usb 7-1: config 0 has no interfaces? [ 121.522741][ T5885] usb 7-1: config 0 has no interfaces? [ 121.526209][ T5885] usb 7-1: config 0 has no interfaces? [ 121.529876][ T5885] usb 7-1: config 0 has no interfaces? [ 121.533760][ T5885] usb 7-1: config 0 has no interfaces? [ 121.537797][ T8994] vivid-000: ================= START STATUS ================= [ 121.537939][ T5885] usb 7-1: config 0 has no interfaces? [ 121.540880][ T8994] vivid-000: Test Pattern: [ 121.543286][ T5885] usb 7-1: config 0 has no interfaces? [ 121.544797][ T5885] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.546662][ T8994] 75% Colorbar [ 121.547711][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.550593][ T8994] [ 121.551979][ T5885] usb 7-1: Product: syz [ 121.551990][ T5885] usb 7-1: Manufacturer: syz [ 121.551999][ T5885] usb 7-1: SerialNumber: syz [ 121.555974][ T8994] vivid-000: Fill Percentage of Frame: 100 [ 121.563795][ T5885] usb 7-1: config 0 descriptor?? [ 121.565923][ T8994] vivid-000: Horizontal Movement: No Movement [ 121.570285][ T8994] vivid-000: Vertical Movement: No Movement [ 121.574025][ T8994] vivid-000: OSD Text Mode: All [ 121.576245][ T8994] vivid-000: Show Border: false [ 121.578426][ T8994] vivid-000: Show Square: false [ 121.580747][ T8994] vivid-000: Sensor Flipped Horizontally: false [ 121.583639][ T8994] vivid-000: Sensor Flipped Vertically: false [ 121.586336][ T8994] vivid-000: Insert SAV Code in Image: false [ 121.591501][ T8994] vivid-000: Insert EAV Code in Image: false [ 121.594320][ T8994] vivid-000: Insert Video Guard Band: false [ 121.597075][ T8994] vivid-000: Reduced Framerate: false [ 121.599586][ T8994] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 121.603135][ T8994] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 121.606722][ T8994] vivid-000: Enable Capture Cropping: false [ 121.609441][ T8994] vivid-000: Enable Capture Composing: true [ 121.612190][ T8994] vivid-000: Enable Capture Scaler: true [ 121.614756][ T8994] vivid-000: Timestamp Source: End of Frame [ 121.617548][ T8994] vivid-000: Colorspace: sRGB [ 121.619233][ T8994] vivid-000: Transfer Function: Default [ 121.621180][ T8994] vivid-000: Y'CbCr Encoding: Default [ 121.623182][ T8994] vivid-000: HSV Encoding: Hue 0-179 [ 121.624987][ T8994] vivid-000: Quantization: Default [ 121.626728][ T8994] vivid-000: Apply Alpha To Red Only: false [ 121.628761][ T8994] vivid-000: Standard Aspect Ratio: 4x3 [ 121.630762][ T8994] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 121.633531][ T8994] vivid-000: DV Timings: 640x480p59 inactive [ 121.635628][ T8994] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 121.638180][ T8994] vivid-000: Maximum EDID Blocks: 2 [ 121.639957][ T8994] vivid-000: Limited RGB Range (16-235): false [ 121.642543][ T8994] vivid-000: Rx RGB Quantization Range: Automatic [ 121.645546][ T8994] vivid-000: Power Present: 0x00000001 [ 121.647630][ T8994] tpg source WxH: 3840x2160 (Y'CbCr) [ 121.651987][ T8994] tpg field: 1 [ 121.653579][ T8994] tpg crop: (0,0)/3840x2160 [ 121.655923][ T8994] tpg compose: (0,0)/3840x2160 [ 121.658112][ T8994] tpg colorspace: 8 [ 121.659810][ T8994] tpg transfer function: 0/0 [ 121.661992][ T8994] tpg Y'CbCr encoding: 0/0 [ 121.663953][ T8994] tpg quantization: 0/0 [ 121.665796][ T8994] tpg RGB range: 0/2 [ 121.667595][ T8994] vivid-000: ================== END STATUS ================== [ 121.704888][ T8999] openvswitch: netlink: IP tunnel dst address not specified [ 121.707608][ T8998] netlink: 'syz.4.978': attribute type 5 has an invalid length. [ 121.771010][ T5885] usb 7-1: USB disconnect, device number 13 [ 122.075980][ T9005] syzkaller0: entered promiscuous mode [ 122.077980][ T9005] syzkaller0: entered allmulticast mode [ 122.209375][ T9010] syzkaller0: entered promiscuous mode [ 122.214030][ T9010] syzkaller0: entered allmulticast mode [ 122.383927][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.420899][ T5885] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 122.550927][ T5840] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 122.576970][ T9022] binder: 9021:9022 ioctl c0306201 0 returned -14 [ 122.583400][ T5885] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 122.587871][ T5885] usb 7-1: config 0 has no interfaces? [ 122.594123][ T5885] usb 7-1: config 0 has no interfaces? [ 122.597612][ T5885] usb 7-1: config 0 has no interfaces? [ 122.603430][ T5885] usb 7-1: config 0 has no interfaces? [ 122.607518][ T5885] usb 7-1: config 0 has no interfaces? [ 122.611641][ T5885] usb 7-1: config 0 has no interfaces? [ 122.615227][ T5885] usb 7-1: config 0 has no interfaces? [ 122.620848][ T5885] usb 7-1: config 0 has no interfaces? [ 122.628109][ T5885] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.633704][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.637303][ T5885] usb 7-1: Product: syz [ 122.639240][ T5885] usb 7-1: Manufacturer: syz [ 122.643916][ T5885] usb 7-1: SerialNumber: syz [ 122.648762][ T5885] usb 7-1: config 0 descriptor?? [ 122.700925][ T5840] usb 11-1: Using ep0 maxpacket: 8 [ 122.703890][ T5840] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 122.704455][ T9030] bridge0: port 3(team0) entered blocking state [ 122.706684][ T5840] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 122.709541][ T9030] bridge0: port 3(team0) entered forwarding state [ 122.714347][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.717359][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.721824][ T5840] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.724662][ T9030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.729157][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.732659][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.736578][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.739704][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.744622][ T5840] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 122.753642][ T5840] usb 11-1: config 168 interface 0 has no altsetting 0 [ 122.757001][ T5840] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 122.759600][ T5840] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 122.763791][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.767653][ T5840] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.772010][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.775757][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.779555][ T5840] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 122.782379][ T9030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.784508][ T5840] usb 11-1: config 168 interface 0 has no altsetting 0 [ 122.792716][ T5840] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 122.797362][ T7607] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 122.798091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.800104][ T5840] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 122.809148][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.814127][ T5840] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.819073][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.824927][ T5840] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.829156][ T5840] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 122.833930][ T5840] usb 11-1: config 168 interface 0 has no altsetting 0 [ 122.838488][ T5840] usb 11-1: string descriptor 0 read error: -22 [ 122.840904][ T5840] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.843995][ T5840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.844074][ T9035] __nla_validate_parse: 3 callbacks suppressed [ 122.844083][ T9035] netlink: 36 bytes leftover after parsing attributes in process `syz.5.988'. [ 122.858016][ T5840] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 122.859402][ T34] usb 7-1: USB disconnect, device number 14 [ 122.961590][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.989'. [ 122.999002][ T40] audit: type=1326 audit(634.909:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.4.990" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb94c19cdd9 code=0x0 [ 123.021030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.120453][ T9052] autofs4:pid:9052:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 123.127196][ T9052] hugetlbfs: Bad value '$' for mount option 'size' [ 123.127196][ T9052] [ 123.207483][ T9056] binder: 9055:9056 ioctl c0306201 0 returned -14 [ 123.300764][ T5823] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 123.310746][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 123.391016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.462191][ T5823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.466150][ T5823] usb 9-1: config 0 has no interfaces? [ 123.470509][ T5823] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.475327][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.478791][ T5823] usb 9-1: Product: syz [ 123.480517][ T5823] usb 9-1: Manufacturer: syz [ 123.481341][ T34] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 123.483181][ T5823] usb 9-1: SerialNumber: syz [ 123.487597][ T34] usb 7-1: config 0 has no interfaces? [ 123.492874][ T34] usb 7-1: config 0 has no interfaces? [ 123.493270][ T5823] usb 9-1: config 0 descriptor?? [ 123.499796][ T34] usb 7-1: config 0 has no interfaces? [ 123.506991][ T34] usb 7-1: config 0 has no interfaces? [ 123.511669][ T34] usb 7-1: config 0 has no interfaces? [ 123.517159][ T34] usb 7-1: config 0 has no interfaces? [ 123.522048][ T34] usb 7-1: config 0 has no interfaces? [ 123.526894][ T34] usb 7-1: config 0 has no interfaces? [ 123.531178][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.540916][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.544451][ T34] usb 7-1: Product: syz [ 123.546310][ T34] usb 7-1: Manufacturer: syz [ 123.548362][ T34] usb 7-1: SerialNumber: syz [ 123.552314][ T34] usb 7-1: config 0 descriptor?? [ 123.666723][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.699851][ T5823] usb 9-1: USB disconnect, device number 13 [ 123.809589][ T9074] vxfs: WRONG superblock magic 00000000 at 1 [ 123.816535][ T9074] vxfs: WRONG superblock magic 00000000 at 8 [ 123.819053][ T9074] vxfs: can't find superblock. [ 123.850781][ T1041] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 124.000762][ T1041] usb 10-1: Using ep0 maxpacket: 32 [ 124.004357][ T1041] usb 10-1: config 0 has no interfaces? [ 124.007029][ T1041] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.011950][ T1041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.017975][ T1041] usb 10-1: config 0 descriptor?? [ 124.225593][ T40] audit: type=1400 audit(636.139:729): avc: denied { append } for pid=9070 comm="syz.5.1001" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.367950][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.372544][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.377170][ T9082] SET target dimension over the limit! [ 124.439158][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.444975][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.449412][ T5823] usb 10-1: USB disconnect, device number 17 [ 124.484729][ T9084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.559920][ T9084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.621730][ T9084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.710908][ T9084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.857835][ T7607] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.872307][ T7607] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.885558][ T7607] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.900508][ T7607] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.900724][ T5823] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 125.030933][ T5823] usb 10-1: device descriptor read/64, error -71 [ 125.181198][ T58] usb 11-1: USB disconnect, device number 5 [ 125.290796][ T5823] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 125.373248][ T40] audit: type=1400 audit(637.289:730): avc: denied { write } for pid=9097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.420853][ T5823] usb 10-1: device descriptor read/64, error -71 [ 125.428099][ T40] audit: type=1400 audit(637.339:731): avc: denied { write } for pid=9103 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.531348][ T5823] usb usb10-port1: attempt power cycle [ 125.581231][ T213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.588399][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.593375][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.631181][ T9111] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.646314][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1013'. [ 125.895403][ T5823] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 125.912022][ T5823] usb 10-1: device descriptor read/8, error -71 [ 126.100213][ T5799] usb 7-1: USB disconnect, device number 15 [ 126.160721][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 126.173191][ T5823] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 126.191549][ T5823] usb 10-1: device descriptor read/8, error -71 [ 126.301249][ T5823] usb usb10-port1: unable to enumerate USB device [ 126.330774][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 126.333912][ T34] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.338008][ T34] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.341510][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 126.345485][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 126.349104][ T34] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 126.352617][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.359415][ T34] hub 11-1:1.0: bad descriptor, ignoring hub [ 126.362040][ T34] hub 11-1:1.0: probe with driver hub failed with error -5 [ 126.366182][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 126.368318][ T34] cdc_wdm 11-1:1.0: skipping garbage [ 126.373058][ T34] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 126.375596][ T34] cdc_wdm 11-1:1.0: Unknown control protocol [ 126.610360][ T40] audit: type=1400 audit(638.519:732): avc: denied { write } for pid=9122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.620774][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.682587][ T40] audit: type=1400 audit(638.599:733): avc: denied { write } for pid=9126 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.691309][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.721443][ T9131] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 126.725259][ T9131] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.729619][ T9131] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 126.773387][ T40] audit: type=1400 audit(638.689:734): avc: denied { setattr } for pid=9133 comm="syz.5.1020" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.776089][ T9134] comedi comedi0: Cannot bond this driver to itself! [ 126.811656][ T9117] usb 11-1: reset high-speed USB device number 6 using dummy_hcd [ 126.818161][ T9117] usb 11-1: device reset changed ep0 maxpacket size! [ 126.824225][ T9117] cdc_wdm 11-1:1.0: Error autopm - -16 [ 126.824408][ T5840] usb 11-1: USB disconnect, device number 6 [ 126.861270][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.991299][ T5840] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 127.091397][ T5732] Bluetooth: hci4: command 0xfc11 tx timeout [ 127.101564][ T5736] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 127.137222][ T9150] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 127.150952][ T5840] usb 11-1: Using ep0 maxpacket: 16 [ 127.157546][ T5840] usb 11-1: config 4 has an invalid interface number: 76 but max is 0 [ 127.160477][ T5840] usb 11-1: config 4 has no interface number 0 [ 127.162762][ T5840] usb 11-1: config 4 interface 76 has no altsetting 0 [ 127.173202][ T5840] usb 11-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=68.11 [ 127.177282][ T5840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.179769][ T5840] usb 11-1: Product: syz [ 127.182073][ T5840] usb 11-1: Manufacturer: syz [ 127.183514][ T5840] usb 11-1: SerialNumber: syz [ 127.247247][ T40] audit: type=1400 audit(639.159:735): avc: denied { getopt } for pid=9151 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.393922][ T5840] keyspan 11-1:4.76: Keyspan 1 port adapter converter detected [ 127.396763][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 87 [ 127.399168][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 7 [ 127.402694][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 81 [ 127.405136][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 1 [ 127.407785][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 2 [ 127.410312][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 85 [ 127.416217][ T5840] keyspan 11-1:4.76: found no endpoint descriptor for endpoint 5 [ 127.416917][ T9170] ufs: You didn't specify the type of your ufs filesystem [ 127.416917][ T9170] [ 127.416917][ T9170] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 127.416917][ T9170] [ 127.416917][ T9170] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 127.419561][ T5840] usb 11-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 127.433099][ T9170] ufs: failed to set blocksize [ 127.438218][ T5840] usb 11-1: USB disconnect, device number 7 [ 127.447054][ T5840] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 127.450844][ T5840] keyspan 11-1:4.76: device disconnected [ 127.451983][ T9170] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 127.457240][ T9170] netlink: 'syz.4.1034': attribute type 3 has an invalid length. [ 127.459779][ T9170] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 127.570768][ T34] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 127.732895][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.737160][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 127.741781][ T34] usb 7-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 127.746754][ T34] usb 7-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 127.751626][ T34] usb 7-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.757211][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 127.762305][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.766738][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.770307][ T34] usb 7-1: Product: syz [ 127.772271][ T34] usb 7-1: Manufacturer: syz [ 127.774602][ T34] usb 7-1: SerialNumber: syz [ 127.783135][ T9167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.786482][ T9167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.980584][ T9178] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 128.014068][ T34] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 128.021299][ T34] usb 7-1: USB disconnect, device number 16 [ 128.140287][ T40] audit: type=1400 audit(640.049:736): avc: denied { setopt } for pid=9184 comm="syz.5.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.141312][ T213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.450058][ T40] audit: type=1400 audit(640.359:737): avc: denied { mounton } for pid=9200 comm="syz.5.1043" path="/180/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 128.467957][ T40] audit: type=1400 audit(640.379:738): avc: denied { connect } for pid=9202 comm="syz.6.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.475761][ T40] audit: type=1400 audit(640.379:739): avc: denied { unmount } for pid=7008 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 128.537955][ T9209] netlink: 'syz.2.1046': attribute type 21 has an invalid length. [ 128.540708][ T9209] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1046'. [ 128.649024][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880441f1000: rx timeout, send abort [ 128.653280][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880441f1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.702320][ T9216] input: syz1 as /devices/virtual/input/input28 [ 128.896666][ T9241] Can't find ip_set type hasj:net,port [ 128.926994][ T9246] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1054'. [ 129.011056][ T6518] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 129.063850][ T9257] xt_hashlimit: size too large, truncated to 1048576 [ 129.069126][ T9259] ipt_rpfilter: unknown options [ 129.118042][ T9264] sctp: [Deprecated]: syz.2.1060 (pid 9264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.118042][ T9264] Use struct sctp_sack_info instead [ 129.160719][ T6518] usb 10-1: Using ep0 maxpacket: 16 [ 129.168926][ T6518] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 129.175365][ T6518] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.176893][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'. [ 129.182697][ T6518] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.198818][ T6518] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 129.202887][ T6518] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.208465][ T6518] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 129.212122][ T6518] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.214552][ T9268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 129.221748][ T6518] usb 10-1: config 0 descriptor?? [ 129.228658][ T6518] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input29 [ 129.238157][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.257418][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.265219][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.274299][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.288775][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.296685][ T5741] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.311681][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.324440][ T5127] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.372387][ T9282] xt_hashlimit: size too large, truncated to 1048576 [ 129.419380][ T9285] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1065'. [ 129.426592][ T9228] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.441673][ T9285] trusted_key: syz.6.1065 sent an empty control message without MSG_MORE. [ 129.449839][ T9285] program syz.6.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.452480][ T34] usb 10-1: USB disconnect, device number 22 [ 129.520126][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1066'. [ 129.568956][ T9293] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9293 comm=syz.6.1066 [ 129.581972][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1066'. [ 129.701632][ T5823] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 129.746035][ T9309] binder_alloc: 9307: binder_alloc_buf, no vma [ 129.747902][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.784553][ T9314] FAULT_INJECTION: forcing a failure. [ 129.784553][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 129.790671][ T9314] CPU: 2 UID: 0 PID: 9314 Comm: syz.6.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.790688][ T9314] Tainted: [L]=SOFTLOCKUP [ 129.790691][ T9314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.790698][ T9314] Call Trace: [ 129.790726][ T9314] [ 129.790730][ T9314] dump_stack_lvl+0x100/0x190 [ 129.790756][ T9314] should_fail_ex.cold+0x5/0xa [ 129.790771][ T9314] ? tomoyo_encode2+0xfb/0x3c0 [ 129.790789][ T9314] should_failslab+0xc2/0x120 [ 129.790801][ T9314] __kmalloc_noprof+0xe0/0x850 [ 129.790817][ T9314] ? d_absolute_path+0x136/0x1b0 [ 129.790831][ T9314] tomoyo_encode2+0xfb/0x3c0 [ 129.790847][ T9314] tomoyo_encode+0x29/0x50 [ 129.790860][ T9314] tomoyo_realpath_from_path+0x18c/0x690 [ 129.790878][ T9314] tomoyo_path_number_perm+0x23c/0x580 [ 129.790890][ T9314] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.790902][ T9314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.790928][ T9314] ? find_held_lock+0x2b/0x80 [ 129.790938][ T9314] ? __fget_files+0x215/0x3d0 [ 129.790950][ T9314] ? hook_file_ioctl_common+0x149/0x410 [ 129.790966][ T9314] ? __fget_files+0x215/0x3d0 [ 129.790982][ T9314] ? __fget_files+0x21f/0x3d0 [ 129.791004][ T9314] security_file_ioctl+0xd3/0x230 [ 129.791024][ T9314] __x64_sys_ioctl+0xb7/0x210 [ 129.791044][ T9314] do_syscall_64+0x10b/0xf80 [ 129.791076][ T9314] ? clear_bhb_loop+0x40/0x90 [ 129.791098][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.791113][ T9314] RIP: 0033:0x7f3abfb9cdd9 [ 129.791123][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.791167][ T9314] RSP: 002b:00007f3ac0af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.791178][ T9314] RAX: ffffffffffffffda RBX: 00007f3abfe15fa0 RCX: 00007f3abfb9cdd9 [ 129.791185][ T9314] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006 [ 129.791191][ T9314] RBP: 00007f3ac0af0090 R08: 0000000000000000 R09: 0000000000000000 [ 129.791197][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.791203][ T9314] R13: 00007f3abfe16038 R14: 00007f3abfe15fa0 R15: 00007fff166286e8 [ 129.791216][ T9314] [ 129.791227][ T9314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.874922][ T9314] binder_alloc: 9313: binder_alloc_buf, no vma [ 129.911777][ T9325] loop5: detected capacity change from 0 to 2640 [ 129.915026][ T9325] buffer_io_error: 10 callbacks suppressed [ 129.915041][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.923020][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.926476][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.929577][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.932603][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.935509][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.938096][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.940728][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.943482][ T9325] ldm_validate_partition_table(): Disk read failed. [ 129.945708][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.948286][ T9325] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.951273][ T9325] Dev loop5: unable to read RDB block 0 [ 129.953924][ T9325] loop5: unable to read partition table [ 129.958897][ T9325] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 129.989005][ T5142] ldm_validate_partition_table(): Disk read failed. [ 129.992525][ T5142] Dev loop5: unable to read RDB block 0 [ 129.995160][ T5142] loop5: unable to read partition table [ 130.041623][ T9332] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1075'. [ 130.059794][ T9332] program syz.5.1075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.093875][ T5142] ldm_validate_partition_table(): Disk read failed. [ 130.096227][ T5142] Dev loop5: unable to read RDB block 0 [ 130.098267][ T5142] loop5: unable to read partition table [ 130.210800][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 130.387361][ T34] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.391466][ T34] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.395868][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.399909][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.405075][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.413056][ T34] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.417225][ T34] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.420973][ T34] usb 7-1: Product: syz [ 130.422898][ T34] usb 7-1: Manufacturer: syz [ 130.431153][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 130.433560][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 130.439172][ T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 130.442035][ T34] cdc_wdm 7-1:1.0: Unknown control protocol [ 130.637754][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 130.637768][ T40] audit: type=1400 audit(642.549:763): avc: denied { ioctl } for pid=9324 comm="syz.2.1074" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3244 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 130.695628][ T34] usb 7-1: USB disconnect, device number 17 [ 132.176569][ T40] audit: type=1400 audit(644.089:764): avc: denied { recv } for pid=9349 comm="dhcpcd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 132.771014][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.899336][ T6328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.397659][ T40] audit: type=1400 audit(646.309:765): avc: denied { write } for pid=9350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.448010][ T40] audit: type=1400 audit(646.359:766): avc: denied { write } for pid=9353 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.530795][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.173159][ T1485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.811490][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.237646][ T40] audit: type=1400 audit(649.149:767): avc: denied { write } for pid=9358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.281309][ T40] audit: type=1400 audit(649.199:768): avc: denied { write } for pid=9361 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.734615][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.798305][ T40] audit: type=1400 audit(649.709:769): avc: denied { setattr } for pid=9366 comm="syz.2.1078" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.825297][ T9371] syzkaller0: entered promiscuous mode [ 137.828076][ T9371] syzkaller0: entered allmulticast mode [ 137.894077][ T9375] P [ 137.906483][ T9378] binder: 9377:9378 ioctl c0306201 200000000080 returned -22 [ 138.015804][ T9385] fuse: Bad value for 'fd' [ 138.140331][ T9388] binder_alloc: 9387: binder_alloc_buf, no vma [ 138.183518][ T9390] FAULT_INJECTION: forcing a failure. [ 138.183518][ T9390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.189381][ T9390] CPU: 2 UID: 0 PID: 9390 Comm: syz.5.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.189409][ T9390] Tainted: [L]=SOFTLOCKUP [ 138.189415][ T9390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.189425][ T9390] Call Trace: [ 138.189433][ T9390] [ 138.189441][ T9390] dump_stack_lvl+0x100/0x190 [ 138.189468][ T9390] should_fail_ex.cold+0x5/0xa [ 138.189492][ T9390] _copy_from_user+0x2e/0xd0 [ 138.189518][ T9390] binder_ioctl+0x4cb/0x7550 [ 138.189548][ T9390] ? tomoyo_path_number_perm+0x188/0x580 [ 138.189577][ T9390] ? __pfx_binder_ioctl+0x10/0x10 [ 138.189599][ T9390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.189623][ T9390] ? do_vfs_ioctl+0x226/0x13e0 [ 138.189642][ T9390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.189660][ T9390] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 138.189691][ T9390] ? hook_file_ioctl_common+0x149/0x410 [ 138.189723][ T9390] ? selinux_file_ioctl+0x13b/0x290 [ 138.189745][ T9390] ? selinux_file_ioctl+0xb6/0x290 [ 138.189768][ T9390] ? __pfx_binder_ioctl+0x10/0x10 [ 138.189789][ T9390] __x64_sys_ioctl+0x18e/0x210 [ 138.189808][ T9390] do_syscall_64+0x10b/0xf80 [ 138.189828][ T9390] ? clear_bhb_loop+0x40/0x90 [ 138.189849][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.189866][ T9390] RIP: 0033:0x7f5aa679cdd9 [ 138.189883][ T9390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.189899][ T9390] RSP: 002b:00007f5aa7627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.189917][ T9390] RAX: ffffffffffffffda RBX: 00007f5aa6a15fa0 RCX: 00007f5aa679cdd9 [ 138.189928][ T9390] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006 [ 138.189939][ T9390] RBP: 00007f5aa7627090 R08: 0000000000000000 R09: 0000000000000000 [ 138.189949][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.189959][ T9390] R13: 00007f5aa6a16038 R14: 00007f5aa6a15fa0 R15: 00007ffcb8c7aeb8 [ 138.189982][ T9390] [ 138.189990][ T9390] binder: 9389:9390 ioctl c0306201 200000004a40 returned -14 [ 138.300239][ T40] audit: type=1400 audit(650.209:770): avc: denied { connect } for pid=9391 comm="syz.5.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 138.550973][ T34] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 138.726285][ T34] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.730745][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.739693][ T34] usb 10-1: Product: syz [ 138.742373][ T34] usb 10-1: Manufacturer: syz [ 138.746514][ T34] usb 10-1: SerialNumber: syz [ 138.757337][ T9405] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.853519][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.022723][ T7607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.041110][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 139.174371][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.177626][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.194527][ T50] usb 11-1: Using ep0 maxpacket: 16 [ 139.195747][ T34] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 139.197662][ T50] usb 11-1: config 0 has an invalid interface number: 132 but max is 0 [ 139.201112][ T34] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 139.201433][ T34] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 139.201490][ T34] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 139.208307][ T34] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 139.208464][ T50] usb 11-1: config 0 has no interface number 0 [ 139.222516][ T34] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 139.223442][ T50] usb 11-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 139.228453][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.231554][ T50] usb 11-1: Product: syz [ 139.233001][ T50] usb 11-1: Manufacturer: syz [ 139.234602][ T50] usb 11-1: SerialNumber: syz [ 139.237214][ T34] usb 10-1: USB disconnect, device number 23 [ 139.237721][ T50] usb 11-1: config 0 descriptor?? [ 139.521300][ T50] hub 11-1:0.132: bad descriptor, ignoring hub [ 139.523473][ T50] hub 11-1:0.132: probe with driver hub failed with error -5 [ 139.527737][ T50] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.132/input/input30 [ 139.582395][ T50] usb 11-1: USB disconnect, device number 8 [ 139.755948][ T9413] kAFS: unable to lookup cell '(,c¾Ì' [ 139.820070][ T9418] FAULT_INJECTION: forcing a failure. [ 139.820070][ T9418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.825872][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.4.1094 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.825900][ T9418] Tainted: [L]=SOFTLOCKUP [ 139.825906][ T9418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.825917][ T9418] Call Trace: [ 139.825923][ T9418] [ 139.825930][ T9418] dump_stack_lvl+0x100/0x190 [ 139.825956][ T9418] should_fail_ex.cold+0x5/0xa [ 139.825981][ T9418] _copy_from_user+0x2e/0xd0 [ 139.826007][ T9418] binder_thread_write+0x12af/0x4db0 [ 139.826031][ T9418] ? __kasan_slab_free+0x5f/0x80 [ 139.826048][ T9418] ? kfree+0x223/0x6c0 [ 139.826075][ T9418] ? __lock_acquire+0x4a5/0x2630 [ 139.826098][ T9418] ? __pfx_binder_thread_write+0x10/0x10 [ 139.826120][ T9418] ? binder_debug+0xe0/0x190 [ 139.826146][ T9418] ? __pfx_binder_debug+0x10/0x10 [ 139.826174][ T9418] ? binder_debug+0xe0/0x190 [ 139.826199][ T9418] ? __pfx_binder_debug+0x10/0x10 [ 139.826239][ T9418] binder_ioctl+0x28f8/0x7550 [ 139.826268][ T9418] ? tomoyo_path_number_perm+0x188/0x580 [ 139.826296][ T9418] ? __pfx_binder_ioctl+0x10/0x10 [ 139.826317][ T9418] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.826339][ T9418] ? do_vfs_ioctl+0x226/0x13e0 [ 139.826358][ T9418] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.826377][ T9418] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 139.826409][ T9418] ? hook_file_ioctl_common+0x149/0x410 [ 139.826443][ T9418] ? selinux_file_ioctl+0x13b/0x290 [ 139.826470][ T9418] ? selinux_file_ioctl+0xb6/0x290 [ 139.826494][ T9418] ? __pfx_binder_ioctl+0x10/0x10 [ 139.826515][ T9418] __x64_sys_ioctl+0x18e/0x210 [ 139.826535][ T9418] do_syscall_64+0x10b/0xf80 [ 139.826556][ T9418] ? clear_bhb_loop+0x40/0x90 [ 139.826577][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.826595][ T9418] RIP: 0033:0x7fb94c19cdd9 [ 139.826610][ T9418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.826626][ T9418] RSP: 002b:00007fb94d069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.826643][ T9418] RAX: ffffffffffffffda RBX: 00007fb94c415fa0 RCX: 00007fb94c19cdd9 [ 139.826655][ T9418] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006 [ 139.826665][ T9418] RBP: 00007fb94d069090 R08: 0000000000000000 R09: 0000000000000000 [ 139.826675][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.826685][ T9418] R13: 00007fb94c416038 R14: 00007fb94c415fa0 R15: 00007ffd91467d58 [ 139.826709][ T9418] [ 139.826717][ T9418] binder: 9416:9418 ioctl c0306201 200000004a40 returned -14 [ 139.883311][ T9422] ªªªªª: renamed from lo (while UP) [ 139.989734][ T9425] P [ 140.069166][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1098'. [ 140.124500][ T9434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 140.183352][ T9430] veth5: entered allmulticast mode [ 140.186767][ T9430] bond1: (slave veth5): Enslaving as an active interface with an up link [ 140.199783][ T9434] bond3: (slave bond_slave_1): Device is not our slave [ 140.202292][ T9434] bond3: option active_slave: invalid value (bond_slave_1) [ 140.217642][ T9434] bond3 (unregistering): Released all slaves [ 140.225078][ T9439] comedi comedi0: pcl726: I/O base address or length out of range [ 140.242414][ T9435] bond3: (slave bond_slave_1): Device is not our slave [ 140.250686][ T9435] bond3: option active_slave: invalid value (bond_slave_1) [ 140.255826][ T9435] bond3 (unregistering): Released all slaves [ 140.258014][ T40] audit: type=1400 audit(652.169:771): avc: denied { getopt } for pid=9441 comm="syz.6.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.427346][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1102'. [ 140.432296][ T9447] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1102'. [ 140.489849][ T9449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9449 comm=syz.4.1103 [ 140.494656][ T40] audit: type=1400 audit(652.409:772): avc: denied { getopt } for pid=9448 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.502275][ T9451] bridge0: left allmulticast mode [ 140.511009][ T9451] wg1: left promiscuous mode [ 140.512695][ T9451] wg1: left allmulticast mode [ 140.539911][ T9451] vlan2: left promiscuous mode [ 140.543367][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 140.549388][ T9451] bridge0: left promiscuous mode [ 140.552835][ T9449] fuse: Unknown parameter 'ft' [ 140.556012][ T9451] hsr1: left promiscuous mode [ 140.557917][ T9451] vcan1: left allmulticast mode [ 140.561374][ T9451] 8021q: adding VLAN 0 to HW filter on device eth0 [ 140.565695][ T9451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 140.570217][ T9451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 140.584403][ T9451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 140.592288][ T9451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.835598][ T9471] binder: 9470:9471 ioctl c0306201 200000000080 returned -14 [ 140.842171][ T9471] binder: 9470:9471 ioctl c0306201 2000000003c0 returned -14 [ 140.847858][ T40] audit: type=1400 audit(652.759:773): avc: denied { name_bind } for pid=9470 comm="syz.5.1109" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 140.916263][ T9476] binder: 9474:9476 unknown command 1078485781 [ 140.918635][ T9476] binder: 9474:9476 ioctl c0306201 200000004a40 returned -22 [ 140.920815][ T9469] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1106'. [ 140.925348][ T9469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1106'. [ 140.934486][ T9469] xt_l2tp: v2 doesn't support IP mode [ 140.963208][ T9479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.981552][ T6327] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.987747][ T6327] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.006872][ T9479] fuse: Bad value for 'user_id' [ 141.009362][ T9479] fuse: Bad value for 'user_id' [ 141.014973][ T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.094374][ T9490] FAULT_INJECTION: forcing a failure. [ 141.094374][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 141.098583][ T9490] CPU: 3 UID: 0 PID: 9490 Comm: syz.4.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.098606][ T9490] Tainted: [L]=SOFTLOCKUP [ 141.098612][ T9490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.098621][ T9490] Call Trace: [ 141.098642][ T9490] [ 141.098646][ T9490] dump_stack_lvl+0x100/0x190 [ 141.098668][ T9490] should_fail_ex.cold+0x5/0xa [ 141.098683][ T9490] should_failslab+0xc2/0x120 [ 141.098695][ T9490] __kmalloc_cache_noprof+0x7a/0x6f0 [ 141.098710][ T9490] ? binder_transaction+0x1b55/0x9c10 [ 141.098728][ T9490] binder_transaction+0x1b55/0x9c10 [ 141.098745][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.098763][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.098777][ T9490] ? __pfx_binder_transaction+0x10/0x10 [ 141.098793][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.098809][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.098828][ T9490] ? find_held_lock+0x2b/0x80 [ 141.098840][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.098853][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.098866][ T9490] ? kernel_text_address+0x8d/0x100 [ 141.098880][ T9490] ? __pfx_widen_string+0x10/0x10 [ 141.098900][ T9490] ? __kernel_text_address+0xd/0x30 [ 141.098916][ T9490] ? find_held_lock+0x2b/0x80 [ 141.098926][ T9490] ? __might_fault+0xc5/0x140 [ 141.098940][ T9490] ? __might_fault+0xc5/0x140 [ 141.098960][ T9490] binder_thread_write+0x1303/0x4db0 [ 141.098973][ T9490] ? __kasan_slab_free+0x5f/0x80 [ 141.098982][ T9490] ? kfree+0x223/0x6c0 [ 141.098997][ T9490] ? __lock_acquire+0x4a5/0x2630 [ 141.099010][ T9490] ? __pfx_binder_thread_write+0x10/0x10 [ 141.099023][ T9490] ? binder_debug+0xe0/0x190 [ 141.099039][ T9490] ? __pfx_binder_debug+0x10/0x10 [ 141.099055][ T9490] ? binder_debug+0xe0/0x190 [ 141.099071][ T9490] ? __pfx_binder_debug+0x10/0x10 [ 141.099094][ T9490] binder_ioctl+0x28f8/0x7550 [ 141.099111][ T9490] ? tomoyo_path_number_perm+0x188/0x580 [ 141.099131][ T9490] ? __pfx_binder_ioctl+0x10/0x10 [ 141.099144][ T9490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.099157][ T9490] ? do_vfs_ioctl+0x226/0x13e0 [ 141.099168][ T9490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 141.099179][ T9490] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 141.099197][ T9490] ? hook_file_ioctl_common+0x149/0x410 [ 141.099217][ T9490] ? selinux_file_ioctl+0x13b/0x290 [ 141.099229][ T9490] ? selinux_file_ioctl+0xb6/0x290 [ 141.099243][ T9490] ? __pfx_binder_ioctl+0x10/0x10 [ 141.099259][ T9490] __x64_sys_ioctl+0x18e/0x210 [ 141.099271][ T9490] do_syscall_64+0x10b/0xf80 [ 141.099283][ T9490] ? clear_bhb_loop+0x40/0x90 [ 141.099295][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.099306][ T9490] RIP: 0033:0x7fb94c19cdd9 [ 141.099315][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.099326][ T9490] RSP: 002b:00007fb94d069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.099336][ T9490] RAX: ffffffffffffffda RBX: 00007fb94c415fa0 RCX: 00007fb94c19cdd9 [ 141.099343][ T9490] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006 [ 141.099349][ T9490] RBP: 00007fb94d069090 R08: 0000000000000000 R09: 0000000000000000 [ 141.099355][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.099361][ T9490] R13: 00007fb94c416038 R14: 00007fb94c415fa0 R15: 00007ffd91467d58 [ 141.099374][ T9490] [ 141.136934][ T9491] loop2: detected capacity change from 0 to 7 [ 141.223465][ T9491] Dev loop2: unable to read RDB block 7 [ 141.225314][ T9491] loop2: AHDI p1 p3 p4 [ 141.226722][ T9491] loop2: partition table partially beyond EOD, truncated [ 141.234337][ T9491] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.236849][ T9491] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.247782][ T5142] Dev loop2: unable to read RDB block 7 [ 141.249738][ T5142] loop2: AHDI p1 p3 p4 [ 141.255560][ T5142] loop2: partition table partially beyond EOD, truncated [ 141.260818][ T5142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.263321][ T5142] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.292763][ T9497] P [ 141.331551][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 141.375762][ T5142] Dev loop2: unable to read RDB block 7 [ 141.377783][ T5142] loop2: AHDI p1 p3 p4 [ 141.379252][ T5142] loop2: partition table partially beyond EOD, truncated [ 141.381778][ T5142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.384078][ T5142] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.430451][ T5142] Dev loop2: unable to read RDB block 7 [ 141.432984][ T5142] loop2: AHDI p1 p3 p4 [ 141.434447][ T5142] loop2: partition table partially beyond EOD, truncated [ 141.436921][ T5142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.439314][ T5142] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.545799][ T5142] Dev loop2: unable to read RDB block 7 [ 141.547794][ T5142] loop2: AHDI p1 p3 p4 [ 141.549322][ T5142] loop2: partition table partially beyond EOD, truncated [ 141.552403][ T5142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.554890][ T5142] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.559548][ T9507] binder_alloc: 9506: binder_alloc_buf, no vma [ 141.570574][ T40] audit: type=1400 audit(653.479:774): avc: denied { write } for pid=9505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.585058][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 141.586971][ T2129] block nbd1: Possible stuck request ffff88802977e000: control (read@0,1024B). Runtime 30 seconds [ 141.589033][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1120'. [ 141.595676][ T2129] block nbd1: Possible stuck request ffff88802977e1c0: control (read@1024,1024B). Runtime 30 seconds [ 141.601190][ T2129] block nbd1: Possible stuck request ffff88802977e380: control (read@2048,1024B). Runtime 30 seconds [ 141.606053][ T2129] block nbd1: Possible stuck request ffff88802977e540: control (read@3072,1024B). Runtime 30 seconds [ 141.645129][ T40] audit: type=1400 audit(653.559:775): avc: denied { write } for pid=9512 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.667094][ T5142] Dev loop2: unable to read RDB block 7 [ 141.669076][ T5142] loop2: AHDI p1 p3 p4 [ 141.670535][ T5142] loop2: partition table partially beyond EOD, truncated [ 141.675344][ T5142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.677914][ T5142] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.709117][ T9517] FAULT_INJECTION: forcing a failure. [ 141.709117][ T9517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.715070][ T9517] CPU: 3 UID: 0 PID: 9517 Comm: syz.2.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.715101][ T9517] Tainted: [L]=SOFTLOCKUP [ 141.715108][ T9517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.715117][ T9517] Call Trace: [ 141.715127][ T9517] [ 141.715134][ T9517] dump_stack_lvl+0x100/0x190 [ 141.715163][ T9517] should_fail_ex.cold+0x5/0xa [ 141.715187][ T9517] _copy_from_user+0x2e/0xd0 [ 141.715219][ T9517] ____sys_sendmsg+0x1d1/0xb70 [ 141.715242][ T9517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.715275][ T9517] ___sys_sendmsg+0x190/0x1e0 [ 141.715297][ T9517] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.715362][ T9517] __sys_sendmsg+0x170/0x220 [ 141.715391][ T9517] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.715427][ T9517] ? rcu_is_watching+0x12/0xc0 [ 141.715457][ T9517] do_syscall_64+0x10b/0xf80 [ 141.715477][ T9517] ? clear_bhb_loop+0x40/0x90 [ 141.715498][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.715515][ T9517] RIP: 0033:0x7f9ccff9cdd9 [ 141.715530][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.715546][ T9517] RSP: 002b:00007f9cd0f10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.715564][ T9517] RAX: ffffffffffffffda RBX: 00007f9cd0215fa0 RCX: 00007f9ccff9cdd9 [ 141.715575][ T9517] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 141.715585][ T9517] RBP: 00007f9cd0f10090 R08: 0000000000000000 R09: 0000000000000000 [ 141.715596][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.715605][ T9517] R13: 00007f9cd0216038 R14: 00007f9cd0215fa0 R15: 00007ffdb4cef038 [ 141.715630][ T9517] [ 141.760761][ T40] audit: type=1400 audit(653.649:776): avc: denied { write } for pid=9515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.813211][ T5142] Dev loop2: unable to read RDB block 7 [ 141.815819][ T5142] loop2: AHDI p1 p3 p4 [ 141.817730][ T5142] loop2: partition table partially beyond EOD, truncated [ 141.828297][ T5142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 141.832053][ T5142] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 141.872958][ T5734] udevd[5734]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 141.891983][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.896683][ T9528] binder_alloc: 9527: binder_alloc_buf, no vma [ 141.898815][ T9528] FAULT_INJECTION: forcing a failure. [ 141.898815][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 141.904439][ T9528] CPU: 2 UID: 0 PID: 9528 Comm: syz.5.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.904459][ T9528] Tainted: [L]=SOFTLOCKUP [ 141.904463][ T9528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.904470][ T9528] Call Trace: [ 141.904474][ T9528] [ 141.904478][ T9528] dump_stack_lvl+0x100/0x190 [ 141.904495][ T9528] should_fail_ex.cold+0x5/0xa [ 141.904510][ T9528] should_failslab+0xc2/0x120 [ 141.904522][ T9528] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 141.904538][ T9528] ? __alloc_skb+0x140/0x710 [ 141.904553][ T9528] ? __alloc_skb+0x5b7/0x710 [ 141.904570][ T9528] __alloc_skb+0x140/0x710 [ 141.904584][ T9528] ? __alloc_skb+0x5b7/0x710 [ 141.904598][ T9528] ? __pfx___alloc_skb+0x10/0x10 [ 141.904617][ T9528] binder_netlink_report.isra.0+0x208/0xa90 [ 141.904633][ T9528] ? binder_dec_node_tmpref+0x1cb/0x290 [ 141.904644][ T9528] ? __pfx_binder_netlink_report.isra.0+0x10/0x10 [ 141.904660][ T9528] ? do_raw_spin_unlock+0x145/0x1e0 [ 141.904679][ T9528] binder_transaction+0x10fd/0x9c10 [ 141.904695][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904712][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904726][ T9528] ? __pfx_binder_transaction+0x10/0x10 [ 141.904742][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904768][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904790][ T9528] ? find_held_lock+0x2b/0x80 [ 141.904802][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904816][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904829][ T9528] ? kernel_text_address+0x8d/0x100 [ 141.904842][ T9528] ? __pfx_widen_string+0x10/0x10 [ 141.904858][ T9528] ? __kernel_text_address+0xd/0x30 [ 141.904875][ T9528] ? find_held_lock+0x2b/0x80 [ 141.904885][ T9528] ? __might_fault+0xc5/0x140 [ 141.904899][ T9528] ? __might_fault+0xc5/0x140 [ 141.904919][ T9528] binder_thread_write+0x1303/0x4db0 [ 141.904933][ T9528] ? __kasan_slab_free+0x5f/0x80 [ 141.904942][ T9528] ? kfree+0x223/0x6c0 [ 141.904958][ T9528] ? __lock_acquire+0x4a5/0x2630 [ 141.904971][ T9528] ? __pfx_binder_thread_write+0x10/0x10 [ 141.904983][ T9528] ? binder_debug+0xe0/0x190 [ 141.904999][ T9528] ? __pfx_binder_debug+0x10/0x10 [ 141.905015][ T9528] ? binder_debug+0xe0/0x190 [ 141.905030][ T9528] ? __pfx_binder_debug+0x10/0x10 [ 141.905054][ T9528] binder_ioctl+0x28f8/0x7550 [ 141.905071][ T9528] ? tomoyo_path_number_perm+0x188/0x580 [ 141.905087][ T9528] ? __pfx_binder_ioctl+0x10/0x10 [ 141.905100][ T9528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.905114][ T9528] ? do_vfs_ioctl+0x226/0x13e0 [ 141.905126][ T9528] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 141.905136][ T9528] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 141.905155][ T9528] ? hook_file_ioctl_common+0x149/0x410 [ 141.905174][ T9528] ? selinux_file_ioctl+0x13b/0x290 [ 141.905187][ T9528] ? selinux_file_ioctl+0xb6/0x290 [ 141.905201][ T9528] ? __pfx_binder_ioctl+0x10/0x10 [ 141.905213][ T9528] __x64_sys_ioctl+0x18e/0x210 [ 141.905225][ T9528] do_syscall_64+0x10b/0xf80 [ 141.905236][ T9528] ? clear_bhb_loop+0x40/0x90 [ 141.905249][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.905260][ T9528] RIP: 0033:0x7f5aa679cdd9 [ 141.905269][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.905280][ T9528] RSP: 002b:00007f5aa7627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.905290][ T9528] RAX: ffffffffffffffda RBX: 00007f5aa6a15fa0 RCX: 00007f5aa679cdd9 [ 141.905297][ T9528] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006 [ 141.905303][ T9528] RBP: 00007f5aa7627090 R08: 0000000000000000 R09: 0000000000000000 [ 141.905309][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.905315][ T9528] R13: 00007f5aa6a16038 R14: 00007f5aa6a15fa0 R15: 00007ffcb8c7aeb8 [ 141.905328][ T9528] [ 142.011471][ T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.054325][ T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.140775][ T6518] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 142.287323][ T9545] FAULT_INJECTION: forcing a failure. [ 142.287323][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 142.293936][ T9545] CPU: 2 UID: 0 PID: 9545 Comm: syz.4.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.293962][ T9545] Tainted: [L]=SOFTLOCKUP [ 142.293968][ T9545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.293977][ T9545] Call Trace: [ 142.293983][ T9545] [ 142.293989][ T9545] dump_stack_lvl+0x100/0x190 [ 142.294014][ T9545] should_fail_ex.cold+0x5/0xa [ 142.294037][ T9545] should_failslab+0xc2/0x120 [ 142.294055][ T9545] __kmalloc_cache_noprof+0x7a/0x6f0 [ 142.294075][ T9545] ? sctp_stream_init_ext+0x4e/0x1b0 [ 142.294101][ T9545] sctp_stream_init_ext+0x4e/0x1b0 [ 142.294124][ T9545] sctp_sendmsg_to_asoc+0x1748/0x1c50 [ 142.294150][ T9545] ? __lock_acquire+0x4a5/0x2630 [ 142.294177][ T9545] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 142.294207][ T9545] ? do_raw_spin_lock+0x128/0x260 [ 142.294230][ T9545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.294256][ T9545] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 142.294281][ T9545] sctp_sendmsg+0x976/0x22b0 [ 142.294304][ T9545] ? __pfx_sctp_sendmsg+0x10/0x10 [ 142.294325][ T9545] ? __pfx_sock_has_perm+0x10/0x10 [ 142.294353][ T9545] ? __pfx_sctp_sendmsg+0x10/0x10 [ 142.294372][ T9545] inet_sendmsg+0x11c/0x140 [ 142.294394][ T9545] ____sys_sendmsg+0x98d/0xb70 [ 142.294412][ T9545] ? __pfx_inet_sendmsg+0x10/0x10 [ 142.294434][ T9545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.294462][ T9545] ___sys_sendmsg+0x190/0x1e0 [ 142.294482][ T9545] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.294528][ T9545] __sys_sendmsg+0x170/0x220 [ 142.294552][ T9545] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.294584][ T9545] ? rcu_is_watching+0x12/0xc0 [ 142.294610][ T9545] do_syscall_64+0x10b/0xf80 [ 142.294628][ T9545] ? clear_bhb_loop+0x40/0x90 [ 142.294647][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.294663][ T9545] RIP: 0033:0x7fb94c19cdd9 [ 142.294676][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.294691][ T9545] RSP: 002b:00007fb94d069028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.294707][ T9545] RAX: ffffffffffffffda RBX: 00007fb94c415fa0 RCX: 00007fb94c19cdd9 [ 142.294718][ T9545] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 142.294727][ T9545] RBP: 00007fb94d069090 R08: 0000000000000000 R09: 0000000000000000 [ 142.294737][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.294746][ T9545] R13: 00007fb94c416038 R14: 00007fb94c415fa0 R15: 00007ffd91467d58 [ 142.294760][ T9545] [ 142.405620][ T6518] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 142.409174][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.415945][ T6518] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.421198][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.426042][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.433407][ T6518] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 142.438770][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.443992][ T6518] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.449104][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.457122][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.463690][ T6518] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 142.467828][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.472703][ T6518] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.477846][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.483053][ T6518] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.486992][ T9556] binder_alloc: 9555: binder_alloc_buf, no vma [ 142.493804][ T6518] usb 7-1: string descriptor 0 read error: -22 [ 142.499161][ T6518] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.510765][ T6518] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.542060][ T6518] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.635943][ T9561] P [ 142.666121][ T9565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.816126][ T9572] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.894226][ T58] usb 7-1: USB disconnect, device number 18 [ 142.894520][ T9573] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 143.188186][ T9582] FAULT_INJECTION: forcing a failure. [ 143.188186][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 143.200181][ T9582] CPU: 3 UID: 0 PID: 9582 Comm: syz.5.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.200206][ T9582] Tainted: [L]=SOFTLOCKUP [ 143.200210][ T9582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.200216][ T9582] Call Trace: [ 143.200220][ T9582] [ 143.200225][ T9582] dump_stack_lvl+0x100/0x190 [ 143.200242][ T9582] should_fail_ex.cold+0x5/0xa [ 143.200257][ T9582] should_failslab+0xc2/0x120 [ 143.200269][ T9582] __kmalloc_cache_noprof+0x7a/0x6f0 [ 143.200283][ T9582] ? sctp_datamsg_from_user+0x8e/0x1360 [ 143.200300][ T9582] sctp_datamsg_from_user+0x8e/0x1360 [ 143.200315][ T9582] ? sctp_sched_init_sid+0x8b/0x160 [ 143.200328][ T9582] ? sctp_sched_fcfs_init_sid+0x9/0x10 [ 143.200339][ T9582] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 143.200360][ T9582] ? __lock_sock+0x1f8/0x270 [ 143.200375][ T9582] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 143.200392][ T9582] ? __pfx_autoremove_wake_function+0x10/0x10 [ 143.200409][ T9582] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 143.200427][ T9582] sctp_sendmsg+0x976/0x22b0 [ 143.200442][ T9582] ? __pfx_sctp_sendmsg+0x10/0x10 [ 143.200458][ T9582] ? __pfx_sock_has_perm+0x10/0x10 [ 143.200477][ T9582] ? __pfx_sctp_sendmsg+0x10/0x10 [ 143.200489][ T9582] inet_sendmsg+0x11c/0x140 [ 143.200505][ T9582] ____sys_sendmsg+0x98d/0xb70 [ 143.200517][ T9582] ? __pfx_inet_sendmsg+0x10/0x10 [ 143.200532][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.200550][ T9582] ___sys_sendmsg+0x190/0x1e0 [ 143.200564][ T9582] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.200593][ T9582] __sys_sendmsg+0x170/0x220 [ 143.200610][ T9582] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.200645][ T9582] ? rcu_is_watching+0x12/0xc0 [ 143.200664][ T9582] do_syscall_64+0x10b/0xf80 [ 143.200676][ T9582] ? clear_bhb_loop+0x40/0x90 [ 143.200690][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.200701][ T9582] RIP: 0033:0x7f5aa679cdd9 [ 143.200710][ T9582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.200720][ T9582] RSP: 002b:00007f5aa7606028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.200731][ T9582] RAX: ffffffffffffffda RBX: 00007f5aa6a16090 RCX: 00007f5aa679cdd9 [ 143.200737][ T9582] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 143.200743][ T9582] RBP: 00007f5aa7606090 R08: 0000000000000000 R09: 0000000000000000 [ 143.200749][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.200755][ T9582] R13: 00007f5aa6a16128 R14: 00007f5aa6a16090 R15: 00007ffcb8c7aeb8 [ 143.200768][ T9582] [ 143.388192][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1145'. [ 143.401530][ T9587] bond3: entered promiscuous mode [ 143.403200][ T9587] bond3: entered allmulticast mode [ 143.469595][ T9587] veth3: entered allmulticast mode [ 143.483267][ T9587] veth3: entered promiscuous mode [ 143.485993][ T9587] bond3: (slave veth3): Enslaving as an active interface with an up link [ 143.663324][ T9608] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 143.787783][ T9616] P [ 144.092506][ T9633] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1157'. [ 144.108934][ T9639] NILFS (nullb0): couldn't find nilfs on the device [ 144.148349][ T9642] binder_alloc: 9641: binder_alloc_buf, no vma [ 144.691275][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.771113][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.790112][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.926916][ T9671] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 144.926916][ T9671] The task syz.4.1169 (9671) triggered the difference, watch for misbehavior. [ 144.942174][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.083900][ T9678] ------------[ cut here ]------------ [ 145.088098][ T9678] !chanctx_conf [ 145.088111][ T9678] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x5c5/0x730, CPU#0: syz.2.1171/9678 [ 145.094279][ T9678] Modules linked in: [ 145.096975][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.2.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.101315][ T9682] binder_alloc: 9681: binder_alloc_buf, no vma [ 145.101708][ T9678] Tainted: [L]=SOFTLOCKUP [ 145.106258][ T9678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.110985][ T9678] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 145.113694][ T9678] Code: 48 8d 35 00 00 00 00 e8 39 32 e3 f6 e8 34 8a ec f6 e9 20 fe ff ff e8 9a 46 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 8c 46 07 f7 90 <0f> 0b 90 eb b1 e8 81 46 07 f7 e8 8c 92 eb f6 31 ff 89 c3 89 c6 e8 [ 145.122036][ T9678] RSP: 0018:ffffc9000caff200 EFLAGS: 00010287 [ 145.124791][ T9678] RAX: 0000000000000817 RBX: ffff8880139ac000 RCX: ffffc9000d262000 [ 145.128493][ T9678] RDX: 0000000000080000 RSI: ffffffff8b014554 RDI: ffff888033378000 [ 145.132430][ T9678] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 145.136134][ T9678] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888059343780 [ 145.139710][ T9678] R13: ffff888059840f20 R14: ffff888023c38000 R15: 0000000000000000 [ 145.143261][ T9678] FS: 00007f9cd0eef6c0(0000) GS:ffff8880d6376000(0000) knlGS:0000000000000000 [ 145.147186][ T9678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.150054][ T9678] CR2: 00002000000003c0 CR3: 0000000020061000 CR4: 0000000000352ef0 [ 145.153689][ T9678] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 145.157165][ T9678] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 145.160722][ T9678] Call Trace: [ 145.162245][ T9678] [ 145.163587][ T9678] rate_control_rate_init_all_links+0x76/0x1f0 [ 145.166408][ T9678] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 145.169018][ T9678] sta_apply_parameters+0x1234/0x2090 [ 145.171640][ T9678] ? __sta_info_alloc+0x1146/0x1cd0 [ 145.173979][ T9678] ieee80211_add_station+0x3ff/0x760 [ 145.176277][ T9678] nl80211_new_station+0x14a9/0x20f0 [ 145.178547][ T9678] ? __pfx_nl80211_new_station+0x10/0x10 [ 145.181095][ T9678] ? nl80211_pre_doit+0x19a/0xae0 [ 145.183379][ T9678] genl_family_rcv_msg_doit+0x214/0x300 [ 145.185849][ T9678] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 145.188553][ T9678] ? bpf_lsm_capable+0x9/0x10 [ 145.190735][ T9678] ? security_capable+0x80/0x260 [ 145.192959][ T9678] ? ns_capable+0xd2/0xf0 [ 145.194911][ T9678] genl_rcv_msg+0x560/0x800 [ 145.196981][ T9678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.199205][ T9678] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 145.201625][ T9678] ? __pfx_nl80211_new_station+0x10/0x10 [ 145.204086][ T9678] ? __pfx_nl80211_post_doit+0x10/0x10 [ 145.206652][ T9678] netlink_rcv_skb+0x159/0x420 [ 145.208832][ T9678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.211329][ T9678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.213658][ T9678] ? netlink_deliver_tap+0x1ae/0xcc0 [ 145.215927][ T9678] genl_rcv+0x28/0x40 [ 145.217725][ T9678] netlink_unicast+0x585/0x850 [ 145.219845][ T9678] ? __pfx_netlink_unicast+0x10/0x10 [ 145.222361][ T9678] netlink_sendmsg+0x8b0/0xda0 [ 145.224525][ T9678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.226871][ T9678] ? pti_set_user_pgtbl+0x30/0x50 [ 145.229006][ T9678] ____sys_sendmsg+0x9e1/0xb70 [ 145.230751][ T9678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.233137][ T9678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.235315][ T9678] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.237410][ T9678] ___sys_sendmsg+0x190/0x1e0 [ 145.239248][ T9678] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.241447][ T9678] __sys_sendmsg+0x170/0x220 [ 145.243318][ T9678] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.245137][ T9678] ? __x64_sys_futex+0x34f/0x4d0 [ 145.246852][ T9678] ? rcu_is_watching+0x12/0xc0 [ 145.248509][ T9678] do_syscall_64+0x10b/0xf80 [ 145.250092][ T9678] ? clear_bhb_loop+0x40/0x90 [ 145.252009][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.254157][ T9678] RIP: 0033:0x7f9ccff9cdd9 [ 145.255669][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.262712][ T9678] RSP: 002b:00007f9cd0eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.266330][ T9678] RAX: ffffffffffffffda RBX: 00007f9cd0216090 RCX: 00007f9ccff9cdd9 [ 145.269630][ T9678] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000d [ 145.273061][ T9678] RBP: 00007f9cd0032d69 R08: 0000000000000000 R09: 0000000000000000 [ 145.276524][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.279997][ T9678] R13: 00007f9cd0216128 R14: 00007f9cd0216090 R15: 00007ffdb4cef038 [ 145.283576][ T9678] [ 145.284979][ T9678] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.288172][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.2.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.292876][ T9678] Tainted: [L]=SOFTLOCKUP [ 145.294758][ T9678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.299130][ T9678] Call Trace: [ 145.300645][ T9678] [ 145.301983][ T9678] dump_stack_lvl+0x100/0x190 [ 145.304114][ T9678] vpanic+0x552/0x970 [ 145.305903][ T9678] ? __pfx_vpanic+0x10/0x10 [ 145.307948][ T9678] panic+0xd1/0xe0 [ 145.309629][ T9678] ? __pfx_panic+0x10/0x10 [ 145.311603][ T9678] check_panic_on_warn.cold+0x19/0x34 [ 145.313885][ T9678] ? rate_control_rate_init+0x5c5/0x730 [ 145.316262][ T9678] __warn.cold+0x191/0x328 [ 145.318286][ T9678] __report_bug+0x296/0x3d0 [ 145.320290][ T9678] ? rate_control_rate_init+0x5c5/0x730 [ 145.322447][ T9678] ? __pfx___report_bug+0x10/0x10 [ 145.324139][ T9678] ? kasan_save_track+0x14/0x30 [ 145.325746][ T9678] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.327850][ T9678] ? ieee80211_add_station+0x5f1/0x760 [ 145.329672][ T9678] ? nl80211_new_station+0x14a9/0x20f0 [ 145.331551][ T9678] ? genl_family_rcv_msg_doit+0x214/0x300 [ 145.333434][ T9678] ? netlink_rcv_skb+0x159/0x420 [ 145.335069][ T9678] ? netlink_unicast+0x585/0x850 [ 145.336789][ T9678] ? netlink_sendmsg+0x8b0/0xda0 [ 145.338472][ T9678] ? ____sys_sendmsg+0x9e1/0xb70 [ 145.340180][ T9678] ? rate_control_rate_init+0x5c5/0x730 [ 145.342189][ T9678] report_bug+0xb2/0x220 [ 145.343629][ T9678] ? rate_control_rate_init+0x5c5/0x730 [ 145.345535][ T9678] handle_bug+0x16a/0x2a0 [ 145.347003][ T9678] exc_invalid_op+0x17/0x50 [ 145.348555][ T9678] asm_exc_invalid_op+0x1a/0x20 [ 145.350228][ T9678] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 145.352395][ T9678] Code: 48 8d 35 00 00 00 00 e8 39 32 e3 f6 e8 34 8a ec f6 e9 20 fe ff ff e8 9a 46 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 8c 46 07 f7 90 <0f> 0b 90 eb b1 e8 81 46 07 f7 e8 8c 92 eb f6 31 ff 89 c3 89 c6 e8 [ 145.358744][ T9678] RSP: 0018:ffffc9000caff200 EFLAGS: 00010287 [ 145.360869][ T9678] RAX: 0000000000000817 RBX: ffff8880139ac000 RCX: ffffc9000d262000 [ 145.363679][ T9678] RDX: 0000000000080000 RSI: ffffffff8b014554 RDI: ffff888033378000 [ 145.366353][ T9678] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 145.369070][ T9678] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888059343780 [ 145.371755][ T9678] R13: ffff888059840f20 R14: ffff888023c38000 R15: 0000000000000000 [ 145.374420][ T9678] ? rate_control_rate_init+0x5c4/0x730 [ 145.376345][ T9678] rate_control_rate_init_all_links+0x76/0x1f0 [ 145.378454][ T9678] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 145.380467][ T9678] sta_apply_parameters+0x1234/0x2090 [ 145.382370][ T9678] ? __sta_info_alloc+0x1146/0x1cd0 [ 145.384159][ T9678] ieee80211_add_station+0x3ff/0x760 [ 145.386025][ T9678] nl80211_new_station+0x14a9/0x20f0 [ 145.387919][ T9678] ? __pfx_nl80211_new_station+0x10/0x10 [ 145.389889][ T9678] ? nl80211_pre_doit+0x19a/0xae0 [ 145.391771][ T9678] genl_family_rcv_msg_doit+0x214/0x300 [ 145.393648][ T9678] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 145.395735][ T9678] ? bpf_lsm_capable+0x9/0x10 [ 145.397414][ T9678] ? security_capable+0x80/0x260 [ 145.399089][ T9678] ? ns_capable+0xd2/0xf0 [ 145.400734][ T9678] genl_rcv_msg+0x560/0x800 [ 145.402518][ T9678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.404330][ T9678] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 145.406183][ T9678] ? __pfx_nl80211_new_station+0x10/0x10 [ 145.408133][ T9678] ? __pfx_nl80211_post_doit+0x10/0x10 [ 145.410046][ T9678] netlink_rcv_skb+0x159/0x420 [ 145.411996][ T9678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.413788][ T9678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.415622][ T9678] ? netlink_deliver_tap+0x1ae/0xcc0 [ 145.417462][ T9678] genl_rcv+0x28/0x40 [ 145.418828][ T9678] netlink_unicast+0x585/0x850 [ 145.420448][ T9678] ? __pfx_netlink_unicast+0x10/0x10 [ 145.422350][ T9678] netlink_sendmsg+0x8b0/0xda0 [ 145.423974][ T9678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.425765][ T9678] ? pti_set_user_pgtbl+0x30/0x50 [ 145.427467][ T9678] ____sys_sendmsg+0x9e1/0xb70 [ 145.429148][ T9678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.430967][ T9678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.432810][ T9678] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.434531][ T9678] ___sys_sendmsg+0x190/0x1e0 [ 145.436131][ T9678] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.437861][ T9678] __sys_sendmsg+0x170/0x220 [ 145.439428][ T9678] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.441183][ T9678] ? __x64_sys_futex+0x34f/0x4d0 [ 145.442916][ T9678] ? rcu_is_watching+0x12/0xc0 [ 145.444495][ T9678] do_syscall_64+0x10b/0xf80 [ 145.446119][ T9678] ? clear_bhb_loop+0x40/0x90 [ 145.447726][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.449701][ T9678] RIP: 0033:0x7f9ccff9cdd9 [ 145.451371][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.457930][ T9678] RSP: 002b:00007f9cd0eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.461093][ T9678] RAX: ffffffffffffffda RBX: 00007f9cd0216090 RCX: 00007f9ccff9cdd9 [ 145.464562][ T9678] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000d [ 145.467898][ T9678] RBP: 00007f9cd0032d69 R08: 0000000000000000 R09: 0000000000000000 [ 145.471284][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.474665][ T9678] R13: 00007f9cd0216128 R14: 00007f9cd0216090 R15: 00007ffdb4cef038 [ 145.478060][ T9678] [ 145.480374][ T9678] Kernel Offset: disabled [ 145.482276][ T9678] Rebooting in 86400 seconds..