last executing test programs: 5.737676259s ago: executing program 2 (id=731): r0 = socket(0xb, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="58eeffff01060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f7274000000000c000780080008400000005f"], 0x58}}, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf250a0000000c0003800800010001000000"], 0x20}}, 0x20048880) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35b]}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) ppoll(&(0x7f00000004c0)=[{r7, 0x4041}], 0x1, 0x0, 0x0, 0x0) fallocate(r3, 0x11, 0x0, 0x5345) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0xe}, 0xff}, 0x18) recvfrom$inet6(r0, &(0x7f0000000040)=""/169, 0xa9, 0x2000, 0x0, 0x0) 5.488885895s ago: executing program 2 (id=735): ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0xf308}, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000001300)=""/60, 0x37, 0x3c, 0x1, 0x10001}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0xe, 0x8, 0x5, 0x42f, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000002c0)=""/4096, 0x41100, 0x28, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001380)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000013c0)=[{0x5, 0x5, 0x5, 0xc}, {0x2, 0x1}, {0x5, 0x3, 0x0, 0x5}, {0x3, 0x4, 0x2, 0xc}, {0x0, 0x1, 0xa, 0x8}, {0x2, 0x1, 0x2, 0x6}, {0x1, 0x1, 0x0, 0x3}, {0x5, 0x4, 0xd, 0xa}, {0x1, 0x2, 0x10}], 0x10, 0x8}, 0x94) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001540)=0x2, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000001580)) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000016c0)={&(0x7f0000001680)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000001700)={&(0x7f0000001600)=[0x0], &(0x7f0000001640)=[0x0], 0x1, r6, 0xcccccccc}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r4, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000001880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001ac0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000001f80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001b00)={0x414, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_WOL_SOPASS={0x7a, 0x3, "d68405a7c941ca286e522253ce692b82ed266b9d39596b81524f96badcdda79a219dec2d59fb0ae62b7fdc2e4a5ccbad9f6687bb79ec76efc37959f4d1c05cc7b2d2fcb2905e0bd4ecc736faecdf1123467e5b3d536fcd586ed56ac65eac399e2c7f6441a56732cd4c7378269ff0b15df874bf1dba97"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x78, 0x5, "5fa1baa09182ea4a5e423b54e1aea38ab65e275af8ea5369b614f5bbfac09da9f601ae9adb965713092e97b9e6ba91d132e49b45754c77b3db78dcd4b439d306e158a1e017320af0d5a60b3e2f71fe9a0512f969cd7f18835a7b98377588488c263a11be0ca5ffc2b9d3035c6c8e2d66daab3277"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "116aaf"}, @ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "f74eeca300c95174a39244fa1c1c8617571153dd54cd2fccf692862aeb136344b941e2bee8814320a21d97fa9f0f5b0ddb614a2428802a62708ed84fe1a2c6cfba76b3a59a75b4457862988230bcd194ecc213bcd178ff441b65c12895c5bbecf764245d82e247470f2c96c7d9d78add133a528e70427b9078247dcea3d75b9a5d0a621ed214891cbc2d050f39f865ac3b651e2eb2e25519786925f160"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "d2815ee40bb17d1c647da9b7b87ff9dd91973db78fff07e1501e874ac68370e7432274bf4302bbe67464a5f267c579ac9c1f50cd0b49b5c3e07fb76558293d3a7f74d6e4463c5af5418eeb98e63067c0b995cb019cd35a0b1a17100fcceb128fa238a59f56e0d4dba0062175f0d650b96df650600c508139de1bb908b371531b3a08d4a95e16525e34c9519a1fbda6b8d28261db38f163795fac710b0d9d396d1e11f0b7244e4fa0fb9660fd032329430b1370df7ba4249c36afb020123a53f5e00845f125e30b171e200985d8a68f468377633d0155b6a02acc2e42f1b216d146d48c905740eade8477ffc64d9d452b6a7bfae91cae4e8ad12178e366"}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "29a302d77e1da3c6bb52537cbcdc827ccac8882d26edbb4d0debe8fbd5f15bb77e1c7dc590435efe73f4d7f8cf89fdc306422e4c1a29afb887a00b50300bc37a49b75eb26bd7d63bb125f6"}]}, @ETHTOOL_A_WOL_SOPASS={0x53, 0x3, "6424d848d252780199a554db414d13863583f7ebc5499ff2f4e74319bcd161d0a981ac4551e6ee7156cc675f1de024d4dbb577532f91fbfd7a564bc7e14e5dd90c313826be294c24806405f9f2ff60"}]}, 0x414}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r11 = syz_open_dev$ndb(&(0x7f0000001fc0), 0x0, 0x8001) ioctl$NBD_SET_SIZE(r11, 0xab02, 0x8000000000000001) r12 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r12, &(0x7f0000002000)=""/47, 0x2f, 0x40012000, &(0x7f0000002040)=@file={0x1, './file0\x00'}, 0x6e) r13 = accept$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002100)=0x14) getsockname$packet(r13, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002180)=0x14) r14 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000002400)=0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002440)={0x0, 0x0}, &(0x7f0000002480)=0xc) read$FUSE(r7, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r18 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000004500)='tasks\x00', 0x2, 0x0) sendmsg$netlink(r7, &(0x7f00000045c0)={&(0x7f00000021c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc, &(0x7f00000023c0)=[{&(0x7f0000002200)={0x178, 0x2a, 0x300, 0x70bd27, 0x25dfdbfb, "", [@nested={0x29, 0x15e, 0x0, 0x1, [@nested={0x4, 0x122}, @generic="d00dee900ddd162f0695c55a6cb0ba16789e7ff062b93c653b6be1f6af", @nested={0x4, 0xe6}]}, @nested={0x139, 0x15e, 0x0, 0x1, [@generic="1e5796293a169f0053cda40be5d25cd090dff47543974b5db14535d858c11a4cea7f223d508514d0202441f1aa075dff36c0abe4861b7c806b", @typed={0x8, 0x101, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x155, 0x0, 0x0, @ipv4=@loopback}, @typed={0x5, 0xb3, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x7c}, @nested={0x4, 0x16b}, @generic="b57073d0263366dba3911fa76f2fdb7be94c2247eee96129e806e53836537f368941881132db63458b0ba771f3c7ae3eb86690a6d1f066ecca1a01bf8a961e02a22a0373abfddeacab6d0d77f3e3f02385ef2ab232f17154a94c8ff0a7a6dbc13e71e549fd56210dcdb2a030b9b50d60c8459cd8e522b2169609e0fd3e8da1ece43646961400ffa6f4024647d72612f6f12f653662ca83df540be79cb42f452308ef5b81b661eca1", @nested={0x4, 0x79}, @typed={0x2f, 0x14, 0x0, 0x0, @binary="d55468c5473c7a76dd852214a56ba651e3902dfe0e24dce80641d583e869268ad972f2485cc1c413a11be0"}]}]}, 0x178}, {&(0x7f0000002380)={0x18, 0x3d, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x8, 0xed, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x18}], 0x2, &(0x7f0000004540)=[@rights={{0x24, 0x1, 0x1, [r3, r14, r5, r12, r3]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x30, 0x1, 0x1, [r18, r7, r12, 0xffffffffffffffff, r7, r4, r7, r5]}}], 0x78}, 0x8840) 4.629898843s ago: executing program 2 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002b2ff200fbdbdf25681e010008000300", @ANYRES32=r4, @ANYBLOB="2400c7", @ANYRES8=0x0, @ANYRESOCT], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x4800) (async) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xfffffffffffffcaa, 0x99, {0x8001, 0x50}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "8a73ff194965f81dd2ea01cd592382"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040890}, 0x4048890) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x11}, 0x8, 0x203ffffd, 0x300, 0x0, 0x2, 0x20000, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async, rerun: 32) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000080)) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 4.519777079s ago: executing program 2 (id=755): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xb8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155d, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x3, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x28, 0x274, 0x6, 0xfffffffd, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x3, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff, 0x300, 0x1f00}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4408000010ffffd126bd70dfefdbdf89f8dde696", @ANYRES32=0x0, @ANYBLOB="350c0400000000001c0012800b0001006d616373656300000c00028005000a000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000001c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x9, &(0x7f0000000140)=0x8000}) r9 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xf3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x543840, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}}, 0x0) ioctl$PTP_PIN_GETFUNC2(r12, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x8}) 4.240100225s ago: executing program 2 (id=757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001842c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c00188008000240ffffffff08000340000000080800014000000009"], 0xb0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001842c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c00188008000240ffffffff08000340000000080800014000000009"], 0xb0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00000000142ba48f5aa7f5d484f08c54bcfc0f000061119c0000000000180000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00000000142ba48f5aa7f5d484f08c54bcfc0f000061119c0000000000180000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf25010000001d000a00626c6b696f2e6266712e6176675f71756575655f73697a650000000008000100000c0004"], 0x54}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r5 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0x400c8a1, 0xc000, 0x8, 0x3a8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {}, {}, {0xe5, 0xfffffffc}, {}, {}, {0x0, 0x8c7}], 0xfc, 0xf2, 0x7}}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000500), 0x22, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x1, @vbi={0x8, 0x8, 0x6, 0x35323645, [0x0, 0x2], [0x40, 0xfffffffd], 0x108}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x54}}, 0x0) 4.119956748s ago: executing program 2 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000004f00)=""/4104, 0x1008}], 0x1, 0x2000, 0x0, 0x1f) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r3}, 0x38) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x8000026, r1, 0x0) 1.889826931s ago: executing program 3 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00', 0x2f66}, @in6={0xa, 0x4e24, 0x4, @loopback, 0xf824}, @in6={0xa, 0x4e22, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}], 0x80) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000014) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.88882854s ago: executing program 3 (id=779): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) (async) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x20000000000b, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_open_pts(r4, 0x102) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket(0x10, 0x80003, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) (async, rerun: 64) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r12, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r13, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r13, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) (async) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r14, 0x0, r14, 0x0, 0x7, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_generic(r5, 0x0, 0x40088c0) 1.866405934s ago: executing program 3 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="02000000200065000400028000"/24], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="02000000200065000400028000"/24], 0x30}}, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={r0, 0x0, 0x101, 0x1, 0x7, 0x2, [0x2, 0x7f, 0xffffffffffffffff, 0x8, 0xed92, 0x4]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x2, 0x200000000000000, 0x6, 0x76, 0x101}) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x2, 0x200000000000000, 0x6, 0x76, 0x101}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="ee5163907531d94c7a5f9a29da74fcb3ee2dc04061151112f233dba23de2f43229d7b1a1887d3a320ead71e3c6176a700b2cf1933c9d49a910c17725d88756f75c291f4e815d9727dccb3457579a1a0ab1fcf121da30fa3ab21133c482c5a8c00cf3291977836ea7ef768ba6e71dd3226329a254821c3a4dc5a4274c7e4cc2f9952615f44ab40e3a0edf36651dd2616469a411a045d35cd27b9af994a8d394118ff2fc52d3c3adabeeb1b1b785838bd27f8a143ce75a018b7b2f0b8606a7dc8c358e415237371626603274d46ae770b9cc5a7244371c5916bf161197e609a686dd5c"], 0x90}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="ee5163907531d94c7a5f9a29da74fcb3ee2dc04061151112f233dba23de2f43229d7b1a1887d3a320ead71e3c6176a700b2cf1933c9d49a910c17725d88756f75c291f4e815d9727dccb3457579a1a0ab1fcf121da30fa3ab21133c482c5a8c00cf3291977836ea7ef768ba6e71dd3226329a254821c3a4dc5a4274c7e4cc2f9952615f44ab40e3a0edf36651dd2616469a411a045d35cd27b9af994a8d394118ff2fc52d3c3adabeeb1b1b785838bd27f8a143ce75a018b7b2f0b8606a7dc8c358e415237371626603274d46ae770b9cc5a7244371c5916bf161197e609a686dd5c"], 0x90}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, r4, &(0x7f0000000380)) ioctl$KVM_NMI(r3, 0xae9a) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000001, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.648109864s ago: executing program 3 (id=787): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002180)={0x8000, 0x6, {}, {0xee00}, 0x9, 0x3ff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffb, 0x8, 0x7, 0x8, 0xc, {0x1, 0x8010001, 0x4d4, 0x40d, 0x6, 0x0, 0xed1, 0x4000002, 0x5, 0x2000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r0, &(0x7f00000021c0)={0x130, 0xfffffffffffffff5, r1, {0x7, 0xb2, 0x0, '\x00', {0x7ff, 0x0, 0x5, 0x7fffffff, r2, r5, 0xc000, '\x00', 0x5, 0x100000000, 0x4, 0x6, {0x7, 0x4}, {0xfffffffffffffff9, 0x9}, {0x461, 0x2}, {0xfffffffffffffff7, 0x4}, 0xfffffffb, 0x1, 0x0, 0xcb75}}}, 0x130) bind$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x6e) 1.647751587s ago: executing program 3 (id=788): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000180001"], 0x14}}, 0x8854) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000580)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10001, 0x4) readv(r0, &(0x7f0000000440)=[{&(0x7f0000003200)=""/4081, 0xff1}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000400007012bad700000000000017c00000400fc800c00038008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050027000000000008000500", @ANYRES32=r3, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) io_uring_enter(r4, 0x3910, 0xaa76, 0x8, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80000) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x4040000) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.594037108s ago: executing program 1 (id=789): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='&\x00', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x8, 0xeb7]}, {0x8001, 0x215f, 0x8, 0x2}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x6}) write$rfkill(r0, &(0x7f00000001c0)={0x40, 0x5, 0x1, 0x1}, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="eb"], 0x0) openat$mice(0xffffff9c, &(0x7f0000000100), 0x40800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0x0, 0x4}, 0x6) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 1.510034737s ago: executing program 0 (id=790): mknod(&(0x7f0000000000)='./file0\x00', 0x800, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') 1.50980229s ago: executing program 0 (id=791): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x84b0, 0x2, 0x1}, 0x18, 0x0) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000380)={0x2, 0x2}, 0x0) fsopen(&(0x7f0000000280)='configfs\x00', 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_emit_ethernet(0x2e, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="0d0f0808820400000f32c4c15564efb9050000000f01d966ba410066ed0fa80fe7c47c0fc70036f4c4e21dfffffd6681ba6100003e9f0000ef", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.449146589s ago: executing program 0 (id=792): syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() getpid() (async) r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) capset(0x0, 0x0) (async) capset(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) read(r3, &(0x7f0000000280)=""/240, 0xf0) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) unshare(0x6a040000) 1.368809037s ago: executing program 0 (id=793): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000440)={"0e20da00", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000080)={0x4, 0x5, 0xe, 0x800052d, 0x80000001, 0xfffffff9, "6bf59546e4b36fb5f6f45ceb55b2fcc4", 0xfe, 0x6, 0x1, 0xfd, 0x2, 0x7f, 0x80}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.229826979s ago: executing program 0 (id=794): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) readv(r4, &(0x7f0000000680)=[{&(0x7f0000000200)=""/134, 0x86}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "e627d2a7df72bcbf", "9d29db92ab1e3c0750a8c645962b41d3", "9eb601b2"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c80", 0x87}], 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) socket$inet6_tcp(0xa, 0x1, 0x0) 979.950173ms ago: executing program 0 (id=795): socket(0x200000000000011, 0x2, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x12, 0x0) (async) rt_sigqueueinfo(r0, 0x12, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 759.919898ms ago: executing program 3 (id=796): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f00000005c0), 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 319.077239ms ago: executing program 1 (id=797): socket(0x10, 0xb88ff3af7f43185e, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x400002) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1ed}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x22882) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+'], 0xc) read$FUSE(r10, 0x0, 0x0) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000000c0), 0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000900)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x3, 0x8, 0x0, 0x10009, 0x0, 0x1, {0x0, 0x0, 0x600000}}) syz_ublk_add_dev(r2, 0x0, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 180.096465ms ago: executing program 1 (id=798): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, 0x0, 0x0, 0x23250d9, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0xa0000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000280)={0x18}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r3}, './file0\x00'}) 179.329523ms ago: executing program 1 (id=799): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x6, 0x4, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x66, 0x0, 0xd, 0x2f, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xb0, [@empty, @broadcast, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipmr_delroute={0x48, 0x19, 0x4, 0x70bd29, 0x25dfdbfc, {0x80, 0x10, 0x0, 0x12, 0xfc, 0x1, 0x0, 0x2, 0x800}, [@RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_UID={0x8, 0x19, r2}, @RTA_NH_ID={0x8, 0x1e, 0x9d16}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x36, 0xff, r1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004082}, 0x4000854) 109.567397ms ago: executing program 1 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x4, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000180)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000006c0)=@vmx={0xa, 0x0, 0x2080, {0x0, 0x10000, {0x3}, 0x1, 0x5}, {"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", "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"}}) (async, rerun: 32) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000980)) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000100)) 0s ago: executing program 1 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000300)={r5, 0x7ff, {0x0, 0x0, 0x0, 0xf9, 0x26, 0x0, 0x1, 0x1d, 0x15, "4c90d4196b98607c3732c548b285e8bddf1b8e7a98ba1d8aa3a6fd3ae47f81535eaecff325dc4276bdabf71094992532b7fd1e44a3e8ecaddd60248e65712c71", "d5e06a8d030a0ef39a1ac46beaf6c38d942720f1fcef25c089fc3f8b9910bfcadfc470382ba9ef6946cc78479bc7f56727280e1cfe98f6b96d00c17e481818b1", "24fc69fbd4effac5625a7f5836a91ca7ed2fd486467fcba8e2aa4680adc09615", [0x3, 0x7]}}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="0568319dfe42180abe074bc8f0b06237bfbd5b922894afc29dbc927f49395cc44f6adc6ed658b23068c047dab190c984be6503ecb22ae0f85d73818c9aae2febe053800992355cd0026bb2922cb6c7f40962fb5e74", 0x55) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x0, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x0, 0x1}, {0x400000}, {}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000}]}) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x0, {0x80000001, 0x8b}}, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000fcff", @ANYRES16=r3, @ANYBLOB="00022ebd7000fedbdf2517000000"], 0x14}}, 0x4090) kernel console output (not intermixed with test programs): .0: ADU100 now attached to /dev/usb/adutux0 [ 57.644437][ T5093] Bluetooth: hci1: command 0x040f tx timeout [ 57.754381][ T50] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 57.916545][ T50] usb 5-1: config 0 has no interfaces? [ 57.920855][ T50] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 57.924786][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.928137][ T50] usb 5-1: Product: syz [ 57.929973][ T50] usb 5-1: Manufacturer: syz [ 57.932014][ T50] usb 5-1: SerialNumber: syz [ 57.943229][ T50] usb 5-1: config 0 descriptor?? [ 58.333550][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'. [ 58.356709][ T6326] netlink: 1 bytes leftover after parsing attributes in process `syz.2.123'. [ 58.446809][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 58.449600][ T6328] bridge_slave_1: left allmulticast mode [ 58.451343][ T6328] bridge_slave_1: left promiscuous mode [ 58.454021][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.459357][ T6328] bridge_slave_0: left allmulticast mode [ 58.461171][ T6328] bridge_slave_0: left promiscuous mode [ 58.463983][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.503040][ T5093] Bluetooth: unknown link type 174 [ 58.503488][ T6330] ptrace attach of "/syz-executor exec"[5733] was attempted by " @' '\x0cnӕ+t;EQ,T\x0c]  4Sk$U%6P\x09>Xu;9m1>pMv~9{bc_F88Mg*Qh|*nV\x09s6~*)[__UIpnHŎZnea!EOh&To.[0Y    c u((j;$)TgY\x07|\x0d[{J@D[7Q-$_1If!\x07\x07Lvj{,~ \x0a  [ 58.505088][ T5093] Bluetooth: hci0: connection err: -111 [ 59.132865][ T42] audit: type=1400 audit(1784979224.676:401): avc: denied { setopt } for pid=6346 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.145459][ T6347] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET) [ 59.147953][ T6347] syzkaller1: entered promiscuous mode [ 59.149641][ T6347] syzkaller1: entered allmulticast mode [ 59.248571][ T6357] XFS (loop2): SB validate failed with error -5. [ 59.294079][ T6364] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.326264][ T6367] overlayfs: workdir and upperdir must reside under the same mount [ 59.554423][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.694459][ T50] usb 8-1: device descriptor read/64, error -71 [ 59.934383][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.064375][ T50] usb 8-1: device descriptor read/64, error -71 [ 60.176641][ T50] usb usb8-port1: attempt power cycle [ 60.514945][ T1047] usb 5-1: USB disconnect, device number 2 [ 60.525310][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.539138][ T6387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.137'. [ 60.544951][ T50] usb 8-1: device descriptor read/8, error -71 [ 60.567050][ T6391] Mass Storage Function, version: 2009/09/11 [ 60.570054][ T6391] LUN: removable file: (no medium) [ 60.784381][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.804806][ T50] usb 8-1: device descriptor read/8, error -71 [ 60.914607][ T50] usb usb8-port1: unable to enumerate USB device [ 61.009434][ T6411] netlink: 17 bytes leftover after parsing attributes in process `syz.0.144'. [ 61.264719][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.418184][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 61.426328][ T5879] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.431022][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.445046][ T5879] usb 5-1: config 0 descriptor?? [ 61.450199][ T5879] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 61.565966][ T6416] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 61.584989][ C0] Illegal XDP return value 16128 on prog (id 55) dev veth1_to_bridge, expect packet loss! [ 61.654920][ T5880] usb 5-1: USB disconnect, device number 3 [ 61.808069][ T5878] usb 6-1: USB disconnect, device number 2 [ 62.099915][ T65] block nbd0: Receive control failed (result -32) [ 62.254524][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.270520][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 62.270536][ T42] audit: type=1400 audit(1784979227.816:434): avc: denied { write } for pid=6451 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.304213][ T6458] warning: `syz.0.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.325879][ T42] audit: type=1400 audit(1784979227.876:435): avc: denied { map_create } for pid=6460 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.336153][ T6464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.162'. [ 62.343041][ T6466] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 62.347679][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.351950][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.401146][ T42] audit: type=1400 audit(1784979227.946:436): avc: denied { append } for pid=6471 comm="syz.0.164" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.413831][ T5878] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 62.419933][ T5878] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 62.425412][ T5878] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.432531][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 62.435653][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 62.438796][ T5878] usb 6-1: Product: syz [ 62.443026][ T5878] usb 6-1: Manufacturer: syz [ 62.445554][ T5878] usb 6-1: SerialNumber: syz [ 62.449459][ T5878] usb 6-1: config 0 descriptor?? [ 62.456584][ T5878] hub 6-1:0.0: bad descriptor, ignoring hub [ 62.458538][ T5878] hub 6-1:0.0: probe with driver hub failed with error -5 [ 62.462929][ T5878] usb 6-1: selecting invalid altsetting 0 [ 62.586329][ T42] audit: type=1400 audit(1784979228.136:437): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.680334][ T6487] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 62.701151][ T6487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.829442][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.173'. [ 62.835407][ T6502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6502 comm=syz.3.173 [ 62.847379][ T42] audit: type=1400 audit(1784979228.396:438): avc: denied { load_policy } for pid=6501 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.847481][ T6502] SELinux: policydb string  does not match my string SE Linux [ 62.858149][ T6502] SELinux: failed to load policy [ 62.890107][ T42] audit: type=1400 audit(1784979228.436:439): avc: denied { setopt } for pid=6504 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.022130][ T42] audit: type=1400 audit(1784979228.566:440): avc: denied { getopt } for pid=6508 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.024901][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 63.049394][ T42] audit: type=1400 audit(1784979228.596:441): avc: denied { bind } for pid=6508 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.049609][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 63.067155][ T6509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6509 comm=syz.3.176 [ 63.076875][ T6440] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 63.168136][ T6516] syz.3.179: attempt to access beyond end of device [ 63.168136][ T6516] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 63.172176][ T6516] gfs2: error -5 reading superblock [ 63.208962][ T42] audit: type=1400 audit(1784979228.756:442): avc: denied { map_read map_write } for pid=6520 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.214420][ T6440] usb 6-1: device descriptor read/64, error -71 [ 63.255623][ T6521] netlink: 'syz.3.180': attribute type 3 has an invalid length. [ 63.274408][ T5843] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.353160][ T6525] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 63.358284][ T6525] Cannot find add_set index 0 as target [ 63.437767][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.441423][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.444759][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.445759][ T6528] netlink: 80 bytes leftover after parsing attributes in process `syz.2.183'. [ 63.448773][ T5843] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.455217][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.460501][ T5843] usb 5-1: config 0 descriptor?? [ 63.465463][ T6440] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 63.594415][ T6440] usb 6-1: device descriptor read/64, error -71 [ 63.714441][ T5879] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 63.834950][ T6440] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 63.855220][ T6440] usb 6-1: device descriptor read/8, error -71 [ 63.865877][ T5879] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 63.868297][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.871567][ T5879] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.875361][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.878643][ T5843] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 63.879777][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 63.880972][ T5879] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 63.891120][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.895068][ T5879] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.899390][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.904482][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 63.909985][ T5879] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 63.913216][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.917644][ T5879] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.922338][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.926701][ T5879] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 63.933806][ T5879] usb 7-1: string descriptor 0 read error: -22 [ 63.936551][ T5879] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 63.940061][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.957889][ T5879] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 64.095428][ T6440] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 64.115279][ T6440] usb 6-1: device descriptor read/8, error -71 [ 64.129839][ T5843] usb 5-1: USB disconnect, device number 4 [ 64.130134][ T6513] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -19 [ 64.186573][ T5879] usb 7-1: USB disconnect, device number 3 [ 64.236945][ T5523] usb 6-1: USB disconnect, device number 3 [ 64.384567][ T5523] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.524506][ T5523] usb 6-1: device descriptor read/64, error -71 [ 64.702328][ T6552] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 64.719321][ T6551] fuse: Unknown parameter 'ed' [ 64.725317][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.189'. [ 64.731509][ T6551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6551 comm=syz.0.189 [ 64.784360][ T5523] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.831687][ T42] audit: type=1400 audit(1784979230.376:443): avc: denied { read } for pid=6577 comm="syz.2.196" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.914382][ T5523] usb 6-1: device descriptor read/64, error -71 [ 64.916733][ T6594] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 64.919152][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 64.922370][ T6594] team_slave_1: entered promiscuous mode [ 64.925880][ T6594] team_slave_1: entered allmulticast mode [ 64.943064][ T6594] team0: Port device team_slave_1 removed [ 64.945319][ T6594] bridge0: port 3(team_slave_1) entered blocking state [ 64.947512][ T6594] bridge0: port 3(team_slave_1) entered disabled state [ 64.977865][ T6605] bridge0: entered promiscuous mode [ 64.979635][ T6605] bridge0: entered allmulticast mode [ 64.985190][ T6607] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 64.987592][ T6607] netlink: 756 bytes leftover after parsing attributes in process `syz.1.204'. [ 65.034535][ T5523] usb usb6-port1: attempt power cycle [ 65.058071][ T6611] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 65.267888][ T6641] netlink: 276 bytes leftover after parsing attributes in process `syz.2.215'. [ 65.298667][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 65.459071][ T6653] syzkaller0: entered promiscuous mode [ 65.460874][ T6653] syzkaller0: entered allmulticast mode [ 65.464483][ T5523] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 65.487082][ T5523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.491476][ T5523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.495195][ T5523] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.495847][ T6660] ip6_vti0: entered promiscuous mode [ 65.500022][ T5523] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.504147][ T6660] team0: Device ip6_vti0 is of different type [ 65.505958][ T5523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.512697][ T5523] usb 6-1: config 0 descriptor?? [ 65.637159][ T6672] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 65.642407][ T6672] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 65.647233][ T6672] cramfs: wrong magic [ 65.656890][ T6673] bond2: Invalid ad_actor_system MAC address. [ 65.659025][ T6673] bond2: option ad_actor_system: invalid value (27571) [ 65.667792][ T6673] bond2 (unregistering): Released all slaves [ 65.780904][ T6681] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.837301][ T6679] random: crng reseeded on system resumption [ 65.868878][ T6690] xt_hl: Unknown TTL match mode: 255 [ 65.882303][ T6688] process 'syz.0.231' launched './file0' with NULL argv: empty string added [ 65.887981][ T6692] openvswitch: netlink: Flow key attr not present in new flow. [ 65.891860][ T6692] input: syz0 as /devices/virtual/input/input73 [ 65.896036][ T6695] veth0_to_bond: entered allmulticast mode [ 65.936296][ T5523] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 66.000631][ T6707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.839075][ T6735] Bluetooth: MGMT ver 1.23 [ 66.995974][ T6746] tmpfs: Unknown parameter 'usrquota' [ 67.007738][ T6746] input: syz0 as /devices/virtual/input/input74 [ 67.086891][ T6752] tipc: Started in network mode [ 67.088611][ T6752] tipc: Node identity ac14140f, cluster identity 4711 [ 67.091836][ T6752] tipc: New replicast peer: 255.255.255.255 [ 67.095552][ T6752] tipc: Enabled bearer , priority 10 [ 67.264887][ T5523] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 67.284371][ T1492] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.323514][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 67.323524][ T42] audit: type=1400 audit(1784979232.866:496): avc: denied { write } for pid=6755 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.363730][ T42] audit: type=1400 audit(1784979232.906:497): avc: denied { read } for pid=6760 comm="syz.0.248" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.370471][ T42] audit: type=1400 audit(1784979232.906:498): avc: denied { open } for pid=6760 comm="syz.0.248" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.378149][ T42] audit: type=1400 audit(1784979232.916:499): avc: denied { ioctl } for pid=6760 comm="syz.0.248" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.414426][ T1492] usb 8-1: device descriptor read/64, error -71 [ 67.654451][ T1492] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 67.784564][ T1492] usb 8-1: device descriptor read/64, error -71 [ 67.784607][ T847] Process accounting resumed [ 67.819443][ T6769] IPv6: sit1: Disabled Multicast RS [ 67.821647][ T6769] sit1: entered allmulticast mode [ 67.894895][ T1492] usb usb8-port1: attempt power cycle [ 67.943440][ T42] audit: type=1400 audit(1784979233.486:500): avc: denied { read append } for pid=6771 comm="syz.1.252" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.047670][ T5843] usb 6-1: USB disconnect, device number 6 [ 68.086381][ T5523] tipc: Node number set to 2886997007 [ 68.086737][ T6784] fuse: Bad value for 'fd' [ 68.234405][ T1492] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 68.264827][ T1492] usb 8-1: device descriptor read/8, error -71 [ 68.419030][ T42] audit: type=1400 audit(1784979233.966:501): avc: denied { mount } for pid=6787 comm="syz.0.256" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.514793][ T1492] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 68.535062][ T1492] usb 8-1: device descriptor read/8, error -71 [ 68.644708][ T1492] usb usb8-port1: unable to enumerate USB device [ 68.834875][ T6772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.837350][ T6772] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.846524][ T6772] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.853601][ T6772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.856300][ T6772] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.861741][ T6772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.864781][ T6772] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.868818][ T6772] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.871373][ T6772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.874042][ T6772] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.877829][ T6772] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.905566][ T42] audit: type=1400 audit(1784979234.456:502): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.909759][ T6794] team0: No ports can be present during mode change [ 68.915283][ T6795] tmpfs: Unknown parameter 'm' [ 68.938063][ T42] audit: type=1400 audit(1784979234.486:503): avc: denied { read } for pid=6799 comm="syz.0.259" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.138416][ T6802] sch_tbf: burst 7 is lower than device lo mtu (1550) ! [ 69.196376][ T42] audit: type=1400 audit(1784979234.746:504): avc: denied { append } for pid=6813 comm="syz.2.263" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.199296][ T6814] input: syz0 as /devices/virtual/input/input75 [ 69.224004][ T42] audit: type=1400 audit(1784979234.766:505): avc: denied { watch } for pid=6813 comm="syz.2.263" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.434379][ T1492] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.458517][ T6824] FAULT_INJECTION: forcing a failure. [ 69.458517][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.464550][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.2.266 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.464567][ T6824] Tainted: [L]=SOFTLOCKUP [ 69.464571][ T6824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.464583][ T6824] Call Trace: [ 69.464588][ T6824] [ 69.464592][ T6824] dump_stack_lvl+0x100/0x190 [ 69.464621][ T6824] should_fail_ex.cold+0x5/0xa [ 69.464636][ T6824] _copy_to_iter+0x1f3/0x1720 [ 69.464657][ T6824] ? __pfx__copy_to_iter+0x10/0x10 [ 69.464671][ T6824] ? do_raw_spin_lock+0x128/0x260 [ 69.464687][ T6824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 69.464703][ T6824] ? _raw_spin_lock_irqsave+0x52/0x60 [ 69.464726][ T6824] simple_copy_to_iter+0x46/0x90 [ 69.464743][ T6824] __skb_datagram_iter+0x5c8/0x900 [ 69.464759][ T6824] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 69.464780][ T6824] skb_copy_datagram_iter+0xa1/0x250 [ 69.464798][ T6824] process_rx_list+0x38f/0x790 [ 69.464817][ T6824] tls_sw_recvmsg+0x288/0x1600 [ 69.464834][ T6824] ? __lock_acquire+0x49f/0x1a40 [ 69.464848][ T6824] ? sock_has_perm+0x25a/0x2f0 [ 69.464862][ T6824] ? __pfx_sock_has_perm+0x10/0x10 [ 69.464877][ T6824] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 69.464894][ T6824] ? __fget_files+0x215/0x3d0 [ 69.464908][ T6824] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 69.464923][ T6824] inet6_recvmsg+0x455/0x4c0 [ 69.464932][ T6824] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 69.464947][ T6824] ? __pfx_inet6_recvmsg+0x10/0x10 [ 69.464957][ T6824] sock_recvmsg+0x102/0x220 [ 69.464974][ T6824] __sys_recvfrom+0x1f2/0x2f0 [ 69.464986][ T6824] ? __pfx___sys_recvfrom+0x10/0x10 [ 69.465001][ T6824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.465019][ T6824] ? ksys_write+0x1ac/0x250 [ 69.465035][ T6824] ? __pfx_ksys_write+0x10/0x10 [ 69.465052][ T6824] __x64_sys_recvfrom+0xe0/0x1c0 [ 69.465063][ T6824] ? do_syscall_64+0x90/0x870 [ 69.465074][ T6824] ? lockdep_hardirqs_on+0x78/0x100 [ 69.465085][ T6824] do_syscall_64+0x115/0x870 [ 69.465095][ T6824] ? clear_bhb_loop+0x40/0x90 [ 69.465108][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.465119][ T6824] RIP: 0033:0x7f79d5f9de99 [ 69.465128][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.465138][ T6824] RSP: 002b:00007f79d6e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 69.465149][ T6824] RAX: ffffffffffffffda RBX: 00007f79d6225fa0 RCX: 00007f79d5f9de99 [ 69.465155][ T6824] RDX: 0000000000000092 RSI: 0000200000000140 RDI: 0000000000000003 [ 69.465161][ T6824] RBP: 00007f79d6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 69.465167][ T6824] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 69.465173][ T6824] R13: 00007f79d6226038 R14: 00007f79d6225fa0 R15: 00007ffd3a350418 [ 69.465186][ T6824] [ 69.477148][ T6832] virtio-fs: tag not found [ 69.605936][ T1492] usb 6-1: too many configurations: 42, using maximum allowed: 8 [ 69.609651][ T6839] __nla_validate_parse: 4 callbacks suppressed [ 69.609661][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 69.618697][ T6840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.271'. [ 69.619367][ T1492] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 69.622221][ T1492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.629096][ T1492] usb 6-1: Product: syz [ 69.630402][ T1492] usb 6-1: Manufacturer: syz [ 69.631964][ T1492] usb 6-1: SerialNumber: syz [ 69.856688][ T1492] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 69.860956][ T1492] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 69.864199][ T1492] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 69.870752][ T1492] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 69.882382][ T1492] usb 6-1: USB disconnect, device number 7 [ 70.047194][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.132674][ T6874] xt_hashlimit: size too large, truncated to 1048576 [ 70.187868][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 70.202167][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 70.210382][ T6879] xt_hashlimit: size too large, truncated to 1048576 [ 70.256920][ T6869] FAULT_INJECTION: forcing a failure. [ 70.256920][ T6869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.262781][ T6869] CPU: 1 UID: 0 PID: 6869 Comm: syz.0.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.262800][ T6869] Tainted: [L]=SOFTLOCKUP [ 70.262803][ T6869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.262810][ T6869] Call Trace: [ 70.262814][ T6869] [ 70.262819][ T6869] dump_stack_lvl+0x100/0x190 [ 70.262865][ T6869] should_fail_ex.cold+0x5/0xa [ 70.262879][ T6869] _copy_to_user+0x32/0xd0 [ 70.262899][ T6869] simple_read_from_buffer+0xcb/0x170 [ 70.262911][ T6869] proc_fail_nth_read+0x1af/0x230 [ 70.262928][ T6869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.262944][ T6869] ? rw_verify_area+0xce/0x6d0 [ 70.262959][ T6869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.262974][ T6869] vfs_read+0x1e4/0xb40 [ 70.262992][ T6869] ? __pfx_vfs_read+0x10/0x10 [ 70.263007][ T6869] ? __fget_files+0x215/0x3d0 [ 70.263020][ T6869] ? __fget_files+0x21f/0x3d0 [ 70.263034][ T6869] ksys_read+0x12a/0x250 [ 70.263050][ T6869] ? __pfx_ksys_read+0x10/0x10 [ 70.263072][ T6869] do_syscall_64+0x115/0x870 [ 70.263093][ T6869] ? clear_bhb_loop+0x40/0x90 [ 70.263112][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.263129][ T6869] RIP: 0033:0x7f7875f5e6ce [ 70.263143][ T6869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.263158][ T6869] RSP: 002b:00007f78741f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.263175][ T6869] RAX: ffffffffffffffda RBX: 00007f78741f66c0 RCX: 00007f7875f5e6ce [ 70.263185][ T6869] RDX: 000000000000000f RSI: 00007f78741f60a0 RDI: 0000000000000005 [ 70.263196][ T6869] RBP: 00007f78741f6090 R08: 0000000000000000 R09: 0000000000000000 [ 70.263205][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.263214][ T6869] R13: 00007f7876226038 R14: 00007f7876225fa0 R15: 00007ffe1161ca48 [ 70.263236][ T6869] [ 70.428387][ T6892] PM: Enabling pm_trace changes system date and time during resume. [ 70.428387][ T6892] PM: Correct system time has to be restored manually after resume. [ 70.449042][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 70.452007][ T6896] Unknown options in mask b7f2 [ 70.463628][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 70.467666][ T6889] Unknown options in mask b7f2 [ 70.552759][ T6903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.576546][ T6905] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 70.645070][ T6903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.755824][ T6903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.835728][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 70.846471][ T6921] netlink: 76 bytes leftover after parsing attributes in process `syz.1.294'. [ 70.871966][ T6903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.882063][ T6927] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 70.885868][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 70.892880][ T6927] netlink: 'syz.0.295': attribute type 17 has an invalid length. [ 70.895890][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 70.902606][ T6927] gretap0: entered promiscuous mode [ 70.905670][ T6927] gretap0: left promiscuous mode [ 70.925189][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.925238][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.925307][ T5735] Bluetooth: hci1: command 0x040f tx timeout [ 70.971496][ T5780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.979512][ T5780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.984432][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.988895][ T5780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.003036][ T5780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.081022][ T6947] binder: binder_mmap: 6944 200000000000-200000200000 bad vm_flags failed -1 [ 71.096783][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.114748][ T29] usb 7-1: device descriptor read/64, error -71 [ 71.172887][ T6954] binder: 6953:6954 ioctl 4b44 200000000080 returned -22 [ 71.354406][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.461003][ T6970] Invalid ELF header type: 0 != 1 [ 71.465317][ T6970] Invalid ELF header type: 3 != 1 [ 71.495059][ T29] usb 7-1: device descriptor read/64, error -71 [ 71.604717][ T29] usb usb7-port1: attempt power cycle [ 71.622163][ T6985] loop5: detected capacity change from 0 to 7 [ 71.641896][ T6985] Dev loop5: unable to read RDB block 7 [ 71.645333][ T6985] loop5: unable to read partition table [ 71.647282][ T6985] loop5: partition table beyond EOD, truncated [ 71.649787][ T6985] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 71.836630][ T7001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.955476][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 71.984974][ T29] usb 7-1: device descriptor read/8, error -71 [ 72.079241][ T7024] veth1_macvtap: left promiscuous mode [ 72.083797][ T7024] macsec0: entered promiscuous mode [ 72.085614][ T7024] macsec0: entered allmulticast mode [ 72.101306][ T7024] veth1_macvtap: entered promiscuous mode [ 72.103169][ T7024] veth1_macvtap: entered allmulticast mode [ 72.106255][ T7024] macsec0: left promiscuous mode [ 72.107933][ T7024] macsec0: left allmulticast mode [ 72.109530][ T7024] veth1_macvtap: left allmulticast mode [ 72.134901][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.155669][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.186994][ T7033] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.245074][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 72.266468][ T29] usb 7-1: device descriptor read/8, error -71 [ 72.297973][ T7039] binder: 7038:7039 ioctl c018620c 2000000001c0 returned -22 [ 72.331219][ T7040] tmpfs: Bad value for 'mpol' [ 72.369819][ T7044] netlink: 'syz.3.330': attribute type 4 has an invalid length. [ 72.374732][ T29] usb usb7-port1: unable to enumerate USB device [ 72.379308][ T7044] netlink: 'syz.3.330': attribute type 4 has an invalid length. [ 72.535976][ T7049] program syz.3.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.547461][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 72.547475][ T42] audit: type=1800 audit(1784979238.096:540): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.332" name="file0" dev="overlay" ino=439 res=0 errno=0 [ 73.004794][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.008388][ T5093] Bluetooth: hci1: command 0x040f tx timeout [ 73.014404][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.600681][ T42] audit: type=1400 audit(1784979239.146:541): avc: denied { ioctl } for pid=7056 comm="syz.3.335" path="socket:[14912]" dev="sockfs" ino=14912 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.780214][ T7066] netlink: 'syz.2.338': attribute type 3 has an invalid length. [ 73.782534][ T42] audit: type=1400 audit(1784979239.326:542): avc: denied { read write } for pid=7067 comm="syz.1.339" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.782578][ T42] audit: type=1400 audit(1784979239.326:543): avc: denied { open } for pid=7067 comm="syz.1.339" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.807768][ T42] audit: type=1400 audit(1784979239.356:544): avc: denied { getopt } for pid=7067 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.808173][ T7069] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 73.821383][ T7069] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 73.823799][ T7069] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 73.832085][ T7074] Unknown options in mask b7f2 [ 73.833875][ T7069] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 73.869387][ T7076] tipc: Can't bind to reserved service type 0 [ 73.870247][ T42] audit: type=1400 audit(1784979239.416:545): avc: denied { bind } for pid=7075 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.879358][ T42] audit: type=1400 audit(1784979239.426:546): avc: denied { lock } for pid=7075 comm="syz.2.341" path="socket:[15736]" dev="sockfs" ino=15736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.977886][ T7088] team0: No ports can be present during mode change [ 74.002354][ T7089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7089 comm=syz.2.344 [ 74.009127][ T42] audit: type=1400 audit(1784979239.556:547): avc: denied { map } for pid=7085 comm="syz.1.345" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.204753][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.494845][ T7101] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 74.977774][ T7105] __nla_validate_parse: 7 callbacks suppressed [ 74.977791][ T7105] netlink: 88 bytes leftover after parsing attributes in process `syz.3.352'. [ 75.001495][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 75.006480][ T42] audit: type=1400 audit(1784979240.556:548): avc: denied { audit_write } for pid=7104 comm="syz.3.352" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.052049][ T42] audit: type=1400 audit(1784979240.596:549): avc: denied { listen } for pid=7107 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.078529][ T7109] syzkaller1: entered promiscuous mode [ 75.081944][ T7109] syzkaller1: entered allmulticast mode [ 75.085000][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.087630][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.204134][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 75.246866][ T7133] binder: 7132:7133 ioctl c0306201 200000000680 returned -14 [ 75.381703][ T7129] team0: Device xfrm0 is of different type [ 76.559637][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 77.254469][ T7170] Bluetooth: MGMT ver 1.23 [ 77.266273][ T7170] binder: BINDER_SET_CONTEXT_MGR already set [ 77.268785][ T7170] binder: 7169:7170 ioctl 4018620d 200000000240 returned -16 [ 77.275902][ T7170] binder: BINDER_SET_CONTEXT_MGR already set [ 77.281860][ T7170] binder: 7169:7170 ioctl 4018620d 200000000040 returned -16 [ 77.379829][ T7175] lo speed is unknown, defaulting to 1000 [ 77.386666][ T7175] lo speed is unknown, defaulting to 1000 [ 77.392199][ T7175] lo speed is unknown, defaulting to 1000 [ 77.397350][ T7175] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 77.408763][ T7175] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 77.424412][ T7175] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 77.429609][ T7175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.450187][ T7175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.472707][ T7177] fuse: Bad value for 'group_id' [ 77.474316][ T7177] fuse: Bad value for 'group_id' [ 77.484059][ T7175] lo speed is unknown, defaulting to 1000 [ 77.487803][ T7175] lo speed is unknown, defaulting to 1000 [ 77.490876][ T7175] lo speed is unknown, defaulting to 1000 [ 77.493345][ T7175] lo speed is unknown, defaulting to 1000 [ 78.129484][ T7122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.136144][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 78.136159][ T42] audit: type=1400 audit(1784979243.676:556): avc: denied { write } for pid=7195 comm="syz.3.373" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.157894][ T7196] validate_nla: 61 callbacks suppressed [ 78.157908][ T7196] netlink: 'syz.3.373': attribute type 3 has an invalid length. [ 78.162617][ T42] audit: type=1400 audit(1784979243.706:557): avc: denied { ioctl } for pid=7195 comm="syz.3.373" path="/dev/ptp0" dev="devtmpfs" ino=730 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.174480][ T7196] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 78.179759][ T7196] netlink: 224 bytes leftover after parsing attributes in process `syz.3.373'. [ 78.183233][ T7196] NCSI netlink: No device for ifindex 0 [ 78.190562][ T7197] netlink: 'syz.3.373': attribute type 3 has an invalid length. [ 78.195195][ T7197] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 78.205339][ T7197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.373'. [ 78.214111][ T7197] NCSI netlink: No device for ifindex 0 [ 78.251382][ T42] audit: type=1400 audit(1784979243.796:558): avc: denied { watch_reads } for pid=7200 comm="syz.1.375" path="/61" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.321585][ T7214] gfs2: not a GFS2 filesystem [ 78.527148][ T7223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 78.966707][ T7236] openvswitch: netlink: IP tunnel dst address not specified [ 79.169082][ T7244] tmpfs: Unknown parameter 'grpquota)k [ 79.169082][ T7244] >$mJ"~#_' [ 79.176407][ T7244] binder: 7243:7244 ioctl c0306201 200000000080 returned -22 [ 79.484563][ T7251] tmpfs: Unknown parameter 'grpquota' [ 79.597605][ T7160] syz.0.365 (7160) used greatest stack depth: 19208 bytes left [ 79.812096][ T7163] syz.0.365 (7163) used greatest stack depth: 18392 bytes left [ 80.070240][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 80.075053][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 80.208744][ T42] audit: type=1400 audit(1784979245.756:559): avc: denied { mount } for pid=7256 comm="syz.2.393" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.220278][ T7257] overlay: Bad value for 'verity' [ 80.242100][ T7165] syz.0.365 (7165) used greatest stack depth: 18312 bytes left [ 80.246311][ T42] audit: type=1400 audit(1784979245.796:560): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.248057][ T7164] syz.0.365 (7164) used greatest stack depth: 17944 bytes left [ 80.278472][ T7259] loop4: detected capacity change from 0 to 7 [ 80.293925][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 80.301626][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.305445][ C0] buffer_io_error: 320 callbacks suppressed [ 80.305459][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 80.312526][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.316338][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 80.320459][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.323490][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 80.330346][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.333438][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 80.338559][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.342465][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 80.346883][ T7266] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 80.377016][ T7266] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 80.771878][ T42] audit: type=1400 audit(1784979246.316:561): avc: denied { read } for pid=7271 comm="syz.2.398" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 80.798551][ T42] audit: type=1400 audit(1784979246.346:562): avc: denied { map } for pid=7271 comm="syz.2.398" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 80.803899][ T7274] : renamed from lo (while UP) [ 80.825288][ T42] audit: type=1326 audit(1784979246.376:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.399" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f863739de99 code=0x0 [ 80.864200][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 80.884699][ T42] audit: type=1400 audit(1784979246.426:564): avc: denied { listen } for pid=7273 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.893888][ T7277] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 80.896267][ T7277] syzkaller1: group set to 0 [ 81.335446][ T34] cfg80211: failed to load regulatory.db [ 81.783613][ T42] audit: type=1400 audit(1784979247.326:565): avc: denied { accept } for pid=7282 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.977380][ T7290] loop5: detected capacity change from 0 to 7 [ 81.980184][ T7290] Dev loop5: unable to read RDB block 7 [ 81.981982][ T7290] loop5: unable to read partition table [ 81.983905][ T7290] loop5: partition table beyond EOD, truncated [ 81.986398][ T7290] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 82.172324][ T7299] kvm: apic: phys broadcast and lowest prio [ 82.342047][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 82.604128][ T7310] SELinux: failed to load policy [ 82.924895][ T5093] Bluetooth: hci4: command 0x1003 tx timeout [ 82.927471][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.951331][ T7330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=7330 comm=syz.0.416 [ 82.957467][ T7330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7330 comm=syz.0.416 [ 83.129345][ T7338] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.133300][ T7338] block device autoloading is deprecated and will be removed. [ 83.335940][ T5523] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.504424][ T5523] usb 5-1: Using ep0 maxpacket: 32 [ 83.508691][ T5523] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.512825][ T5523] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 83.516463][ T5523] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 83.519728][ T5523] usb 5-1: config 14 has no interface number 0 [ 83.521632][ T5523] usb 5-1: config 14 has no interface number 1 [ 83.523576][ T5523] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 83.526931][ T5523] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 83.530424][ T5523] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 83.533969][ T5523] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 83.537530][ T5523] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 83.541047][ T5523] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 83.544453][ T5523] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.547440][ T5523] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.551410][ T5523] usb 5-1: config 14 interface 57 has no altsetting 0 [ 83.553461][ T5523] usb 5-1: config 14 interface 228 has no altsetting 0 [ 83.558374][ T5523] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 83.561406][ T5523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.563867][ T5523] usb 5-1: Product: syz [ 83.565536][ T5523] usb 5-1: Manufacturer: syz [ 83.567162][ T5523] usb 5-1: SerialNumber: syz [ 83.999052][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 84.023877][ T7343] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.421'. [ 84.027900][ T7343] openvswitch: netlink: Message has 512 unknown bytes. [ 84.178496][ T5523] legousbtower 5-1:14.57: interrupt endpoints not found [ 84.289274][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 84.383552][ T7337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7337 comm=syz.0.418 [ 84.411725][ T5523] legousbtower 5-1:14.228: get version request failed: -71 [ 84.414912][ T5523] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 84.448080][ T5523] usb 5-1: USB disconnect, device number 5 [ 84.592626][ T7364] syzkaller0: entered promiscuous mode [ 84.594381][ T7364] syzkaller0: entered allmulticast mode [ 85.360378][ T7372] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 85.374135][ T7372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.468689][ T7372] bond3: (slave veth0_to_bond): making interface the new active one [ 85.470412][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 85.470423][ T42] audit: type=1400 audit(1784979251.016:579): avc: denied { read } for pid=7380 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.482261][ T7372] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.488038][ T42] audit: type=1400 audit(1784979251.016:580): avc: denied { read open } for pid=7380 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.497726][ T42] audit: type=1400 audit(1784979251.016:581): avc: denied { getattr } for pid=7380 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.513918][ T42] audit: type=1400 audit(1784979251.026:582): avc: denied { write } for pid=7378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.523444][ T42] audit: type=1400 audit(1784979251.026:583): avc: denied { add_name } for pid=7378 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.532283][ T7372] bond3: entered promiscuous mode [ 85.534825][ T7372] veth0_to_bond: entered promiscuous mode [ 85.537438][ T7372] bond3: entered allmulticast mode [ 85.539615][ T42] audit: type=1400 audit(1784979251.026:584): avc: denied { create } for pid=7378 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.548159][ T7372] veth0_to_bond: entered allmulticast mode [ 85.556934][ T42] audit: type=1400 audit(1784979251.026:585): avc: denied { write } for pid=7378 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.570730][ T42] audit: type=1400 audit(1784979251.026:586): avc: denied { append } for pid=7378 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.579642][ T42] audit: type=1400 audit(1784979251.096:587): avc: denied { write } for pid=7382 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.588378][ T42] audit: type=1400 audit(1784979251.096:588): avc: denied { remove_name } for pid=7382 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.681523][ T7405] program syz.2.435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.687000][ T7405] ata1.00: non-matching transfer count (-1459617792/0) [ 85.722593][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 85.726509][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 85.730279][ T7405] netlink: 'syz.2.435': attribute type 7 has an invalid length. [ 85.818721][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 85.822195][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 85.831375][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.835566][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.838302][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.840825][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.876005][ T7424] netlink: 44 bytes leftover after parsing attributes in process `syz.0.441'. [ 85.881459][ T7424] netlink: 43 bytes leftover after parsing attributes in process `syz.0.441'. [ 85.885840][ T7424] netlink: 'syz.0.441': attribute type 6 has an invalid length. [ 85.889702][ T7424] netlink: 43 bytes leftover after parsing attributes in process `syz.0.441'. [ 86.544707][ T5523] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.694916][ T5523] usb 5-1: Using ep0 maxpacket: 8 [ 86.697864][ T5523] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.702363][ T5523] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.705599][ T5523] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.708643][ T5523] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.712720][ T5523] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.715553][ T5523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.925333][ T5523] usb 5-1: GET_CAPABILITIES returned 0 [ 86.927192][ T5523] usbtmc 5-1:16.0: can't read capabilities [ 87.117500][ T7454] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.136916][ T7440] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.153561][ T5523] usb 5-1: USB disconnect, device number 6 [ 87.691718][ T7487] trusted_key: encrypted_key: keylen parameter is missing [ 87.758217][ T7492] ublk2: read batch cmd buffer failed [ 87.761011][ T7492] ublk2: read batch cmd buffer failed [ 87.765794][ T7494] MPI: mpi too large (16392 bits) [ 87.868308][ T7494] could not allocate digest TFM handle hmac(sha1-ce) [ 87.973747][ T7518] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 87.977006][ T7518] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.985410][ T7518] CIFS mount error: No usable UNC path provided in device string! [ 87.985410][ T7518] [ 87.988761][ T7518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 88.005637][ T7504] speed is unknown, defaulting to 1000 [ 88.421033][ T7527] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 88.425121][ T7527] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 88.431590][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 88.725603][ T7553] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 88.782472][ T7561] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 88.788286][ T7561] binder_alloc: 7560: pid 7560 spamming oneway? 1 buffers allocated for a total size of 4096 [ 88.821161][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 88.914534][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.481'. [ 88.916627][ T7578] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 88.935302][ T5880] IPVS: starting estimator thread 0... [ 89.042901][ T7604] usb usb8: usbfs: process 7604 (syz.0.488) did not claim interface 0 before use [ 89.047375][ T7586] IPVS: using max 44 ests per chain, 105600 per kthread [ 89.068271][ T7608] team0: entered promiscuous mode [ 89.070475][ T7608] team_slave_0: entered promiscuous mode [ 89.073005][ T7608] team_slave_1: entered promiscuous mode [ 89.104469][ T1047] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.121961][ T7589] 9pnet_fd: Insufficient options for proto=fd [ 89.215091][ T7631] /dev/sg0: Can't lookup blockdev [ 89.255096][ T1047] usb 6-1: Using ep0 maxpacket: 32 [ 89.263478][ T1047] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 89.268471][ T1047] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 89.276412][ T1047] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.280082][ T1047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.283514][ T1047] usb 6-1: Product: syz [ 89.286789][ T1047] usb 6-1: Manufacturer: 팯嫱〟ʇ౯鏤ު돃蝈姇⎉⹋ࡤ퐝䍝ￕ蔶覬딠Ⱗ俅ꍄ濧꫽훻⋸᯲ [ 89.291455][ T1047] usb 6-1: SerialNumber: syz [ 89.296786][ T1047] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 89.300299][ T1047] usb 6-1: no configuration chosen from 1 choice [ 89.494898][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 89.656109][ T34] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 89.659973][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.664446][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 89.667948][ T7647] fuse: Bad value for 'fd' [ 89.669604][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.673939][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.678965][ T34] usb 7-1: Product: syz [ 89.680891][ T34] usb 7-1: Manufacturer: syz [ 89.682970][ T34] usb 7-1: SerialNumber: syz [ 89.690388][ T34] usb 7-1: config 0 descriptor?? [ 89.694986][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 89.697756][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 89.705592][ T34] usb 7-1: selecting invalid altsetting 0 [ 89.714834][ T1492] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.864575][ T1492] usb 5-1: device descriptor read/64, error -71 [ 90.104424][ T1492] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.234542][ T1492] usb 5-1: device descriptor read/64, error -71 [ 90.315440][ T6777] usb 7-1: USB disconnect, device number 8 [ 90.345386][ T1492] usb usb5-port1: attempt power cycle [ 90.394708][ T5878] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 90.464457][ T6777] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 90.524534][ T5878] usb 8-1: device descriptor read/64, error -71 [ 90.619544][ T6777] usb 7-1: unable to get BOS descriptor or descriptor too short [ 90.623512][ T6777] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 90.627441][ T6777] usb 7-1: can't read configurations, error -71 [ 90.694458][ T1492] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.715083][ T1492] usb 5-1: device descriptor read/8, error -71 [ 90.774535][ T5878] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 90.904480][ T5878] usb 8-1: device descriptor read/64, error -71 [ 90.954430][ T1492] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 90.975806][ T1492] usb 5-1: device descriptor read/8, error -71 [ 91.014971][ T5878] usb usb8-port1: attempt power cycle [ 91.084781][ T1492] usb usb5-port1: unable to enumerate USB device [ 91.265740][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 91.265755][ T42] audit: type=1400 audit(1784979256.816:618): avc: denied { getopt } for pid=7668 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.315902][ T7675] "syz.2.504" (7675) uses obsolete ecb(arc4) skcipher [ 91.364459][ T5878] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 91.385487][ T5878] usb 8-1: device descriptor read/8, error -71 [ 91.634712][ T5878] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 91.655042][ T5878] usb 8-1: device descriptor read/8, error -71 [ 91.767270][ T5878] usb usb8-port1: unable to enumerate USB device [ 91.890798][ T6777] usb 6-1: USB disconnect, device number 8 [ 91.989237][ T42] audit: type=1400 audit(1784979257.536:619): avc: denied { write } for pid=7680 comm="syz.1.505" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 91.998486][ T42] audit: type=1400 audit(1784979257.536:620): avc: denied { open } for pid=7680 comm="syz.1.505" path="/73/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 92.007720][ T42] audit: type=1400 audit(1784979257.546:621): avc: denied { ioctl } for pid=7680 comm="syz.1.505" path="/73/file0/file0" dev="fuse" ino=2 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 92.027119][ T7669] ceph: No mds server is up or the cluster is laggy [ 92.028317][ T7672] ceph: No mds server is up or the cluster is laggy [ 92.153285][ T7686] __nla_validate_parse: 2 callbacks suppressed [ 92.153297][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 92.159707][ T42] audit: type=1400 audit(1784979257.706:622): avc: denied { read } for pid=7683 comm="syz.1.506" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.161705][ T7687] tmpfs: Bad value for 'huge' [ 92.168348][ T42] audit: type=1400 audit(1784979257.706:623): avc: denied { open } for pid=7683 comm="syz.1.506" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.385967][ T42] audit: type=1400 audit(1784979257.936:624): avc: denied { read } for pid=7690 comm="syz.2.508" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.392644][ T42] audit: type=1400 audit(1784979257.936:625): avc: denied { open } for pid=7690 comm="syz.2.508" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.642439][ T42] audit: type=1400 audit(1784979258.186:626): avc: denied { getopt } for pid=7710 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.651235][ T29] smz0: Port: 1 Link ACTIVE [ 92.803160][ T7719] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 92.926623][ T1047] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 93.010647][ T7750] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 93.010647][ T7750] The task syz.1.516 (7750) triggered the difference, watch for misbehavior. [ 93.074405][ T1047] usb 7-1: device descriptor read/64, error -71 [ 93.314760][ T1047] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 93.322947][ T42] audit: type=1400 audit(1784979258.866:627): avc: denied { append } for pid=7779 comm="syz.0.524" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.348530][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 93.352133][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.357513][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.360855][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.363031][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.444408][ T1047] usb 7-1: device descriptor read/64, error -71 [ 93.554656][ T1047] usb usb7-port1: attempt power cycle [ 93.894572][ T1047] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 93.903927][ T7807] uhci_hcd 0000:00:1d.0: remove, state 4 [ 93.906969][ T7807] usb usb2: USB disconnect, device number 1 [ 93.914902][ T1047] usb 7-1: device descriptor read/8, error -71 [ 93.927922][ T7809] binder: 7808:7809 ioctl c018620c 2000000001c0 returned -22 [ 93.952989][ T7807] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 93.964638][ T7810] ehci-pci 0000:00:1d.7: remove, state 1 [ 93.968777][ T7810] usb usb1: USB disconnect, device number 1 [ 93.971287][ T7810] usb 1-1: USB disconnect, device number 2 [ 94.079507][ T7810] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 94.154405][ T1047] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 94.176709][ T1047] usb 7-1: device descriptor read/8, error -71 [ 94.201054][ T7811] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.278457][ T7813] can0: slcan on ttyS3. [ 94.280092][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 94.287085][ T1047] usb usb7-port1: unable to enumerate USB device [ 94.310666][ T7812] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 94.335532][ T7812] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 94.346885][ T7812] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 94.366133][ T7812] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 94.373977][ T7812] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 94.378123][ T7812] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 94.382533][ T7812] usb usb1: Product: EHCI Host Controller [ 94.385294][ T7812] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 94.387225][ T7813] can0 (unregistered): slcan off ttyS3. [ 94.387690][ T7812] usb usb1: SerialNumber: 0000:00:1d.7 [ 94.416851][ T7812] hub 1-0:1.0: USB hub found [ 94.421275][ T7812] hub 1-0:1.0: 6 ports detected [ 94.488152][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 94.490090][ T7812] hub 3-0:1.0: USB hub found [ 94.494234][ T7812] hub 3-0:1.0: 2 ports detected [ 94.501302][ T7836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.522467][ T7836] veth3: entered promiscuous mode [ 94.533177][ T7836] bond1: (slave veth3): Enslaving as an active interface with an up link [ 94.537089][ T7812] hub 4-0:1.0: USB hub found [ 94.540744][ T7812] hub 4-0:1.0: 2 ports detected [ 94.715240][ T29] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 94.784616][ T1492] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 94.888097][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 94.892182][ T7867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.898982][ T29] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 94.901606][ T29] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 94.903997][ T29] usb 1-1: Product: QEMU USB Tablet [ 94.905883][ T29] usb 1-1: Manufacturer: QEMU [ 94.907391][ T29] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 94.930591][ T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input79 [ 94.940673][ T7869] geneve1: entered allmulticast mode [ 94.945084][ T1492] usb 8-1: Using ep0 maxpacket: 32 [ 94.948402][ T1492] usb 8-1: config index 0 descriptor too short (expected 15270, got 18) [ 94.952638][ T1492] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 94.955553][ T1492] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.958445][ T1492] usb 8-1: Product: syz [ 94.960311][ T1492] usb 8-1: Manufacturer: syz [ 94.961956][ T1492] usb 8-1: SerialNumber: syz [ 94.968164][ T1492] usb 8-1: config 0 descriptor?? [ 94.974157][ T1492] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 94.978173][ T1492] dvb-usb: bulk message failed: -22 (4/0) [ 94.981170][ T1492] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 94.984705][ T1492] dvb-usb: bulk message failed: -22 (5/0) [ 94.986394][ T1492] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.004156][ T1492] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.008734][ T1492] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 95.011600][ T1492] usb 8-1: media controller created [ 95.020897][ T1492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.023707][ T29] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 95.041121][ T1492] usb 8-1: selecting invalid altsetting 3 [ 95.043030][ T1492] ttusb2: set interface to alts=3 failed [ 95.067223][ T1492] DVB: Unable to find symbol tda10086_attach() [ 95.070113][ T1492] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 95.077955][ T1492] dvb-usb: bulk message failed: -22 (4/0) [ 95.082264][ T1492] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.093458][ T1492] dvb-usb: bulk message failed: -22 (5/0) [ 95.098337][ T1492] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.102693][ T1492] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 95.232203][ T7882] overlayfs: overlapping lowerdir path [ 95.430395][ T7891] dvb-usb: bulk message failed: -22 (7/0) [ 95.433970][ T7891] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 95.439983][ T7891] ttusb2: i2c transfer failed. [ 95.527857][ T34] usb 8-1: USB disconnect, device number 14 [ 95.549261][ T34] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 96.109458][ T7905] netlink: 'syz.3.557': attribute type 12 has an invalid length. [ 96.112040][ T7905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.557'. [ 96.114439][ T5843] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 96.115960][ T7904] netlink: 'syz.3.557': attribute type 12 has an invalid length. [ 96.119452][ T7904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.557'. [ 96.244417][ T5843] usb 7-1: device descriptor read/64, error -71 [ 96.296565][ T7888] Set syz1 is full, maxelem 65536 reached [ 96.342616][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 96.346675][ T42] kauditd_printk_skb: 309 callbacks suppressed [ 96.346686][ T42] audit: type=1400 audit(1784979261.896:937): avc: denied { accept } for pid=7909 comm="syz.1.559" path="socket:[21280]" dev="sockfs" ino=21280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.369970][ T7910] lo speed is unknown, defaulting to 1000 [ 96.371784][ T7910] lo speed is unknown, defaulting to 1000 [ 96.373822][ T7910] lo speed is unknown, defaulting to 1000 [ 96.376672][ T7910] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 96.381370][ T7910] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 96.386655][ T7910] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 96.393547][ T7910] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.406428][ T7910] lo speed is unknown, defaulting to 1000 [ 96.409002][ T7910] lo speed is unknown, defaulting to 1000 [ 96.411450][ T7910] lo speed is unknown, defaulting to 1000 [ 96.413911][ T7910] lo speed is unknown, defaulting to 1000 [ 96.423969][ T7910] smc: removing ib device smz0 [ 96.446047][ T7910] smbdirect: ib_dev[smz0] removed [ 96.494425][ T5843] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 96.624529][ T5843] usb 7-1: device descriptor read/64, error -71 [ 96.744655][ T5843] usb usb7-port1: attempt power cycle [ 97.000976][ T7921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.563'. [ 97.004891][ T7921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7921 comm=syz.1.563 [ 97.010845][ T7921] ehci-pci 0000:00:1d.7: remove, state 1 [ 97.012643][ T7921] usb usb1: USB disconnect, device number 1 [ 97.015461][ T7921] usb 1-1: USB disconnect, device number 2 [ 97.084815][ T7921] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 97.104503][ T5843] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 97.143536][ T5843] usb 7-1: device descriptor read/8, error -71 [ 97.256529][ T7927] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 97.262421][ T7927] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 97.269515][ T7927] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 97.277251][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 97.279986][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.292093][ T7935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.382118][ T42] audit: type=1326 audit(1784979262.926:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.392365][ T42] audit: type=1326 audit(1784979262.926:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.396761][ T5843] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 97.401675][ T42] audit: type=1326 audit(1784979262.926:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.414097][ T42] audit: type=1326 audit(1784979262.926:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.424505][ T7927] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 97.424551][ T42] audit: type=1326 audit(1784979262.926:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.427327][ T5843] usb 7-1: device descriptor read/8, error -71 [ 97.436005][ T42] audit: type=1326 audit(1784979262.926:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.439005][ T7927] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 97.444584][ T42] audit: type=1326 audit(1784979262.926:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.446945][ T7927] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 97.446968][ T7927] usb usb1: Product: EHCI Host Controller [ 97.446985][ T7927] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 97.454933][ T42] audit: type=1326 audit(1784979262.926:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.457883][ T7927] usb usb1: SerialNumber: 0000:00:1d.7 [ 97.459621][ T42] audit: type=1326 audit(1784979262.926:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x50000 [ 97.482900][ T7927] hub 1-0:1.0: USB hub found [ 97.486453][ T7927] hub 1-0:1.0: 6 ports detected [ 97.544563][ T5843] usb usb7-port1: unable to enumerate USB device [ 97.548185][ T7927] hub 3-0:1.0: USB hub found [ 97.553362][ T7927] hub 3-0:1.0: 2 ports detected [ 97.595561][ T7927] hub 4-0:1.0: USB hub found [ 97.597677][ T7927] hub 4-0:1.0: 2 ports detected [ 97.794745][ T5878] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 98.009511][ T5878] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 98.012328][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 98.015647][ T5878] usb 1-1: Product: QEMU USB Tablet [ 98.017277][ T5878] usb 1-1: Manufacturer: QEMU [ 98.018823][ T5878] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 98.047140][ T5878] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input80 [ 98.111810][ T5878] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 98.234369][ T1047] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 98.374421][ T34] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 98.409060][ T1047] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 98.414333][ T1047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 98.417630][ T1047] usb 6-1: Product: syz [ 98.418875][ T1047] usb 6-1: Manufacturer: syz [ 98.422482][ T1047] usb 6-1: SerialNumber: syz [ 98.426083][ T1047] usb 6-1: config 0 descriptor?? [ 98.433056][ T1047] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 98.435639][ T1047] dvb-usb: bulk message failed: -22 (2/0) [ 98.442230][ T1047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.445546][ T1047] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 98.447957][ T1047] usb 6-1: media controller created [ 98.454498][ T1047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.505280][ T34] usb 5-1: device descriptor read/64, error -71 [ 98.635258][ T7947] cxusb: i2c wr: len=80 is too big! [ 98.635258][ T7947] [ 98.727177][ T7953] smc: net device vlan1 applied user defined pnetid SYZ2 [ 98.765368][ T34] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 98.904431][ T34] usb 5-1: device descriptor read/64, error -71 [ 98.996590][ T7970] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 99.014771][ T34] usb usb5-port1: attempt power cycle [ 99.185170][ T7977] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 99.216667][ T7977] speed is unknown, defaulting to 1000 [ 99.220119][ T7977] lo speed is unknown, defaulting to 1000 [ 99.374353][ T34] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 99.405039][ T34] usb 5-1: device descriptor read/8, error -71 [ 99.644365][ T34] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 99.676663][ T34] usb 5-1: device descriptor read/8, error -71 [ 99.794501][ T34] usb usb5-port1: unable to enumerate USB device [ 100.174412][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 100.334428][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 100.338124][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 100.341737][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.353409][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 100.359038][ T9] pvrusb2: ********** [ 100.360380][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 100.367294][ T9] pvrusb2: Important functionality might not be entirely working. [ 100.369759][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 100.373814][ T9] pvrusb2: ********** [ 100.551894][ T2518] pvrusb2: Invalid write control endpoint [ 100.583160][ T2518] pvrusb2: Invalid write control endpoint [ 100.585000][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 100.587979][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 100.591054][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 100.595116][ T2518] pvrusb2: Device being rendered inoperable [ 100.604818][ T2518] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 100.608680][ T2518] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 100.613091][ T2518] pvrusb2: Attached sub-driver cx25840 [ 100.614883][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 100.618014][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 100.644622][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 100.752175][ T7990] dvb-usb: bulk message failed: -22 (3/0) [ 100.756201][ T7990] program syz.2.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.760341][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.764666][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 100.805383][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 100.809175][ T29] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.811928][ T29] usb 8-1: config 179 has no interface number 0 [ 100.813815][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 100.817662][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 100.821048][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.824349][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 100.827796][ T29] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.831658][ T29] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.834553][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.838889][ T7993] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 101.077602][ T1047] cxusb: set interface failed [ 101.079222][ T1047] dvb-usb: bulk message failed: -22 (1/0) [ 101.094037][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input81 [ 101.132401][ T7997] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.137888][ T1047] DVB: Unable to find symbol mt352_attach() [ 101.175423][ T1047] dvb-usb: bulk message failed: -22 (5/0) [ 101.179014][ T1047] zl10353_read_register: readreg error (reg=127, ret==-121) [ 101.181681][ T1047] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 101.226089][ T1047] rc_core: IR keymap rc-dvico-mce not found [ 101.227979][ T1047] Registered IR keymap rc-empty [ 101.238853][ T1047] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 101.248732][ T1047] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input82 [ 101.262676][ T1047] dvb-usb: schedule remote query interval to 100 msecs. [ 101.267160][ T1047] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 101.273980][ T1047] usb 6-1: USB disconnect, device number 9 [ 101.276997][ T1492] usb 8-1: USB disconnect, device number 15 [ 101.277013][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 101.283499][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.305600][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 101.354769][ T42] kauditd_printk_skb: 38166 callbacks suppressed [ 101.354780][ T42] audit: type=1326 audit(1784979266.906:39113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.363666][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.369762][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.374466][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.379091][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.382675][ T42] audit: type=1326 audit(1784979266.906:39114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.394899][ T42] audit: type=1326 audit(1784979266.916:39115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.401805][ T42] audit: type=1326 audit(1784979266.916:39116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.409132][ T42] audit: type=1326 audit(1784979266.916:39117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.415981][ T42] audit: type=1326 audit(1784979266.916:39118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.422828][ T42] audit: type=1326 audit(1784979266.916:39119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.430217][ T42] audit: type=1326 audit(1784979266.916:39120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.437141][ T42] audit: type=1326 audit(1784979266.916:39121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.443816][ T42] audit: type=1326 audit(1784979266.916:39122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5f9de99 code=0x50000 [ 101.704380][ T1492] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 101.866216][ T1492] usb 8-1: Using ep0 maxpacket: 8 [ 101.869663][ T1492] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 101.872673][ T1492] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.876810][ T1492] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.880193][ T1492] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.883619][ T1492] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.890852][ T1492] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.894068][ T1492] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.082346][ T8010] syzkaller0: entered promiscuous mode [ 102.084117][ T8010] syzkaller0: entered allmulticast mode [ 102.256933][ T8021] loop5: detected capacity change from 0 to 7 [ 102.264331][ T8021] loop5: p3 p4 [ 102.265741][ T8021] loop5: partition table partially beyond EOD, truncated [ 102.304220][ T8021] block device autoloading is deprecated and will be removed. [ 102.395995][ T8023] ip6_vti0: left promiscuous mode [ 102.654916][ T8026] syzkaller1: entered promiscuous mode [ 102.656700][ T8026] syzkaller1: entered allmulticast mode [ 102.666972][ T5780] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.670150][ T5780] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.677742][ T5780] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.682375][ T1492] usb 8-1: USB disconnect, device number 16 [ 102.732815][ T5780] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.894169][ T8049] netlink: 'syz.1.600': attribute type 10 has an invalid length. [ 102.898809][ T1047] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 102.906151][ T60] usb 7-1: USB disconnect, device number 19 [ 102.926297][ T8049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.931263][ T8049] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 102.999533][ T8060] fuse: Bad value for 'group_id' [ 103.001197][ T8060] fuse: Bad value for 'group_id' [ 103.083033][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 103.114406][ T1492] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 103.295308][ T1492] usb 8-1: Using ep0 maxpacket: 16 [ 103.298272][ T1492] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.301520][ T1492] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.306982][ T1492] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.309858][ T1492] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.314884][ T1492] usb 8-1: Manufacturer: syz [ 103.322592][ T1492] usb 8-1: config 0 descriptor?? [ 103.584477][ T5843] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 103.754373][ T5843] usb 7-1: Using ep0 maxpacket: 32 [ 103.757603][ T5843] usb 7-1: unable to get BOS descriptor or descriptor too short [ 103.760776][ T5843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 103.766298][ T5843] usb 7-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 103.769163][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.771691][ T5843] usb 7-1: Product: syz [ 103.772986][ T5843] usb 7-1: Manufacturer: syz [ 103.774801][ T5843] usb 7-1: SerialNumber: syz [ 103.835319][ T8105] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.044656][ T1492] usb 8-1: USB disconnect, device number 17 [ 104.065106][ T5843] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.085683][ T8113] loop5: detected capacity change from 0 to 7 [ 104.090033][ T8113] Dev loop5: unable to read RDB block 7 [ 104.091782][ T8113] loop5: AHDI p2 [ 104.094066][ T8113] loop5: partition table partially beyond EOD, truncated [ 104.129052][ T5843] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 104.132854][ T5843] usb 7-1: USB disconnect, device number 20 [ 104.170406][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.187628][ T8129] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.226174][ T8137] mmap: syz.1.627 (8137) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.255599][ T8143] trusted_key: encrypted_key: master key parameter is missing [ 104.261213][ T8145] overlay: filesystem on ./file0 not supported as upperdir [ 104.262491][ T8144] ufs: You didn't specify the type of your ufs filesystem [ 104.262491][ T8144] [ 104.262491][ T8144] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 104.262491][ T8144] [ 104.262491][ T8144] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 104.280745][ T8144] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 104.360645][ T8156] netlink: 'syz.1.633': attribute type 29 has an invalid length. [ 104.363542][ T8156] netlink: 'syz.1.633': attribute type 29 has an invalid length. [ 104.368090][ T8156] netlink: 'syz.1.633': attribute type 29 has an invalid length. [ 104.371711][ T8156] program syz.1.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.372380][ T8157] program syz.1.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.375393][ T8156] ata1.00: non-matching transfer count (-1459617792/0) [ 104.380931][ T8157] ata1.00: non-matching transfer count (-1459617792/0) [ 104.585918][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 104.588519][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'. [ 104.592109][ T8172] netlink: 92 bytes leftover after parsing attributes in process `syz.2.639'. [ 104.597681][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'. [ 104.600565][ T8174] netlink: 92 bytes leftover after parsing attributes in process `syz.2.639'. [ 104.733167][ T8191] trusted_key: encrypted_key: insufficient parameters specified [ 104.891012][ T8200] syzkaller0: entered promiscuous mode [ 104.893305][ T8200] syzkaller0: entered allmulticast mode [ 104.910862][ T8200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 105.021082][ T8212] netlink: 'syz.3.651': attribute type 39 has an invalid length. [ 105.049923][ T8212] hsr_slave_0 (unregistering): left promiscuous mode [ 105.219014][ T8224] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 105.364762][ T8234] usb usb8: usbfs: process 8234 (syz.1.658) did not claim interface 0 before use [ 105.375193][ T1047] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 105.384805][ T8234] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.544446][ T1047] usb 7-1: Using ep0 maxpacket: 32 [ 105.547703][ T1047] usb 7-1: config 2 has an invalid interface number: 194 but max is 0 [ 105.550342][ T1047] usb 7-1: config 2 has no interface number 0 [ 105.552356][ T1047] usb 7-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 105.555844][ T1047] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 105.559335][ T1047] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 105.562411][ T1047] usb 7-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 105.565639][ T1047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.570015][ T8223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.572493][ T8223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.779844][ T1047] usb 7-1: string descriptor 0 read error: -71 [ 105.786193][ T1047] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.829608][ T1047] usb 7-1: USB disconnect, device number 21 [ 106.025920][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.665'. [ 106.032406][ T8255] openvswitch: netlink: IP tunnel dst address not specified [ 106.317108][ T8274] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 106.322123][ T8274] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 106.327730][ T8274] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.338425][ T8274] overlayfs: failed to look up (cgroup.events) for ino (-13) [ 106.382467][ T42] kauditd_printk_skb: 17126 callbacks suppressed [ 106.382482][ T42] audit: type=1400 audit(1784979271.926:56249): avc: denied { bind } for pid=8278 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.383077][ T8279] fuse: Bad value for 'fd' [ 106.571011][ T8293] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 106.776407][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 106.779432][ T8304] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 106.854538][ T50] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.857748][ T8306] kvm: user requested TSC rate below hardware speed [ 106.862627][ T8306] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 106.994483][ T50] usb 6-1: device descriptor read/64, error -71 [ 107.234371][ T50] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 107.364459][ T50] usb 6-1: device descriptor read/64, error -71 [ 107.474803][ T50] usb usb6-port1: attempt power cycle [ 107.519400][ T42] audit: type=1400 audit(1784979273.066:56250): avc: denied { create } for pid=8312 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.525600][ T42] audit: type=1400 audit(1784979273.066:56251): avc: denied { setopt } for pid=8312 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.633513][ T42] audit: type=1400 audit(1784979273.176:56252): avc: denied { kexec_image_load } for pid=8315 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 107.698756][ T42] audit: type=1400 audit(1784979273.246:56253): avc: denied { listen } for pid=8318 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.720683][ T8319] --map-set only usable from mangle table [ 107.737117][ T42] audit: type=1400 audit(1784979273.286:56254): avc: denied { accept } for pid=8318 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.790029][ T8321] gfs2: gfs2 mount does not exist [ 107.814387][ T50] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 107.836723][ T50] usb 6-1: device descriptor read/8, error -71 [ 108.024494][ T42] audit: type=1400 audit(1784979273.566:56255): avc: denied { block_suspend } for pid=8327 comm="syz.3.689" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.076140][ T50] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 108.095194][ T50] usb 6-1: device descriptor read/8, error -71 [ 108.205478][ T50] usb usb6-port1: unable to enumerate USB device [ 108.330931][ T42] audit: type=1326 audit(1784979273.876:56256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.3.691" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f863739de99 code=0x0 [ 108.442256][ T8344] openvswitch: netlink: Duplicate or invalid key (type 0). [ 108.444947][ T8344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.660606][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 108.710607][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 108.721692][ T8356] bond0: entered promiscuous mode [ 108.723807][ T8356] bond_slave_0: entered promiscuous mode [ 108.726861][ T8356] bond_slave_1: entered promiscuous mode [ 108.735142][ T8356] gretap0: entered promiscuous mode [ 108.738849][ T8356] hsr1: entered promiscuous mode [ 108.834746][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 108.988610][ T8360] kvm: kvm [8359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000000 [ 109.002543][ T8360] kvm: kvm [8359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000000080 [ 109.065335][ T8361] netlink: 666 bytes leftover after parsing attributes in process `syz.2.697'. [ 109.196275][ T42] audit: type=1400 audit(1784979274.746:56257): avc: denied { map } for pid=8365 comm="syz.3.699" path="socket:[25161]" dev="sockfs" ino=25161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.204527][ T42] audit: type=1400 audit(1784979274.746:56258): avc: denied { read } for pid=8365 comm="syz.3.699" path="socket:[25161]" dev="sockfs" ino=25161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.780050][ T8394] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 110.024404][ T1047] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 110.107750][ T8405] kvm: kvm [8404]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 110.181503][ T8412] speed is unknown, defaulting to 1000 [ 110.184390][ T1047] usb 6-1: Using ep0 maxpacket: 32 [ 110.185716][ T8412] lo speed is unknown, defaulting to 1000 [ 110.189370][ T1047] usb 6-1: unable to get BOS descriptor or descriptor too short [ 110.201045][ T1047] usb 6-1: string descriptor 0 read error: -22 [ 110.203786][ T1047] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 110.209140][ T1047] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 110.232013][ T1047] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 110.240728][ T1047] dw2102: su3000_power_ctrl: 1, initialized 0 [ 110.243295][ T1047] dvb-usb: bulk message failed: -22 (2/0) [ 110.251655][ T1047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.256118][ T1047] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 110.259557][ T1047] usb 6-1: media controller created [ 110.261801][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 110.264180][ T1047] dw2102: i2c transfer failed. [ 110.268979][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 110.271490][ T1047] dw2102: i2c transfer failed. [ 110.273532][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 110.276948][ T1047] dw2102: i2c transfer failed. [ 110.278996][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 110.280897][ T1047] dw2102: i2c transfer failed. [ 110.282432][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 110.284230][ T1047] dw2102: i2c transfer failed. [ 110.286382][ T1047] dvb-usb: bulk message failed: -22 (6/0) [ 110.288191][ T1047] dw2102: i2c transfer failed. [ 110.289736][ T1047] dvb-usb: MAC address: 02:02:02:02:02:02 [ 110.296882][ T1047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.311650][ T1047] dvb-usb: bulk message failed: -22 (3/0) [ 110.313448][ T1047] dw2102: command 0x0e transfer failed. [ 110.317324][ T1047] dvb-usb: bulk message failed: -22 (3/0) [ 110.319098][ T1047] dw2102: command 0x0e transfer failed. [ 110.624687][ T1047] dvb-usb: bulk message failed: -22 (3/0) [ 110.627177][ T1047] dw2102: command 0x0e transfer failed. [ 110.633998][ T1047] dvb-usb: bulk message failed: -22 (3/0) [ 110.636534][ T1047] dw2102: command 0x0e transfer failed. [ 110.640895][ T1047] dvb-usb: bulk message failed: -22 (1/0) [ 110.645670][ T1047] dw2102: command 0x51 transfer failed. [ 110.670870][ T8439] binder: Unknown parameter 'Lats' [ 110.690825][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 110.701956][ T1047] DVB: Unable to find symbol ds3000_attach() [ 110.704434][ T1047] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 110.752944][ T8444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.787356][ T1047] rc_core: IR keymap rc-su3000 not found [ 110.789129][ T1047] Registered IR keymap rc-empty [ 110.793716][ T1047] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 110.809211][ T1047] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input83 [ 110.816575][ T1047] dvb-usb: schedule remote query interval to 150 msecs. [ 110.819479][ T1047] dw2102: su3000_power_ctrl: 0, initialized 1 [ 110.819729][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 110.821349][ T1047] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 110.829441][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 110.840195][ T1047] usb 6-1: USB disconnect, device number 14 [ 110.840650][ T8406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.850153][ T8444] bond4: (slave hsr0): The slave device specified does not support setting the MAC address [ 110.855324][ T8444] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 110.859430][ T8444] bond4: (slave hsr0): Error -22 calling dev_set_mtu [ 110.890025][ T1047] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 110.904390][ T8460] binder: Unknown parameter 'euid>00000000000000000000' [ 110.977445][ T8464] speed is unknown, defaulting to 1000 [ 110.981891][ T8464] lo speed is unknown, defaulting to 1000 [ 111.229439][ T8472] tmpfs: Unknown parameter 'nonwap' [ 111.261810][ T8474] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 111.834932][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 111.834947][ T42] audit: type=1400 audit(1784979277.376:56271): avc: denied { execute_no_trans } for pid=8483 comm="syz.1.730" path="/132/file1" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.937149][ T8494] loop6: detected capacity change from 0 to 7 [ 111.945430][ T8494] Dev loop6: unable to read RDB block 7 [ 111.947672][ T8494] loop6: unable to read partition table [ 111.949935][ T8494] loop6: partition table beyond EOD, truncated [ 111.952192][ T8494] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 111.994197][ C3] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 112.066163][ T8501] sctp: [Deprecated]: syz.2.735 (pid 8501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.066163][ T8501] Use struct sctp_sack_info instead [ 112.107875][ T8503] overlayfs: failed to resolve './file2': -2 [ 112.129493][ T42] audit: type=1400 audit(1784979277.676:56272): avc: denied { getopt } for pid=8499 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.150838][ T42] audit: type=1400 audit(1784979277.696:56273): avc: denied { write } for pid=8505 comm="syz.1.737" name="functions" dev="configfs" ino=11321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.159815][ T42] audit: type=1400 audit(1784979277.706:56274): avc: denied { write } for pid=8505 comm="syz.1.737" name="ep.0" dev="configfs" ino=25279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.160550][ T8506] f_midi2: Invalid MIDI1 group definitions for block 0:1 [ 112.168374][ T42] audit: type=1400 audit(1784979277.706:56275): avc: denied { write } for pid=8505 comm="syz.1.737" name="c.1" dev="configfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.168438][ T42] audit: type=1400 audit(1784979277.706:56276): avc: denied { write } for pid=8505 comm="syz.1.737" name="c.1" dev="configfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.201406][ T8506] input: syz0 as /devices/virtual/input/input85 [ 112.440444][ T8524] speed is unknown, defaulting to 1000 [ 112.443263][ T8524] lo speed is unknown, defaulting to 1000 [ 112.508922][ T8538] input: syz0 as /devices/virtual/input/input86 [ 112.611216][ T42] audit: type=1400 audit(1784979278.156:56277): avc: denied { write } for pid=8551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.668703][ T42] audit: type=1400 audit(1784979278.216:56278): avc: denied { write } for pid=8559 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.768541][ T42] audit: type=1400 audit(1784979278.316:56279): avc: denied { write } for pid=8570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.816123][ T42] audit: type=1400 audit(1784979278.366:56280): avc: denied { write } for pid=8577 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.824836][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 112.928510][ T8588] netlink: 56 bytes leftover after parsing attributes in process `syz.2.754'. [ 112.974383][ T9] usb 6-1: device descriptor read/64, error -71 [ 113.117984][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.120989][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.124167][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.134916][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.141420][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.143981][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.148217][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.156251][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.168608][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.175087][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.180048][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.183184][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.187292][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.191792][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.201557][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.205607][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.208460][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.211988][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.216479][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.219592][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.222304][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.224388][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 113.230295][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.232857][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.237456][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.240647][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.243803][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.251697][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.257943][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.261017][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.264113][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.267683][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.270776][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.274021][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.277669][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.285281][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.297695][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.303584][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.309305][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.312528][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.316831][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.321798][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.328892][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.335434][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.757'. [ 113.338803][ T8616] nbd: illegal input index 67111936 [ 113.339075][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.343930][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.349999][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.352977][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 113.356892][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.360593][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.364381][ T9] usb 6-1: device descriptor read/64, error -71 [ 113.365798][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.371766][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.377515][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.382502][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.388232][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.390790][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.395036][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.402558][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.406315][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.410287][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.413763][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.417177][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.421463][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.425189][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.427971][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.430489][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.441342][ T8603] overlay: filesystem on ./bus not supported as upperdir [ 113.484978][ T9] usb usb6-port1: attempt power cycle [ 113.583005][ T8625] TCP: TCP_TX_DELAY enabled [ 113.824412][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 113.854926][ T9] usb 6-1: device descriptor read/8, error -71 [ 113.904548][ T1492] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 114.056814][ T1492] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 114.060541][ T1492] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.064953][ T1492] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.070101][ T1492] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.074125][ T1492] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.077940][ T1492] usb 5-1: Product: syz [ 114.079808][ T1492] usb 5-1: Manufacturer: syz [ 114.081930][ T1492] usb 5-1: SerialNumber: syz [ 114.086825][ T1492] usb 5-1: config 0 descriptor?? [ 114.092559][ T1492] hub 5-1:0.0: bad descriptor, ignoring hub [ 114.095413][ T1492] hub 5-1:0.0: probe with driver hub failed with error -5 [ 114.100994][ T1492] usb 5-1: selecting invalid altsetting 0 [ 114.104626][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 114.125240][ T9] usb 6-1: device descriptor read/8, error -71 [ 114.234937][ T9] usb usb6-port1: unable to enumerate USB device [ 114.296183][ T1492] usb 5-1: USB disconnect, device number 15 [ 114.398956][ T8636] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 114.404867][ T8636] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 114.417689][ T8636] pci 0000:00:1d.0: Adding to iommu group 7 [ 114.427265][ T8636] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 114.457647][ T8637] ntfs3(sr0): Primary boot signature is not NTFS. [ 114.460791][ T8637] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 114.477307][ T8636] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 45745 usecs [ 114.512041][ T8636] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 114.521334][ T8636] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 114.526288][ T8636] uhci_hcd 0000:00:1d.0: detected 2 ports [ 114.533172][ T8636] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 114.540851][ T8636] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 114.544441][ T8636] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 114.546802][ T8636] usb usb2: Product: UHCI Host Controller [ 114.548502][ T8636] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 114.550461][ T8636] usb usb2: SerialNumber: 0000:00:1d.0 [ 114.570215][ T8636] hub 2-0:1.0: USB hub found [ 114.574746][ T8636] hub 2-0:1.0: 2 ports detected [ 114.762826][ T8650] misc userio: The device must be registered before sending interrupts [ 114.766324][ T8651] misc userio: The device must be registered before sending interrupts [ 114.767070][ T5843] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 114.774739][ T5843] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 114.860651][ T8654] veth1_macvtap: Device is already in use. [ 114.914811][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 115.403553][ T8662] binder: BINDER_SET_CONTEXT_MGR already set [ 115.406404][ T8662] binder: 8661:8662 ioctl 4018620d 200000000240 returned -16 [ 115.410808][ T8663] binder_alloc: binder_alloc_mmap_handler: 8661 200000ffd000-200001000000 already mapped failed -16 [ 115.415051][ T8662] binder: BINDER_SET_CONTEXT_MGR already set [ 115.417233][ T8662] binder: 8661:8662 ioctl 4018620d 200000000040 returned -16 [ 115.417276][ T8663] binder: BINDER_SET_CONTEXT_MGR already set [ 115.421721][ T8663] binder: 8661:8663 ioctl 4018620d 200000000040 returned -16 [ 115.425170][ T8662] binder: 8661:8662 ioctl c0306201 200000000180 returned -14 [ 115.425230][ T8663] binder: 8661:8663 ioctl c0306201 200000000180 returned -14 [ 115.431753][ T8662] binder: 8661:8662 unknown command 0 [ 115.433471][ T8662] binder: 8661:8662 ioctl c0306201 2000000001c0 returned -22 [ 115.436070][ T8663] binder_alloc: binder_alloc_mmap_handler: 8661 200000ffe000-200001000000 already mapped failed -16 [ 115.440251][ T8662] binder_alloc: 8661: binder_alloc_buf, no vma [ 115.522064][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 115.527639][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 115.531155][ T8665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 115.533370][ T8665] UDF-fs: Scanning with blocksize 512 failed [ 115.536006][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 115.538822][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 115.541560][ T8665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 115.543808][ T8665] UDF-fs: Scanning with blocksize 1024 failed [ 115.546209][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 115.549078][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 115.551829][ T8665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 115.554027][ T8665] UDF-fs: Scanning with blocksize 2048 failed [ 115.556561][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 115.559304][ T8665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 115.562068][ T8665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 115.564429][ T8665] UDF-fs: Scanning with blocksize 4096 failed [ 115.566208][ T8665] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 115.574689][ T8665] fuse: Bad value for 'group_id' [ 115.576235][ T8665] fuse: Bad value for 'group_id' [ 115.604466][ T8669] netlink: 'syz.1.773': attribute type 12 has an invalid length. [ 115.605044][ T64] Bluetooth: hci2: unexpected event for opcode 0x0bc2 [ 115.721222][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 115.722724][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 115.795449][ T8709] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1802 [ 115.876048][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 116.042769][ T8735] gfs2: error -5 reading superblock [ 116.123982][ T8743] speed is unknown, defaulting to 1000 [ 116.127635][ T8743] lo speed is unknown, defaulting to 1000 [ 116.217741][ T8748] bridge0: entered promiscuous mode [ 116.220750][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.223540][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.244448][ T1492] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 116.254094][ T8748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.258329][ T8748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.266102][ T8748] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 116.287009][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.289743][ T1166] bridge0: port 1(bridge_slave_0) entered listening state [ 116.295111][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.297704][ T1166] bridge0: port 2(bridge_slave_1) entered listening state [ 116.394419][ T1492] usb 6-1: Using ep0 maxpacket: 32 [ 116.397269][ T1492] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.400524][ T1492] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.403524][ T1492] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.409165][ T1492] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 116.411911][ T1492] usb 6-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 116.414827][ T1492] usb 6-1: Product: syz [ 116.416298][ T1492] usb 6-1: Manufacturer: syz [ 116.417851][ T1492] usb 6-1: SerialNumber: syz [ 116.427953][ T1492] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input87 [ 116.587839][ T8756] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 116.693927][ T9] usb 6-1: USB disconnect, device number 19 [ 116.705925][ T9] appletouch 6-1:1.0: input: appletouch disconnected [ 116.854754][ T5843] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 116.858697][ T5843] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 117.228495][ T8762] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 117.244207][ T8762] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 117.281855][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 117.281873][ T42] audit: type=1400 audit(1784979282.826:56305): avc: denied { getopt } for pid=8761 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.684103][ T8772] block nbd1: shutting down sockets [ 118.924828][ T5843] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 118.927369][ T5843] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 118.934433][ C2] ------------[ cut here ]------------ [ 118.936840][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 118.939436][ C2] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#2: swapper/2/0 [ 118.943099][ C2] Modules linked in: [ 118.944911][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.948930][ C2] Tainted: [L]=SOFTLOCKUP [ 118.950631][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.954494][ C2] RIP: 0010:__queue_work+0xd31/0x12b0 [ 118.956575][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d d3 e4 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 118.963679][ C2] RSP: 0018:ffffc90000648be0 EFLAGS: 00010046 [ 118.965539][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100963d94e [ 118.967960][ C2] RDX: ffff888035c4c970 RSI: ffffffff8aae0450 RDI: ffffffff9125abe0 [ 118.970333][ C2] RBP: ffff88804b1eca58 R08: 0000000000000005 R09: 0000000000000000 [ 118.972843][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035c4c800 [ 118.975311][ C2] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001 [ 118.977683][ C2] FS: 0000000000000000(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 118.980478][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.982506][ C2] CR2: 00007f0df767cff8 CR3: 0000000052a2f000 CR4: 0000000000352ef0 [ 118.985003][ C2] Call Trace: [ 118.986032][ C2] [ 118.986930][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 118.988657][ C2] call_timer_fn+0x19a/0x610 [ 118.990061][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 118.991665][ C2] ? __run_timers+0x560/0xb00 [ 118.993093][ C2] ? __run_timers+0x560/0xb00 [ 118.994513][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 118.996263][ C2] __run_timers+0x570/0xb00 [ 118.997619][ C2] ? __pfx___run_timers+0x10/0x10 [ 118.999112][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 119.000673][ C2] run_timer_base+0x114/0x190 [ 119.002137][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 119.003719][ C2] run_timer_softirq+0x1a/0x50 [ 119.005244][ C2] handle_softirqs+0x1ea/0x9b0 [ 119.006728][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 119.008368][ C2] ? _raw_spin_unlock+0x28/0x50 [ 119.009977][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 119.011781][ C2] __irq_exit_rcu+0x162/0x210 [ 119.013230][ C2] irq_exit_rcu+0x9/0x30 [ 119.014523][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 119.016226][ C2] [ 119.017192][ C2] [ 119.018120][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.019969][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 119.021770][ C2] Code: 06 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 ae 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 119.028144][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000206 [ 119.030430][ C2] RAX: 00000000000e9fed RBX: ffff88801eef4a80 RCX: ffffffff8bbaf2d5 [ 119.033469][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a55a5 RDI: ffffffff8c401580 [ 119.036475][ C2] RBP: ffffed1003dde950 R08: 0000000000000001 R09: ffffed100d4c678d [ 119.039505][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 119.042502][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 119.045662][ C2] ? ct_kernel_exit+0x125/0x180 [ 119.047596][ C2] default_idle+0x9/0x10 [ 119.049276][ C2] default_idle_call+0x6c/0xb0 [ 119.051275][ C2] do_idle+0x3a7/0x5b0 [ 119.052971][ C2] ? __pfx_do_idle+0x10/0x10 [ 119.054923][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 119.057231][ C2] cpu_startup_entry+0x4f/0x60 [ 119.059138][ C2] start_secondary+0x21d/0x2d0 [ 119.060646][ C2] ? __pfx_start_secondary+0x10/0x10 [ 119.062683][ C2] common_startup_64+0x13e/0x158 [ 119.064668][ C2] [ 119.065913][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.068717][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.072652][ C2] Tainted: [L]=SOFTLOCKUP [ 119.074263][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.078085][ C2] Call Trace: [ 119.079402][ C2] [ 119.080557][ C2] dump_stack_lvl+0x100/0x190 [ 119.082391][ C2] vpanic+0x552/0x970 [ 119.083959][ C2] ? __pfx_vpanic+0x10/0x10 [ 119.085946][ C2] panic+0xd1/0xe0 [ 119.087442][ C2] ? __pfx_panic+0x10/0x10 [ 119.089176][ C2] ? check_panic_on_warn+0x1f/0x90 [ 119.091117][ C2] check_panic_on_warn.cold+0x19/0x34 [ 119.093179][ C2] ? __queue_work+0xd2d/0x12b0 [ 119.095063][ C2] __warn.cold+0x191/0x318 [ 119.096817][ C2] __report_bug+0x30f/0x440 [ 119.098591][ C2] ? __queue_work+0xd2d/0x12b0 [ 119.100557][ C2] ? __pfx___report_bug+0x10/0x10 [ 119.102570][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 119.104669][ C2] ? try_to_wake_up+0x158/0x1c90 [ 119.106581][ C2] ? look_up_lock_class+0x55/0x120 [ 119.108537][ C2] report_bug_entry+0xe1/0x290 [ 119.110412][ C2] ? __queue_work+0xd31/0x12b0 [ 119.112276][ C2] handle_bug+0x1cd/0x2a0 [ 119.113960][ C2] exc_invalid_op+0x17/0x50 [ 119.115719][ C2] asm_exc_invalid_op+0x1a/0x20 [ 119.117557][ C2] RIP: 0010:__queue_work+0xd31/0x12b0 [ 119.119653][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d d3 e4 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 119.127042][ C2] RSP: 0018:ffffc90000648be0 EFLAGS: 00010046 [ 119.129256][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100963d94e [ 119.132174][ C2] RDX: ffff888035c4c970 RSI: ffffffff8aae0450 RDI: ffffffff9125abe0 [ 119.135105][ C2] RBP: ffff88804b1eca58 R08: 0000000000000005 R09: 0000000000000000 [ 119.138067][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035c4c800 [ 119.141114][ C2] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001 [ 119.144190][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 119.146439][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 119.148460][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 119.150671][ C2] call_timer_fn+0x19a/0x610 [ 119.152425][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 119.154048][ C2] ? __run_timers+0x560/0xb00 [ 119.155479][ C2] ? __run_timers+0x560/0xb00 [ 119.156866][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 119.158577][ C2] __run_timers+0x570/0xb00 [ 119.159941][ C2] ? __pfx___run_timers+0x10/0x10 [ 119.161574][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 119.163222][ C2] run_timer_base+0x114/0x190 [ 119.164634][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 119.166180][ C2] run_timer_softirq+0x1a/0x50 [ 119.167724][ C2] handle_softirqs+0x1ea/0x9b0 [ 119.169117][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 119.170672][ C2] ? _raw_spin_unlock+0x28/0x50 [ 119.172195][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 119.173838][ C2] __irq_exit_rcu+0x162/0x210 [ 119.175266][ C2] irq_exit_rcu+0x9/0x30 [ 119.176532][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 119.178166][ C2] [ 119.179065][ C2] [ 119.179942][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.181746][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 119.183396][ C2] Code: 06 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 ae 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 119.188904][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000206 [ 119.190762][ C2] RAX: 00000000000e9fed RBX: ffff88801eef4a80 RCX: ffffffff8bbaf2d5 [ 119.193397][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a55a5 RDI: ffffffff8c401580 [ 119.195711][ C2] RBP: ffffed1003dde950 R08: 0000000000000001 R09: ffffed100d4c678d [ 119.198006][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 119.200313][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 119.202823][ C2] ? ct_kernel_exit+0x125/0x180 [ 119.204538][ C2] default_idle+0x9/0x10 [ 119.205809][ C2] default_idle_call+0x6c/0xb0 [ 119.207273][ C2] do_idle+0x3a7/0x5b0 [ 119.208579][ C2] ? __pfx_do_idle+0x10/0x10 [ 119.209992][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 119.211839][ C2] cpu_startup_entry+0x4f/0x60 [ 119.213270][ C2] start_secondary+0x21d/0x2d0 [ 119.214677][ C2] ? __pfx_start_secondary+0x10/0x10 [ 119.216273][ C2] common_startup_64+0x13e/0x158 [ 119.217804][ C2] [ 119.219410][ C2] Kernel Offset: disabled [ 119.220710][ C2] Rebooting in 86400 seconds..