last executing test programs: 4.342023749s ago: executing program 3 (id=1174): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x40000000000000, 0x40000}, 0x8000) 4.268105447s ago: executing program 3 (id=1178): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121340, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4450}, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000240)={'veth0_to_hsr\x00', {0x2, 0x0, @multicast2}}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000280)={{@local, 0xfffffc26}, @local, 0x8, 0x3, 0xdc, 0x2, 0x36ee47f1, 0x10, 0x9}) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0xff, 0x1, 0x1, 0x0, 0x7, 0x7}, &(0x7f0000000300)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000004c0)={0x0, 'syz_tun\x00', {0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={@remote, @remote, 0x20, 0x19}}) fcntl$getflags(r0, 0xb) open_by_handle_at(r0, &(0x7f0000000580)=@xfs={0x1c, 0x81, {0x0, 0xffffffff, 0x6}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000840}, 0x1) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000780)={0x5, 0xf1, 0xfffffffffffffe01}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x8280, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x320) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000840)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6gre0\x00', r5, 0x2f, 0x3, 0x2, 0x7f, 0x62, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x10, 0x20, 0x7, 0x2}}) close(r2) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000b40)={r5, 0x1, 0x6, @local}, 0x10) close(0xffffffffffffffff) 4.15063929s ago: executing program 3 (id=1181): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000080), 0xe) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd8082572a31e4939884f0abc", 0x33}, {&(0x7f0000000540)="9299", 0x2}], 0x2}, 0x24004010) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000003c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @opaque="fd801340b6987b4cdd149035a0bc"}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r6, 0x0) recvfrom$unix(r5, &(0x7f0000001680)=""/256, 0x100, 0x2, 0x0, 0x0) 3.898966583s ago: executing program 3 (id=1186): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x2080880, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x0) (async, rerun: 64) listen(r2, 0x5) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000180)=r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) (rerun: 32) 3.820137381s ago: executing program 3 (id=1189): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000758f8e0019030109021b000100000000090408f32a03000000090500000000000000", @ANYBLOB="44cace53ea8ccdc5"], 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x5f, {0x5f, 0x7, "160526e41f6db739289035ac57eac30f69f03fae51c06ff5cc2490d0c2844c4cfb6405841204cef337aca6810b1a01db780a03c023b6a398f5e81e3bcceb4f1cb99a0cad73343c5095bfacb122f1c02f0721eb86eeed9b1f465931e7ca"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x8, 0x94, "dda93bd1ff11345df267037ba48db143eb2de105f0dab025404963f7768909d405f56afd4eb84994598dc4f4ec8de203af76abffa5ad0cea1ce31aca4d0d780d4d663d6ac29b0fff9bedc0eeb7ee18062de1ae3f97dd86b89000d9d0f682befe2c91be0ddf0bd28cee10d57813f06393c5da41c0440c1113693e26eb452d7b455769d0c6ddb123fa7a91bb8e0fc3c58b3dc7b89b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xff7f, 0x6, 0xfff, 0x0, 0x4, 0xfff6, 0xf388, 0x2, 0x7ff, 0x9, 0x7, 0x40}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xfff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x180000000) 1.671829607s ago: executing program 1 (id=1231): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 1.482053668s ago: executing program 1 (id=1235): socket(0x28, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) write$rfkill(r3, &(0x7f0000000100)={0x5, 0x3, 0x5, 0xff}, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x72bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xb}]}}]}, 0x3c}}, 0x24044092) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xf21}, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x800, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000840)={0x10, 0x40, 0x900, 0x70bd2c, 0x25dfdbfc}, 0x10}], 0x2, 0x0, 0x0, 0x48101}, 0x40004) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) renameat2(r10, 0x0, r10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 1.4315041s ago: executing program 1 (id=1236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}]}}]}, 0x40}}, 0x44884) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x7ff, 0xffffffff, {{0x48, 0x4, 0x1, 0x0, 0x120, 0x68, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x2b, 0xd5, [@broadcast, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @empty, @broadcast, @broadcast, @private=0xa010101]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x9, [{@multicast2, 0x1}, {@loopback, 0xacb}, {@rand_addr=0x64010100, 0x27ce}, {@private=0xa010100, 0xfffffe00}]}, @timestamp_prespec={0x44, 0x3c, 0xcc, 0x3, 0x6, [{@loopback, 0xffffffff}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff}, {@loopback, 0x401}, {@rand_addr=0x64010102, 0x1000}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_prespec={0x44, 0x4c, 0x5, 0x3, 0x9, [{@multicast2, 0xb}, {@local, 0x1}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfcf}, {@multicast1, 0x8}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x99, 0x1, 0xe, [{@local, 0x62}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x9}, {@private=0xa010102, 0x80000001}, {@remote, 0x7f}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000f80)={'ip6tnl0\x00', &(0x7f0000000f00)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x4, 0x7f, 0x2, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, 0x73270b3219a8586f, 0x8, 0x6, 0x7}}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0x1, 0xc}, {0x0, 0xfff1}, {0x1, 0x81ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001400)={@broadcast, @loopback, 0x0}, &(0x7f0000001440)=0xc) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000000)="05004305", 0x4, 0x80, &(0x7f0000000080)={0x11, 0x8100, r11}, 0x14) (async) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)}, {&(0x7f0000000440)="7eeff9ce0db9ce8298659e02ce1543949e9c946e7a2e4981b6a0cf556378bb7b3582e2fe496ace49e8d97ca6747d19392dc2a354c232569e2e56dd0b9282f1709d259c95ea052980a68db0badc79621de98de20722901c69177b47c6d286829240b480cc0dda9a003ef5b2e06cfeeb0915afa011314bb0e01b08fbea9505ae95441ae3a0484252f297bf79f82dfee0faabe32d8589353ec53a4faedcbc31630b2ed2b3cd1ce43473b37df0775421e4146caad780c30defa215", 0xb9}, {&(0x7f0000000280)="2010567f14c468bff6bd7da7095b5f75d99a493aed3cd260beab2a92d1fc70bebd5f34c5283bd615104851b8a85cce11facfd8d925702f7e20b8f9a101ab9d81902d37ec05854b380d4da470fb4b2b89b9f5f7b622fcbe33e6e8dc2675c7d5cab9b182dc9b69ae", 0x67}], 0x3, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x2, [{0x2, 0x3, '9'}, {0x0, 0x6, "0e87c8b4"}, {0x6, 0x3, "d0"}]}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x23, 0x55, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x43}, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xae, 0x3, 0xe, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xfffffffc}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@remote, 0x3}, {@remote, 0x8}, {@broadcast}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x34, 0x0, [{0x1, 0x2}, {0x0, 0x6, "96bfbf1e"}, {0x2, 0x11, "571095bbe18d5e82e55fe82910b67e"}, {0x2, 0x2}, {0x1, 0x9, "e7acd434a7c6e7"}, {0x2, 0x3, "a2"}, {0x5, 0x7, "61ad14566c"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}], 0x118}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="51fea76b05b1168fe4c4c145c64f577d887589de86bea80bc2dd998b7d893a7bcf359fe21790b5", 0x27}, {&(0x7f0000000640)="a98ca23171334a8b88f0d3c081b2511ba401f583036038035543c3fb3f9bd29176f2640883d16b15fa54fda3514bfa258ad29fcf26cc19d1ef152d25462c9942d55dd7175caa7bf59a8c3d62292df81ff1256a6d830d500ffe8abc1c92c778e7ca949800eaafcb92689360612a62cc9ab9ac9e272b121b90431aab6a819f8fce953f04310b", 0x85}], 0x2, &(0x7f00000024c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x27, [@loopback, @loopback, @multicast2, @local, @remote, @remote, @private=0xa010100, @multicast2]}, @ssrr={0x89, 0x7, 0x2a, [@empty]}, @lsrr={0x83, 0xf, 0xe, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x5, "2fd238"}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x3, [{@loopback, 0xfffffeff}, {@multicast1, 0xf}, {@loopback, 0x4}, {@local}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @end, @timestamp_addr={0x44, 0x1c, 0x5e, 0x1, 0x1, [{@local, 0xfffff9c7}, {@private=0xa010100, 0x1000}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0xf, [{@remote, 0xb3}, {@multicast1, 0x69e5}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x98}, {@remote, 0x7}, {@empty, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x27, 0x9e, [@loopback, @rand_addr=0x7, @private=0xa010100, @rand_addr=0x64010101, @multicast1, @loopback, @rand_addr=0x64010101, @empty, @local]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x1794f0b}, {@rand_addr=0x64010101}, {@multicast2, 0x5}]}, @noop, @noop, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xce, [@broadcast, @private=0xa010102]}, @lsrr={0x83, 0x27, 0xa8, [@remote, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @local, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x100}, {@remote, 0x8000}, {@multicast1, 0x7}]}, @generic={0x7, 0x9, "ac4f6d1a4d9673"}, @rr={0x7, 0x7, 0x2c, [@broadcast]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x47, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @local]}, @rr={0x7, 0x2b, 0xae, [@multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @multicast2, @loopback, @private=0xa010102, @broadcast, @empty, @loopback, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x81}, {@multicast2, 0x8001}, {@remote, 0x9b1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x4cd}]}, @ssrr={0x89, 0x1f, 0xa1, [@dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @multicast2]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x4, "359c"}, {0x2, 0x3, "ef"}]}]}}}], 0x290}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="596e8ea7832494926b23f142bcf8c97a75f51490ac942c7e97724df1b407141bebfadf7d53bc9b945648be4fcfcce98c8fb45f566617b1054ae070f75e7b860cbe99ce0973b527e089fca0074cd603012d603288736f42ad7f884c06f12d363b8d864e20057c35fee975d26597a33a9e14b7fb07ea4437afdaa2cfabbe31976ea737327924675328c46c67f2565a9d0fe91d067d449f9fe31ffdcaae1740dca159", 0xa1}, {&(0x7f0000000b80)="c8f15f2ddfff8e7692ade443ded9ce5b9da0469afb905f377b5c1da942caada47e36074d3fe9f5de6eb1b5ba351187672f96c80dbdca68768564afd288c48553191179ab8822ab736b53a4cdea781568ac133b32479570208ccde72ec74ac29e4daa139828034d848c19df9291eeda5c3283cc76cd7bb0cd5928a2277e8b699a016ab3aab53de1619a11f209b8cfa88d386c5e1399e9eadd7b65a1e132372d", 0x9f}, {&(0x7f0000000c40)="40bf79c0246750d300cf932975c8443f9a9b7e72f5f935a1cf100cd6882406ef0028fe57950bd2f5de110f80329d8d20c9cc72ce307da8982e76815b924ae17f6e17eb74ca61bdd5fb46a77e62d3987d02ab6e42b691e27168a8f0c33ab0f37235319f803273a4c0af137823d467ba4891a59264bfd36d6d6de45978b1f40321df4a94b2ca8f9897f7bdd29d80296cf3e4bceca24fa33d367b61b46452a390e899abd9e1bad9ac1d88348b3f177880b01002ba3c832568ba24e43fba2777d94ebe66a3ffef8e0a944dc66337fb7ca6a468ddf427303650f83b3a4f98fc344ddbecedb157ee419f5fba79ff59dc694a99e5de2559", 0xf4}], 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="e000000264010100000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="e00000026401010000000000140000000000000000000000020000009b0e00000000000060000000000000000000000007000000940383440cca01ac1e010100008000071b190a01010164010100e0000001ac1e00017f000001ac1414264424d621e0000002000000036401010100000007ac14142000000000e00000020000000300001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="e00000010000000000000000140000000000000000000000010000000900000000000000110000000000000000000000010000001000000000000000"], 0x108}}, {{&(0x7f0000001100)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001140)="f30ff629e534d97da334dff3fe1a31cbe6e0d92323f75cfa3c49ee8098e54193534c405a002daa70d3a46295db43c45012998128468ab6cc840d667fffc44659805962abde5bba6a9f4e3828b0140725dcb86b88fa348f454658ecb1a146e7d236d63e4d5e8414704d7dffa92428eff6ccecccc182912697a76c62e42b9d02e3e37cf101914d8ed5a39d56eb5364987ee569dcf796ed7e360482f46bdbf56a4eea4a712c81c8a37337", 0xa9}, {&(0x7f0000000740)="37d29d361225df35671677b576949a06edfaa98f1a2d61ade640785c975219d8460bade9b8570170ee63fce5ae1ca74b781e7ea0e641c4ccc4cc16787232024d0b0117587aaafebd6f4018a11836d82f564e86946af407dfa3bd9f57c149932651ba40e26aa2839ca0091b2f2d4ab6ffdeea3b28fceb8d0d64e27618a6b2587b40a67c2635aec96b857515c98c475057a92a6869dece40740c8554585cabc09496d2f71b73c9fcddd4b125e8ab280f7a07bb38719b5f8a5dac29", 0xba}], 0x2, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7110}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x80}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000012c0)="582e696d772659ee41", 0x9}, {&(0x7f0000001300)="9b60d4b67875ca40db574df0e04c1ef671ca836e2fbd068c103fb13e61d3023c6990b346fec414fcb31085fec00f6faa8b5983d29ca80d0e90a5e6d1704418028935edeb3c111debf8f7f2dfaed8cbf3dd8844303881b705c7eef583b0599bdb98f1ed2fc8d51a6ac0e5e61034b5fcb77f42887848f53ec8e52c1dc1c917f402ff9fb9ec28ad8330f222", 0x8a}], 0x2, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @broadcast}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x0, [{0x2, 0x12, "9d2cbd28a2a803c26b4a65930bc15cd0"}, {0x2, 0x5, "1751d1"}]}, @rr={0x7, 0x17, 0xae, [@multicast1, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3, 0x43}, @lsrr={0x83, 0xb, 0x9d, [@multicast2, @broadcast]}, @lsrr={0x83, 0xb, 0xcf, [@empty, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}, @ip_retopts={{0x100, 0x0, 0x7, {[@rr={0x7, 0x23, 0x4b, [@rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @private=0xa010100, @local, @multicast2, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x2e, 0x3, 0xc, [{@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@loopback, 0x1}, {@broadcast, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xb9, 0x3, 0xe, [{@local, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x7fffffff}, {@remote, 0x10}]}, @lsrr={0x83, 0x17, 0xf6, [@broadcast, @rand_addr=0x64010104, @multicast1, @multicast2, @private=0xa010102]}, @end, @timestamp_addr={0x44, 0x4c, 0x4a, 0x1, 0x2, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@empty, 0xe80}, {@empty}, {@broadcast, 0xffff}, {@loopback, 0xfffffff9}, {@rand_addr=0x64010102, 0x4}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x6}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x1d0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)="617c471e42b3e581945cf8261845c3fae034c36e487eef41fe7e328953bf839a7fb17b089cdef56bfbf40199adfde948826430fbd7a5eab481fbc6a55adac7905723656988b1e170424704822a33387f564e90de63e77f26c2be58222f629c6d278c60ee2989489e765ecf400180b2fc268853f6a138b389cd8835d1b47073b33afb0c717be0e447d73f0b30bd7645d481733e4d1645112306f3b76e10ef2b7d1204c920fe162043917bf01120", 0xad}, {&(0x7f0000001740)="b08dc7bd4b1170268a5eea9b3d98cd4aeaadeacb218ca0c1bae3443c3cd72cc901231f402e01ea39b5ad98310817a25bcde2713116e911e62795b67c652f39725f02555f69dde64b375334b321bbb9ecf838de564eee2bc30366731e353cabe4540ae9bf2f6b9b0a645b33ab0aa4645e5506cc18c8f3e433ee56", 0x7a}, {&(0x7f00000017c0)="33487b9019bf01e03efd8a5af723b1680c31457f39b327543aa7c1c0e1268028c393df5e525a5505c4b0c5b27850146ad1539dbde578c40c4a2e4c0d2d79568e84a28e1ac54a6dc8dc5d4afc1a7aad67958b2142a2d368de64836347e488d2d59a3c34c23bd64e", 0x67}, {&(0x7f0000001840)="bc2b3bf88eeb68c231a7fc305fec28f903546c5a224be0252c20b4adacbb731fe14f203298fdc9d99eb28816ed538b48815f85100751b98dfa0d98cf189bd13b29f9184e5acbe03d99", 0x49}, {&(0x7f00000018c0)="cf24b7d1d9c5456cc6fd5b9c318c91169347ab99478eba6fe3484c2878dde7a05ae08d0495d8ec60e85355d686bf82a78856235c7eb69e0d2e75f77e5fc840edb544ef12886c0346eb21b289938cb60c6c14cc032fd2f56a7dc0c6adbd1a9b3c1ee6f2c1f87c29746a665c3e566bf0c4c77c6593f374e389bb89ee71f55ba5709c08ea464421ab9f685a2ecc34d18053c143fb8b2dca40b7cd16111e223f96cde64cbd48583ffeb327aa50dd0d86729dab0ec819045e0e8ae3ad9c2b935728a45fff20828b0430be23c123e8187f37da94476b4ebbc2ad8f8a85e84e4cb981a3d73504129640", 0xe6}], 0x5}}], 0x6, 0x4008005) (async) recvmmsg$unix(r1, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1}}], 0x1, 0x12100, 0x0) (async) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r13 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r13, 0x0, 0x0, 0x1000f4) (async) sendfile(r13, r13, 0x0, 0x800000a1e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x3e, 0xa1c07, 0x8, 0x0, 0x3, 0x0, 0x5}) (async) r14 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r12, &(0x7f0000000080)={0x40000014}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x80580, 0x0) 1.361651269s ago: executing program 1 (id=1238): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4004004) 1.270539737s ago: executing program 1 (id=1241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x4400) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = accept$netrom(r0, 0x0, &(0x7f0000000240)) sendfile(r0, r1, &(0x7f0000000280)=0x80000000, 0x85) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES16=r1]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', &(0x7f00000004c0), 0x2008002, 0x0) (async) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000083e000/0x3000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2bdf, &(0x7f0000000040)={0x0, 0x36e, 0x10, 0x9, 0xa0002f5}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8a}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x78}, 0x0) (async) dup(r5) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000081001c00000c0300002001010000cdce0a2a11bdc719"], &(0x7f0000000040)={0x0, 0x4, [0xa0a, 0x408, 0x4bd, 0x97]}) 1.141620993s ago: executing program 1 (id=1243): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000580)=0x1, 0x34) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket(0x1f, 0x5, 0x8) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0xfffffffd, 0x0, 0x34343452, 0x0, 0x0, 0xfffffffe, 0x2, 0xfeedc2fe, 0x1, 0x0, 0x0, 0x6}}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u8=0x0}}) connect$netrom(r2, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008db102080000000100000080", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair(0x1, 0x100000005, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r6, r7}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000440)) accept4$rose(r1, 0x0, 0x0, 0x1c0000) 1.041790591s ago: executing program 0 (id=1246): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = fanotify_init(0x10, 0x101000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000200)={0x1000, "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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x92df}, 0x8) fanotify_mark(r1, 0x455, 0x31, r2, 0x0) fanotify_mark(r1, 0x4, 0x40000018, r2, 0x0) r5 = openat(r2, &(0x7f0000000040)='./file2\x00', 0x19b084, 0x20) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x78) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc0, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x1, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84680"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "63dd"}}}}}, 0x0) close(r5) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {}, 0x9}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000002580)=[{&(0x7f0000001240)="492cd20c9b5237441d1622fd9274fc8a3f7c1c1782244dfc284ae5ff39665845cfc1a37c5fb83b69ed6c61eae5b8a9e0be9e981acae9269db287dd7a55b8a4b557f782a58a930a24b54661e96b1d7261ce63379bf7766c6625eb5db55c033dcc51839852614b748fa71b687e1c21a531f2dfe3866dd5eb9da883202c90e86ebd61c908c17de7f733435d3b1f5ccd305d13ab6d53d1f488b3da5e4e3ef407802c228081e5c2218380bc7b817586d9d25d14f91a9e63a977187cfd747c91c143c094c9f777", 0xc4}, {&(0x7f0000001340)="c1826ca6c32dc8d01bb308b9741b22cefd746e010de9898322b4b475803c78c17259a048b526f432e470ad1979a617f26a5a082f6a898a820ebf813df8f61164870741bd7d405e4118804e3a872c176a756d224af46e2876f1ba5913e564552e08d51be4761d27ce5430ffa0e74a54aa7bf0e01e95caf9db7ed57ed7215c020d39b0739e7cd5f40b763fd14c2f833981724c20639d7db799fcf89807f250ebd9a7476976ad21583123bc2196b56e86bbf93a80e748ebc03e", 0xb8}, {&(0x7f0000001400)="e9d2ef675c43d6e5fefd9a56693936bfeca8942000423e2f64083b2f73d6f7d6ba63c8f9564baf7742c7de05bdca063dac96088a9863d2d74b4a7fec09fdb22b613b8f2831e156c6cb91eeea4da33577ef692c7cc8079124634016d988b7c0ce045b69514c255785a7bdc4e1f9a2cbd672e58132dd521638f14ae7a6ad5fafbfc44014fb616f88459ed820b2c3934070fe5dabfd478b3499ea262113327e9c80ff4165bcd9ff25b950314ead5c27081b7655db52690c34800052eb77edb48d589d1a26a8a709bb7ee7c06fba154a9f1965a27828ba5cc8fe61091d0ab9", 0xdd}, {&(0x7f00000000c0)="dee782bb7e9e896f1ef5117941d97815af", 0x11}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="ffe49cecfaaeafae93c9894bf7462a1a28ed811701ab6bf00990ae6a96a776ce814e3fa6142b4783d1a1c83011aff141f24cc0c631a4687dc70da14a4673ac3927fc271e2a4aea060034d70c8fa397a5403c1823390b725afd3dcee2f1ab96191ecfcf2e428350ae0486efcfcc7eefe242da", 0x72}], 0x6, 0x0, 0xff, 0x18) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000000)) 1.041646562s ago: executing program 0 (id=1247): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x2, 0xc, 0x8001, 0x921, 0xdd, 0xc2fa, 0x0, 0x3}, 0x20) ptrace$setopts(0x4200, r0, 0x80e96, 0x100011) (async) unshare(0x28020a80) unshare(0x200) 971.984549ms ago: executing program 0 (id=1248): clock_gettime(0x5, &(0x7f00000002c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00001c9000/0x4000)=nil, 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 963.722321ms ago: executing program 0 (id=1249): r0 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000014c0)=0xfffffffffffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) userfaultfd(0x800) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 891.778295ms ago: executing program 0 (id=1250): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x125f, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x6, 0x1ff, 0x8f, 0xb, 0x0, "ca204f8f17e3b4b14d37394dea43a50b21185d", 0x3bc, 0x1}) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 781.43558ms ago: executing program 3 (id=1251): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007c9"], 0x0, 0x52, 0x0, 0x1}, 0x28) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000005) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0xcd7, &(0x7f0000000300)={0x0, 0xc8a2, 0x20000, 0x2, 0xc1}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_emit_ethernet(0x94, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x72, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/90}}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 730.868467ms ago: executing program 2 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x0, 0x6, {0x0, 0x2710}, {0x5, 0x8, 0xd2, 0x9, 0x77, 0x0, "15183a4e"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfd96}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0x0, 0x6, 0x4, 0xc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x1c, &(0x7f0000000040)=""/28, 0x41100, 0x10, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3ff, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r4, r1, r0, r1], &(0x7f00000004c0)=[{0x0, 0x3, 0x2, 0x8}, {0x0, 0x3, 0x2, 0x3}, {0x1, 0x4, 0x3, 0x2}, {0x1, 0x3, 0x7, 0xa}], 0x10, 0x1}, 0x94) 671.853791ms ago: executing program 2 (id=1254): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x12c}, 0x1c) 600.681102ms ago: executing program 2 (id=1255): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) 600.274313ms ago: executing program 2 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c690100000000000000028008000140fffff2741400000011000000000000000000000100000a55a429dda69fad3026c158c4978178a1b7c36b8dea446a7099da915148f093d96f0835151177f4088d38bbee57"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c690100000000000000028008000140fffff2741400000011000000000000000000000100000a55a429dda69fad3026c158c4978178a1b7c36b8dea446a7099da915148f093d96f0835151177f4088d38bbee57"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000001406ff2001000000000000000000000000000120010000000000000000000000000002fffe4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001440)={0xf, "4ae5278fad9935baa28730f42702646acee3615653a7843ec1b032bd55d7f4e7375570358045de76f78df777b90b12dc097d06c9aefc7b802453e724f2428032f7363aa198ea40b9a3267b5f064ee1419f6e56aa660d91d5c5250d1ecadd39f56b754ae383764a397d54120d9c66594d7e3b5e0b6f742ac3f7cf5617a3aaefdee15ca3fb3e8b206c2e1d8925852db9a770eda2c6aaa99b6c99a3c11cffbcc8ce2fd2fd467f530e1363c60bf937a88d5672e51e31ab5e2396012ffc28c19db867c59d1962277b372e2de2a75e45a17ecc511d7790f09f4aabdd9631fcbf1dd2c6d530a7efb31a30acc360cecf77d721633d0f427bdc880cfe8750c544d3adefe47df0ed935adae7fe17bcb5bdf93a9878dd4f048eb74ced3ba76cbf554270abb96f8838e634192b6922f9f444ef5cb425ea850fe4fd5eb275bf9c904d2a92558548298c81729986622cf79461297cc0497fdf4a7688c80cb681c15412cf236b71db1fef32ef7c4b5b58ab4b9977a6b1d12417c85fee7745eac264f72f40b5b85d79f26c8e2206c5c8be34a4b545ba76c87e2d06f70a1cb021cdec2bf9a885ac32110aadf4c4713f645f7ca53f610e371a68cee3ac710e4f671d82e23d147b47b76a1ba5658f489ea949e269c10378887593fadb3b2cc41c383be2470e1f261eca3823fe6529e19013335dfb62f5a47f5b964a798a318ffac08eddc69d5db2dcec"}) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001440)={0xf, "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"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000200)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000001740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001680)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r7 = socket(0x5, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000134000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, &(0x7f0000000100)=""/224, 0xe0}, &(0x7f0000000080)=0x40) 461.147219ms ago: executing program 2 (id=1257): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000640)) (async) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000400003c0001802c00018014000300ff0100000000000000000000000000010d0004"], 0x58}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090601080000000000000000070000000900020073797a310000000005000100070000102c0007800240fe80059c8a00000000000000000000000000bb06a98b400e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x200000c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r5) (async) fchdir(r5) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00005c0000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000, 0x7}) 2.053028ms ago: executing program 0 (id=1258): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x6, 0x3, &(0x7f0000000380)="e4f01723d9318f1c16aeeb1f488994bd2df84a73b5def1538236f96daa0e37262fd0e513971e5ee2753974dc46e641f176ab5dc24fccb7dea228a46f082e99b3cd655a4037af4326f7359fbc30965e39846393460904efe506a3556688c00e"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x49, &(0x7f0000000080)=0x474c, 0x4) write$binfmt_misc(r3, &(0x7f00000001c0)="a7ad2a33db01bfa761d05a94296639a4c6d2c69e088c97bb0c832cfd668f93ae2b477201f4167f26a03b3113cdf7bc678d87baf614e1629579633937c71d3446d5109dd5ac26bfd051", 0x49) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) 0s ago: executing program 2 (id=1259): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x700000000000000, 0x40000}, 0x8000) kernel console output (not intermixed with test programs): ttr 8 is out of range max 3 [ 88.737855][ T7512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.803002][ T40] audit: type=1400 audit(88.712:485): avc: denied { read } for pid=7515 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.809565][ T7521] [U] ^E [ 88.864943][ T7525] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 88.873633][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.879076][ T7525] bridge_slave_1: left allmulticast mode [ 88.881714][ T7525] bridge_slave_1: left promiscuous mode [ 88.884392][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.891119][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 88.899859][ T7525] bridge_slave_1: entered promiscuous mode [ 88.905375][ T7525] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 88.940408][ C1] Illegal XDP return value 16128 on prog (id 75) dev bridge_slave_1, expect packet loss! [ 89.691357][ T7534] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 89.693765][ T7534] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 89.696321][ T7534] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 89.699365][ T7534] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 89.842716][ T7559] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 89.857651][ T7559] team0: Port device dummy0 added [ 89.891374][ T7567] netlink: 112 bytes leftover after parsing attributes in process `syz.1.464'. [ 90.130260][ T6001] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 90.268625][ T6021] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.289580][ T6001] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 90.292983][ T6001] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 90.296808][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 90.301274][ T6001] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.304155][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.307305][ T6001] usb 7-1: Product: syz [ 90.308830][ T6001] usb 7-1: Manufacturer: syz [ 90.310355][ T6001] usb 7-1: SerialNumber: syz [ 90.313107][ T6001] usb 7-1: config 0 descriptor?? [ 90.319595][ T6001] usb 7-1: selecting invalid altsetting 0 [ 90.383570][ T7607] *;eܲ: renamed from lo (while UP) [ 90.419495][ T6021] usb 6-1: config 0 has no interfaces? [ 90.424852][ T6021] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.427939][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.432269][ T6021] usb 6-1: Product: syz [ 90.433614][ T6021] usb 6-1: Manufacturer: syz [ 90.435337][ T6021] usb 6-1: SerialNumber: syz [ 90.448690][ T6021] usb 6-1: config 0 descriptor?? [ 90.469088][ T7622] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.589955][ T5942] Bluetooth: Frame is too long (len 18, expected len 17) [ 90.597329][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.600445][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.602885][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.605418][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.607961][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.610540][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.612991][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.615548][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.618399][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.620844][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.623279][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.625777][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.628312][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.630714][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.633189][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.635654][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.638338][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.640904][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.643321][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.645835][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.648477][ T7633] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 90.649214][ T6001] usb 7-1: USB disconnect, device number 9 [ 90.650890][ T7633] usb 7-1: cannot submit urb 0, error -19: no device [ 90.862060][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.865836][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.901824][ T6022] usb 6-1: USB disconnect, device number 7 [ 91.132621][ T6022] IPVS: starting estimator thread 0... [ 91.190146][ T7650] tls_set_device_offload_rx: netdev not found [ 91.228319][ T7646] IPVS: using max 44 ests per chain, 105600 per kthread [ 91.234698][ T7650] tmpfs: Bad value for 'mpol' [ 91.317873][ T7660] netlink: 6 bytes leftover after parsing attributes in process `syz.0.492'. [ 91.461470][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 91.465241][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.496'. [ 91.483966][ T7673] tipc: Enabling of bearer rejected, failed to enable media [ 91.596323][ T7680] 9pnet_virtio: no channels available for device syz [ 91.703104][ T7684] syzkaller1: left promiscuous mode [ 91.705333][ T7684] syzkaller1: left allmulticast mode [ 91.711690][ T7684] fuse: blksize only supported for fuseblk [ 91.744606][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 91.849911][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'. [ 91.853110][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'. [ 91.858190][ T6001] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 92.013297][ T6001] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.017549][ T6001] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.021268][ T6001] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.025021][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.032205][ T7680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.038327][ T6001] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.123539][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.506'. [ 92.241605][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.244373][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.280069][ T6032] usb 6-1: USB disconnect, device number 8 [ 92.352447][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 92.352458][ T40] audit: type=1400 audit(92.262:496): avc: denied { bind } for pid=7712 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.381026][ T7713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.466066][ T7713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.501327][ T40] audit: type=1400 audit(92.412:497): avc: denied { watch_mount } for pid=7714 comm="syz.3.512" path="/118" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.532960][ T7713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.544184][ T7718] binder: BINDER_SET_CONTEXT_MGR already set [ 92.546211][ T7718] binder: 7717:7718 ioctl 4018620d 200000000100 returned -16 [ 92.586265][ T40] audit: type=1400 audit(92.492:498): avc: denied { ioctl } for pid=7722 comm="syz.3.514" path="socket:[19520]" dev="sockfs" ino=19520 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.607758][ T7713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.645245][ T7725] syzkaller0: entered promiscuous mode [ 92.647113][ T7725] syzkaller0: entered allmulticast mode [ 92.663030][ T7725] tipc: Enabled bearer , priority 0 [ 92.666543][ T7724] tipc: Resetting bearer [ 92.678687][ T7724] tipc: Disabling bearer [ 92.723299][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740661][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.749733][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.759396][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.899610][ T7736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.902745][ T7736] IPv6: NLM_F_CREATE should be set when creating new route [ 92.906629][ T7736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.091975][ T7756] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.162127][ T40] audit: type=1400 audit(93.072:499): avc: denied { create } for pid=7760 comm="syz.2.528" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.194860][ T40] audit: type=1400 audit(93.102:500): avc: denied { setattr } for pid=7765 comm="syz.2.529" name="SCO" dev="sockfs" ino=20484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.206418][ T40] audit: type=1400 audit(93.112:501): avc: denied { shutdown } for pid=7765 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.274518][ T7775] i2c i2c-1: Invalid block write size 34 [ 93.301867][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 93.302496][ T7779] overlayfs: failed to resolve './file1': -2 [ 93.312713][ T7779] xt_hashlimit: size too large, truncated to 1048576 [ 93.448626][ T7788] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 93.455569][ T7788] overlayfs: failed lookup in lower (newroot/127, name='bus', err=-40): overlapping layers [ 93.461681][ T7787] overlayfs: failed to get inode (-116) [ 93.463706][ T7787] overlayfs: failed to get inode (-116) [ 93.554324][ T7785] syzkaller0: entered promiscuous mode [ 93.556297][ T7785] syzkaller0: entered allmulticast mode [ 95.351364][ T7812] syzkaller0: entered promiscuous mode [ 95.354864][ T7812] syzkaller0: entered allmulticast mode [ 95.360384][ T7818] tipc: Enabled bearer , priority 0 [ 95.365740][ T7809] tipc: Resetting bearer [ 95.377337][ T7809] tipc: Disabling bearer [ 95.432562][ T7825] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 95.449804][ T40] audit: type=1400 audit(95.362:502): avc: denied { remove_name } for pid=7826 comm="syz.1.545" name="file0" dev="9p" ino=71827651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.454821][ T7825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.455939][ T7829] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 95.455970][ T7829] netlink: 96 bytes leftover after parsing attributes in process `syz.1.545'. [ 95.455983][ T7829] netlink: 658 bytes leftover after parsing attributes in process `syz.1.545'. [ 95.455995][ T7829] netlink: 1 bytes leftover after parsing attributes in process `syz.1.545'. [ 95.468371][ T40] audit: type=1400 audit(95.362:503): avc: denied { rename } for pid=7826 comm="syz.1.545" name="file0" dev="9p" ino=71827651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.499135][ T40] audit: type=1400 audit(95.362:504): avc: denied { unlink } for pid=7826 comm="syz.1.545" name="file1" dev="9p" ino=71827653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.593233][ T7844] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.703342][ T7851] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 95.774786][ T40] audit: type=1400 audit(95.682:505): avc: denied { append } for pid=7856 comm="syz.3.555" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.868789][ T6138] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 95.906659][ T7869] qrtr: Invalid version 0 [ 95.955083][ T7880] erspan0: entered promiscuous mode [ 95.955138][ T7882] binder: 7881:7882 ioctl c00c620f 200000002a80 returned -22 [ 95.963249][ T7880] erspan0: left promiscuous mode [ 96.007156][ T7886] netlink: 'syz.1.563': attribute type 21 has an invalid length. [ 96.008184][ T6138] usb 7-1: device descriptor read/64, error -71 [ 96.011594][ T7886] netlink: 'syz.1.563': attribute type 6 has an invalid length. [ 96.055650][ T7888] use of bytesused == 0 is deprecated and will be removed in the future, [ 96.058596][ T7888] use the actual size instead. [ 96.119923][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.229650][ T29] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 96.259272][ T6138] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 96.371933][ T29] usb 5-1: device descriptor read/64, error -71 [ 96.391765][ T7914] overlay: Unknown parameter '32 [ 96.391765][ T7914] time [ 96.391765][ T7914] string [ 96.391765][ T7914] statistic [ 96.391765][ T7914] state [ 96.391765][ T7914] realm [ 96.391765][ T7914] rateest [ 96.391765][ T7914] quota [ 96.391765][ T7914] pkttype [ 96.391765][ T7914] physdev [ 96.391765][ T7914] cgroup [ 96.391765][ T7914] cgroup [ 96.391765][ T7914] cgroup [ 96.391765][ T7914] owner [ 96.391765][ T7914] nfacct [ 96.391765][ T7914] nfacct [ 96.391765][ T7914] mac [ 96.391765][ T7914] limit [ 96.391765][ T7914] ipvs [ 96.391765][ T7914] helper [ 96.391765][ T7914] devgroup [ 96.391765][ T7914] cpu [ 96.391765][ T7914] conntrack [ 96.391765][ T7914] conntrack [ 96.391765][ T7914] conntrack [ 96.391765][ T7914] connlabel [ 96.391765][ T7914] connbytes [ 96.391765][ T7914] comment [ 96.391765][ T7914] bpf [ 96.391765][ T7914] bpf [ 96.391765][ T7914] connmark [ 96.391765][ T7914] mark [ 96.391765][ T7914] rpfilter [ 96.391765][ T7914] ah [ 96.391765][ T7914] tcpmss [ 96.391765][ T7914] socket [ 96.391765][ T7914] socket [ 96.391765][ T7914] socket [ 96.391765][ T7914] socket [ 96.391765][ T7914] sctp [ 96.391765][ T7914] recent [ 96.391765][ T7914] recent [ 96.391765][ T7914] policy [ 96.391765][ T7914] osf [ 96.391765][ T7914] multiport [ 96.391765][ T7914] length [ 96.391765][ T7914] l2tp [ 96.391765][ T7914] iprange [ 96.391765][ T7914] ipcomp [ 96.391765][ T7914] ttl [ 96.391765][ T7914] hashlimit [ 96.391765][ T7914] hashlimit [ 96.391765][ T7914] hashlimit [ 96.391765][ T7914] esp [ 96.391765][ T7914] ecn [ 96.391765][ T7914] tos [ 96.391765][ T7914] dscp [ 96.391765][ T7914] dccp [ 96.391765][ T7914] connlimit [ 96.391765][ T7914] cluster [ 96.391765][ T7914] addrtype [ 96.391765][ T7914] addrtype [ 96.391765][ T7914] set [ 96.391765][ T7914] set [ 96.391765][ T7914] set [ 96.391765][ T7914] set [ 96.391765][ T7914] set [ 96.391765][ T7914] icmp [ 96.464266][ T6138] usb 7-1: device descriptor read/64, error -71 [ 96.473176][ T7917] __nla_validate_parse: 5 callbacks suppressed [ 96.473197][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 96.484799][ T7917] erspan0: entered promiscuous mode [ 96.497455][ T7917] erspan0: left promiscuous mode [ 96.569949][ T6138] usb usb7-port1: attempt power cycle [ 96.608235][ T29] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 96.738500][ T29] usb 5-1: device descriptor read/64, error -71 [ 96.848643][ T29] usb usb5-port1: attempt power cycle [ 96.918244][ T6138] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 96.938691][ T6138] usb 7-1: device descriptor read/8, error -71 [ 96.961604][ T7946] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 96.961604][ T7946] program syz.1.585 not setting count and/or reply_len properly [ 97.084316][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'. [ 97.109958][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.588'. [ 97.178198][ T6138] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 97.198825][ T29] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 97.198920][ T6138] usb 7-1: device descriptor read/8, error -71 [ 97.218823][ T29] usb 5-1: device descriptor read/8, error -71 [ 97.308387][ T6138] usb usb7-port1: unable to enumerate USB device [ 97.465741][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 97.465752][ T40] audit: type=1400 audit(97.372:511): avc: denied { write } for pid=7972 comm="syz.1.593" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.478220][ T29] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 97.508613][ T29] usb 5-1: device descriptor read/8, error -71 [ 97.618461][ T29] usb usb5-port1: unable to enumerate USB device [ 98.544431][ T7983] netlink: 168 bytes leftover after parsing attributes in process `syz.1.595'. [ 98.656393][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 98.687488][ T7996] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 98.848217][ T8007] binder: 8006:8007 ioctl c00c620f 200000003fc0 returned -22 [ 98.987602][ T6022] IPVS: starting estimator thread 0... [ 98.987925][ T8016] IPVS: sed: FWM 3 0x00000003 - no destination available [ 99.035597][ T40] audit: type=1400 audit(98.942:512): avc: denied { lock } for pid=8022 comm="syz.2.609" path="socket:[19841]" dev="sockfs" ino=19841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 99.066519][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 99.070102][ T8029] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 99.088444][ T8017] IPVS: using max 44 ests per chain, 105600 per kthread [ 99.092946][ T8021] netlink: 'syz.1.608': attribute type 4 has an invalid length. [ 99.096555][ T8021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8021 comm=syz.1.608 [ 99.104737][ T8021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8021 comm=syz.1.608 [ 99.114242][ T40] audit: type=1400 audit(99.022:513): avc: denied { ioctl } for pid=8030 comm="syz.2.611" path="socket:[19104]" dev="sockfs" ino=19104 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.124028][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'. [ 99.164021][ T8033] efs: device does not support 512 byte blocks [ 99.166771][ T8033] device does not support 512 byte blocks [ 99.166771][ T8033] [ 99.178895][ T8039] syzkaller0: entered promiscuous mode [ 99.181149][ T8039] syzkaller0: entered allmulticast mode [ 99.374381][ T40] audit: type=1400 audit(99.282:514): avc: denied { shutdown } for pid=8057 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.378167][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 99.384200][ T40] audit: type=1400 audit(99.282:515): avc: denied { read } for pid=8057 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.447708][ T8066] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 99.451711][ T8066] netlink: 96 bytes leftover after parsing attributes in process `syz.0.623'. [ 99.455708][ T8066] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 99.460742][ T8066] netlink: 638 bytes leftover after parsing attributes in process `syz.0.623'. [ 99.485462][ T8070] *;eܲ speed is unknown, defaulting to 1000 [ 99.507166][ T40] audit: type=1400 audit(99.412:516): avc: denied { setopt } for pid=8065 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.610049][ T40] audit: type=1326 audit(99.522:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.1.627" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74b9d8f7c9 code=0x0 [ 99.625466][ T40] audit: type=1326 audit(99.532:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.1.627" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74b9d8f7c9 code=0x0 [ 99.841376][ T8094] erspan0: entered promiscuous mode [ 99.845884][ T8094] erspan0: left promiscuous mode [ 100.000724][ T40] audit: type=1400 audit(99.912:519): avc: denied { map } for pid=8095 comm="syz.2.631" path="/147/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.468923][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=8107 comm=syz.3.635 [ 100.505668][ T8116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8116 comm=syz.3.636 [ 100.595888][ T8124] syzkaller0: entered promiscuous mode [ 100.597706][ T40] audit: type=1400 audit(100.502:520): avc: denied { create } for pid=8117 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 100.598126][ T8124] syzkaller0: entered allmulticast mode [ 100.618520][ T8124] tipc: Enabled bearer , priority 0 [ 100.622228][ T8123] tipc: Resetting bearer [ 100.633985][ T8123] tipc: Disabling bearer [ 100.642946][ T8132] erspan0: entered promiscuous mode [ 100.645575][ T8132] erspan0: left promiscuous mode [ 100.739678][ T8134] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.773849][ T8136] xt_bpf: check failed: parse error [ 100.776981][ T8137] xt_bpf: check failed: parse error [ 101.010615][ T8151] IPv6: addrconf: prefix option has invalid lifetime [ 101.105868][ T8171] Malformed UNC in devname [ 101.105868][ T8171] [ 101.116673][ T8171] CIFS: VFS: Malformed UNC in devname [ 101.205978][ T8188] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 101.303161][ T8201] smc: net device bond0 applied user defined pnetid SYZ2 [ 101.439176][ T6022] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.458238][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 101.581706][ T8208] 9p: Bad value for 'rfdno' [ 101.589875][ T6022] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.594389][ T6022] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.598739][ T6022] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.602307][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.611708][ T8185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.617396][ T6022] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.618215][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 101.626343][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 101.629677][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.633489][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.637648][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.644363][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.649380][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.652984][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.815615][ T6020] usb 6-1: USB disconnect, device number 9 [ 101.872035][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 101.875797][ T24] usbtmc 7-1:16.0: can't read capabilities [ 102.125613][ T6020] usb 7-1: USB disconnect, device number 14 [ 102.147797][ T8244] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 102.157791][ T8244] team0: Failed to send options change via netlink (err -105) [ 102.162149][ T8244] team0: Port device dummy0 added [ 102.168878][ T8244] __nla_validate_parse: 8 callbacks suppressed [ 102.168889][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 102.176420][ T8245] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 102.177051][ T8244] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 102.184481][ T8244] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 102.191254][ T8244] team0: Failed to send options change via netlink (err -105) [ 102.193811][ T8244] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 102.196792][ T8244] team0: Port device dummy0 removed [ 102.200353][ T8244] dummy0: entered promiscuous mode [ 102.202587][ T8244] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.857291][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'. [ 102.865857][ T8288] bond0: entered promiscuous mode [ 102.867540][ T8288] bond_slave_0: entered promiscuous mode [ 102.869798][ T8288] bond_slave_1: entered promiscuous mode [ 102.871818][ T8288] bridge_slave_1: entered promiscuous mode [ 102.874835][ T8288] gretap0: entered promiscuous mode [ 102.877422][ T8288] hsr1: entered promiscuous mode [ 103.013969][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 103.013984][ T40] audit: type=1400 audit(102.922:526): avc: denied { create } for pid=8293 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 103.026584][ T8301] *;eܲ speed is unknown, defaulting to 1000 [ 103.109191][ T6003] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 103.183969][ T40] audit: type=1400 audit(103.092:527): avc: denied { execute } for pid=8318 comm="syz.0.706" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.193809][ T8321] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 103.266582][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 103.278167][ T8324] netlink: 'syz.0.707': attribute type 30 has an invalid length. [ 103.294642][ T8328] netlink: 'syz.1.709': attribute type 13 has an invalid length. [ 103.298029][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 103.298185][ T6003] usb 7-1: Using ep0 maxpacket: 16 [ 103.302599][ T8328] netlink: 'syz.1.709': attribute type 13 has an invalid length. [ 103.305554][ T6003] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.307104][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 103.316085][ T6003] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.319673][ T6003] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.325143][ T6003] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 103.337126][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.347607][ T6003] usb 7-1: config 0 descriptor?? [ 103.688201][ T6022] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 103.761755][ T6003] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 103.799446][ T40] audit: type=1400 audit(103.712:528): avc: denied { map } for pid=8347 comm="syz.3.715" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.816901][ T6003] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 103.822171][ T6003] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 103.825703][ T40] audit: type=1800 audit(103.742:529): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.715" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 103.840454][ T6022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 103.844836][ T6022] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 103.850185][ T6022] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 103.857953][ T6022] usb 6-1: string descriptor 0 read error: -22 [ 103.860712][ T6022] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.864386][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.871301][ T8337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.959485][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.962738][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.981370][ T24] usb 7-1: USB disconnect, device number 15 [ 103.981382][ T1284] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 103.995563][ T1284] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 104.001521][ T1284] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 104.077712][ T6022] cdc_ncm 6-1:1.0: bind() failure [ 104.085296][ T6022] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 104.087556][ T6022] cdc_ncm 6-1:1.1: bind() failure [ 104.091846][ T8358] netlink: 'syz.3.717': attribute type 3 has an invalid length. [ 104.095170][ T6022] usb 6-1: USB disconnect, device number 10 [ 104.116210][ T8360] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 104.171513][ T8365] netlink: 'syz.3.721': attribute type 8 has an invalid length. [ 104.173977][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 104.179612][ T8365] bond0: entered promiscuous mode [ 104.181247][ T8365] bond_slave_0: entered promiscuous mode [ 104.183104][ T8365] bond_slave_1: entered promiscuous mode [ 104.185039][ T8365] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 104.189948][ T8365] gretap0: entered promiscuous mode [ 104.192119][ T8365] veth0: entered promiscuous mode [ 104.194129][ T8365] debugfs: 'hsr1' already exists in 'hsr' [ 104.196105][ T8365] Cannot create hsr debugfs directory [ 104.197915][ T8365] hsr1: entered promiscuous mode [ 104.203911][ T8365] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 104.207605][ T8365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.754626][ T40] audit: type=1400 audit(104.662:530): avc: denied { getopt } for pid=8401 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.901201][ T8405] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 104.904383][ T8405] netlink: 'syz.2.731': attribute type 4 has an invalid length. [ 104.907617][ T8405] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.731'. [ 105.138476][ T40] audit: type=1400 audit(105.042:531): avc: denied { mounton } for pid=8419 comm="syz.3.736" path="/193/file0" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.138871][ T8420] Invalid source name [ 105.149377][ T8420] UBIFS error (pid: 8420): cannot open "./file0", error -22 [ 105.165008][ T40] audit: type=1400 audit(105.072:532): avc: denied { write } for pid=8419 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.219892][ T8431] jfs: Unknown parameter 'discardկQOo[֜1E' [ 105.504797][ T8448] syzkaller0: entered promiscuous mode [ 105.506642][ T8448] syzkaller0: entered allmulticast mode [ 105.524119][ T8448] tipc: Enabled bearer , priority 0 [ 105.529192][ T8447] tipc: Resetting bearer [ 105.545711][ T8447] tipc: Disabling bearer [ 105.608795][ T8454] FAULT_INJECTION: forcing a failure. [ 105.608795][ T8454] name failslab, interval 1, probability 0, space 0, times 1 [ 105.613588][ T8454] CPU: 2 UID: 0 PID: 8454 Comm: syz.3.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.613605][ T8454] Tainted: [L]=SOFTLOCKUP [ 105.613608][ T8454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.613615][ T8454] Call Trace: [ 105.613619][ T8454] [ 105.613623][ T8454] dump_stack_lvl+0x16c/0x1f0 [ 105.613663][ T8454] should_fail_ex+0x512/0x640 [ 105.613681][ T8454] should_failslab+0xc2/0x120 [ 105.613696][ T8454] __kmalloc_cache_noprof+0x80/0x800 [ 105.613707][ T8454] ? sctp_add_bind_addr+0xae/0x3f0 [ 105.613720][ T8454] ? sctp_bind_addr_match+0x193/0x300 [ 105.613734][ T8454] ? sctp_add_bind_addr+0xae/0x3f0 [ 105.613747][ T8454] sctp_add_bind_addr+0xae/0x3f0 [ 105.613761][ T8454] sctp_do_bind+0x2d6/0x760 [ 105.613774][ T8454] sctp_connect_new_asoc+0x5e7/0x770 [ 105.613785][ T8454] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 105.613801][ T8454] sctp_sendmsg+0x157c/0x1e20 [ 105.613818][ T8454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 105.613830][ T8454] ? __pfx_sock_has_perm+0x10/0x10 [ 105.613850][ T8454] ? __pfx_sctp_sendmsg+0x10/0x10 [ 105.613860][ T8454] inet_sendmsg+0x11c/0x140 [ 105.613873][ T8454] __sys_sendto+0x43c/0x520 [ 105.613884][ T8454] ? __pfx___sys_sendto+0x10/0x10 [ 105.613905][ T8454] ? ksys_write+0x1ac/0x250 [ 105.613918][ T8454] ? __pfx_ksys_write+0x10/0x10 [ 105.613932][ T8454] __x64_sys_sendto+0xe0/0x1c0 [ 105.613942][ T8454] ? do_syscall_64+0x91/0xf80 [ 105.613956][ T8454] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.613970][ T8454] do_syscall_64+0xcd/0xf80 [ 105.613989][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.614000][ T8454] RIP: 0033:0x7f3230f8f7c9 [ 105.614009][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.614019][ T8454] RSP: 002b:00007f322f1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 105.614030][ T8454] RAX: ffffffffffffffda RBX: 00007f32311e5fa0 RCX: 00007f3230f8f7c9 [ 105.614036][ T8454] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 105.614042][ T8454] RBP: 00007f322f1f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 105.614047][ T8454] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 105.614053][ T8454] R13: 00007f32311e6038 R14: 00007f32311e5fa0 R15: 00007ffd85b094f8 [ 105.614067][ T8454] [ 105.723759][ T40] audit: type=1400 audit(105.632:533): avc: denied { getopt } for pid=8459 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.736188][ T40] audit: type=1400 audit(105.642:534): avc: denied { execstack } for pid=8459 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.739592][ T8462] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 105.749062][ T8462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8462 comm=syz.3.753 [ 105.754970][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 105.938877][ T40] audit: type=1400 audit(105.852:535): avc: denied { getopt } for pid=8472 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.096804][ T8487] FAULT_INJECTION: forcing a failure. [ 106.096804][ T8487] name failslab, interval 1, probability 0, space 0, times 0 [ 106.114829][ T8487] CPU: 1 UID: 0 PID: 8487 Comm: syz.1.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.114857][ T8487] Tainted: [L]=SOFTLOCKUP [ 106.114863][ T8487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.114874][ T8487] Call Trace: [ 106.114880][ T8487] [ 106.114886][ T8487] dump_stack_lvl+0x16c/0x1f0 [ 106.114913][ T8487] should_fail_ex+0x512/0x640 [ 106.114929][ T8487] ? __kmalloc_cache_noprof+0x5f/0x800 [ 106.114949][ T8487] should_failslab+0xc2/0x120 [ 106.114971][ T8487] __kmalloc_cache_noprof+0x80/0x800 [ 106.114989][ T8487] ? sctp_association_new+0xbb/0x29d0 [ 106.115019][ T8487] ? sctp_association_new+0xbb/0x29d0 [ 106.115049][ T8487] sctp_association_new+0xbb/0x29d0 [ 106.115081][ T8487] sctp_connect_new_asoc+0x1a8/0x770 [ 106.115101][ T8487] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 106.115128][ T8487] sctp_sendmsg+0x157c/0x1e20 [ 106.115150][ T8487] ? __pfx_sctp_sendmsg+0x10/0x10 [ 106.115172][ T8487] ? __pfx_sock_has_perm+0x10/0x10 [ 106.115204][ T8487] ? __pfx_sctp_sendmsg+0x10/0x10 [ 106.115224][ T8487] inet_sendmsg+0x11c/0x140 [ 106.115246][ T8487] __sys_sendto+0x43c/0x520 [ 106.115265][ T8487] ? __pfx___sys_sendto+0x10/0x10 [ 106.115302][ T8487] ? ksys_write+0x1ac/0x250 [ 106.115323][ T8487] ? __pfx_ksys_write+0x10/0x10 [ 106.115344][ T8487] __x64_sys_sendto+0xe0/0x1c0 [ 106.115361][ T8487] ? do_syscall_64+0x91/0xf80 [ 106.115384][ T8487] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.115406][ T8487] do_syscall_64+0xcd/0xf80 [ 106.115429][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.115446][ T8487] RIP: 0033:0x7f74b9d8f7c9 [ 106.115461][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.115477][ T8487] RSP: 002b:00007f74babf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.115493][ T8487] RAX: ffffffffffffffda RBX: 00007f74b9fe5fa0 RCX: 00007f74b9d8f7c9 [ 106.115502][ T8487] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 106.115513][ T8487] RBP: 00007f74babf6090 R08: 000020000005ffe4 R09: 000000000000001c [ 106.115522][ T8487] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 106.115530][ T8487] R13: 00007f74b9fe6038 R14: 00007f74b9fe5fa0 R15: 00007fff446c7fc8 [ 106.115553][ T8487] [ 106.382276][ T8503] binder_alloc: 8502: binder_alloc_buf, no vma [ 106.788195][ T6138] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 106.938181][ T6138] usb 8-1: Using ep0 maxpacket: 8 [ 106.942423][ T6138] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 106.947032][ T6138] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.952516][ T6138] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.956484][ T6138] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.961698][ T6138] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.966673][ T6138] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.970681][ T6138] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.181695][ T6138] usb 8-1: GET_CAPABILITIES returned 0 [ 107.184230][ T6138] usbtmc 8-1:16.0: can't read capabilities [ 107.264106][ T8524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.364877][ T8529] syzkaller0: entered promiscuous mode [ 107.366802][ T8529] syzkaller0: entered allmulticast mode [ 107.379039][ T8529] tipc: Enabled bearer , priority 0 [ 107.383391][ T8528] tipc: Resetting bearer [ 107.388969][ T141] usb 8-1: USB disconnect, device number 4 [ 107.394941][ T8528] tipc: Disabling bearer [ 107.738230][ T6001] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 107.881623][ T6001] usb 7-1: device descriptor read/64, error -71 [ 108.027827][ T8574] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.083396][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 108.138338][ T6001] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 108.172540][ T8589] syzkaller0: entered promiscuous mode [ 108.174280][ T8589] syzkaller0: entered allmulticast mode [ 108.186858][ T8589] tipc: Enabled bearer , priority 0 [ 108.190479][ T8588] tipc: Resetting bearer [ 108.200458][ T8588] tipc: Disabling bearer [ 108.279896][ T6001] usb 7-1: device descriptor read/64, error -71 [ 108.295941][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 108.386317][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 108.386444][ T40] audit: type=1400 audit(108.292:541): avc: denied { read } for pid=8600 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.397213][ T6001] usb usb7-port1: attempt power cycle [ 108.491818][ T40] audit: type=1400 audit(108.402:542): avc: denied { ioctl } for pid=8606 comm="syz.1.802" path="net:[4026533161]" dev="nsfs" ino=4026533161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.566280][ T8610] syzkaller0: entered promiscuous mode [ 108.568199][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 108.571145][ T8610] syzkaller0: entered allmulticast mode [ 108.574167][ T1143] syzkaller0: tun_net_xmit 48 [ 108.576685][ T40] audit: type=1400 audit(108.482:543): avc: denied { relabelfrom } for pid=8609 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.585022][ T40] audit: type=1400 audit(108.482:544): avc: denied { relabelto } for pid=8609 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 108.708235][ T29] usb 8-1: device descriptor read/64, error -71 [ 108.738235][ T6001] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 108.758901][ T6001] usb 7-1: device descriptor read/8, error -71 [ 108.968175][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 109.018221][ T6001] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 109.049142][ T6001] usb 7-1: device descriptor read/8, error -71 [ 109.108260][ T29] usb 8-1: device descriptor read/64, error -71 [ 109.179270][ T6001] usb usb7-port1: unable to enumerate USB device [ 109.218942][ T29] usb usb8-port1: attempt power cycle [ 109.263837][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 109.569244][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 109.592143][ T29] usb 8-1: device descriptor read/8, error -71 [ 109.848186][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 109.878614][ T29] usb 8-1: device descriptor read/8, error -71 [ 109.940550][ T8623] syzkaller0: entered promiscuous mode [ 109.942945][ T8623] syzkaller0: entered allmulticast mode [ 109.947189][ T8629] tipc: Enabled bearer , priority 0 [ 109.952168][ T8620] tipc: Resetting bearer [ 109.963452][ T8620] tipc: Disabling bearer [ 109.988406][ T29] usb usb8-port1: unable to enumerate USB device [ 110.205412][ T8640] netlink: 96 bytes leftover after parsing attributes in process `syz.0.810'. [ 110.250449][ T8642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.811'. [ 110.363411][ T8646] ceph: No source [ 110.520514][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 110.547392][ T8652] veth3: entered promiscuous mode [ 110.550430][ T8652] veth3: entered allmulticast mode [ 110.552864][ T8652] bridge2: port 1(veth3) entered blocking state [ 110.554965][ T8652] bridge2: port 1(veth3) entered disabled state [ 110.560285][ T8652] bridge2: port 1(veth3) entered blocking state [ 110.562444][ T8652] bridge2: port 1(veth3) entered forwarding state [ 110.585279][ T8652] veth5: entered promiscuous mode [ 110.587273][ T8652] veth5: entered allmulticast mode [ 110.590787][ T8652] bridge2: port 2(veth5) entered blocking state [ 110.593589][ T8652] bridge2: port 2(veth5) entered disabled state [ 110.601776][ T8652] bridge2: port 2(veth5) entered blocking state [ 110.603842][ T8652] bridge2: port 2(veth5) entered forwarding state [ 110.676641][ T8656] netlink: 104 bytes leftover after parsing attributes in process `syz.2.816'. [ 110.682285][ T8656] FAT-fs (loop2): unable to read boot sector [ 110.740184][ T40] audit: type=1400 audit(110.652:545): avc: denied { accept } for pid=8657 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.011157][ T46] bridge2: port 1(veth3) entered disabled state [ 111.016917][ T46] bridge2: port 2(veth5) entered disabled state [ 111.053289][ T8677] nfs4: Unknown parameter '' [ 111.278621][ T40] audit: type=1400 audit(111.192:546): avc: denied { setopt } for pid=8687 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.307769][ T1284] IPVS: starting estimator thread 0... [ 111.394916][ T40] audit: type=1400 audit(111.302:547): avc: denied { setopt } for pid=8693 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.405758][ T8692] IPVS: using max 44 ests per chain, 105600 per kthread [ 111.423033][ T8708] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 111.484702][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 111.577987][ T40] audit: type=1400 audit(111.482:548): avc: denied { connect } for pid=8731 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.609793][ T8730] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000 [ 111.609963][ T40] audit: type=1400 audit(111.522:549): avc: denied { listen } for pid=8728 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.613083][ T8730] tmpfs: Unknown parameter 'eq' [ 111.632262][ T40] audit: type=1400 audit(111.542:550): avc: denied { write } for pid=8739 comm="syz.1.843" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 111.657982][ T8743] bridge: RTM_NEWNEIGH with invalid ether address [ 111.865550][ T8763] syzkaller0: entered promiscuous mode [ 111.867569][ T8763] syzkaller0: entered allmulticast mode [ 111.876499][ T8756] *;eܲ speed is unknown, defaulting to 1000 [ 111.896058][ T8763] tipc: Enabled bearer , priority 0 [ 111.899270][ T8761] tipc: Resetting bearer [ 111.915908][ T8761] tipc: Disabling bearer [ 111.923980][ T8765] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 111.926206][ T8765] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.928959][ T8765] vhci_hcd vhci_hcd.0: Device attached [ 112.068264][ T29] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 112.128208][ T6138] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 112.188802][ T6138] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 112.221606][ T29] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 112.225790][ T29] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 112.239909][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.243383][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.246016][ T29] usb 7-1: Product: syz [ 112.247341][ T29] usb 7-1: Manufacturer: syz [ 112.249276][ T29] usb 7-1: SerialNumber: syz [ 112.428263][ T6020] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 112.464473][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.468055][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.472423][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.481210][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.578176][ T6020] usb 6-1: Invalid ep0 maxpacket: 32 [ 112.611028][ T8766] vhci_hcd: connection reset by peer [ 112.613178][ T46] vhci_hcd vhci_hcd.0: stop threads [ 112.615431][ T46] vhci_hcd vhci_hcd.0: release socket [ 112.620921][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 112.708247][ T6020] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 112.730299][ T29] cdc_ncm 7-1:1.0: bind() failure [ 112.737352][ T29] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 112.740496][ T29] cdc_ncm 7-1:1.1: bind() failure [ 112.752329][ T29] usb 7-1: USB disconnect, device number 20 [ 112.754418][ T8787] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 112.760266][ T8787] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.762892][ T8787] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 112.765627][ T8787] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.768031][ T8787] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 112.868199][ T6020] usb 6-1: Invalid ep0 maxpacket: 32 [ 112.878339][ T6020] usb usb6-port1: attempt power cycle [ 112.905668][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 113.218184][ T6020] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 113.222070][ T29] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 113.241722][ T6020] usb 6-1: Invalid ep0 maxpacket: 32 [ 113.348274][ T29] usb 7-1: device descriptor read/64, error -71 [ 113.368235][ T6020] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 113.389794][ T6020] usb 6-1: Invalid ep0 maxpacket: 32 [ 113.392494][ T6020] usb usb6-port1: unable to enumerate USB device [ 113.398020][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 113.398032][ T40] audit: type=1400 audit(113.302:556): avc: denied { map } for pid=8819 comm="syz.0.864" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.588264][ T29] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 113.684629][ T40] audit: type=1400 audit(113.592:557): avc: denied { read } for pid=8824 comm="syz.0.868" dev="sockfs" ino=26896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.718263][ T29] usb 7-1: device descriptor read/64, error -71 [ 113.829806][ T29] usb usb7-port1: attempt power cycle [ 114.025580][ T8833] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.871'. [ 114.028847][ T8833] netlink: Conntrack attr has 4 unknown bytes [ 114.032369][ T8833] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.871'. [ 114.036912][ T40] audit: type=1400 audit(113.942:558): avc: denied { mount } for pid=8832 comm="syz.3.871" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.045573][ T40] audit: type=1400 audit(113.942:559): avc: denied { mounton } for pid=8832 comm="syz.3.871" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 114.057310][ T40] audit: type=1400 audit(113.962:560): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.093801][ T8835] syzkaller0: entered promiscuous mode [ 114.095754][ T8835] syzkaller0: entered allmulticast mode [ 114.188251][ T29] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 114.208920][ T29] usb 7-1: device descriptor read/8, error -71 [ 114.249031][ T8839] *;eܲ speed is unknown, defaulting to 1000 [ 114.450341][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.875'. [ 114.458407][ T29] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 114.478870][ T29] usb 7-1: device descriptor read/8, error -71 [ 114.588568][ T29] usb usb7-port1: unable to enumerate USB device [ 114.609325][ T40] audit: type=1400 audit(114.512:561): avc: denied { read } for pid=8857 comm="syz.0.879" lport=40721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.777448][ T40] audit: type=1400 audit(114.682:562): avc: denied { setattr } for pid=8869 comm="syz.3.883" name="file1" dev="overlay" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.790050][ T40] audit: type=1400 audit(114.702:563): avc: denied { rename } for pid=8869 comm="syz.3.883" name="#e" dev="tmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.796885][ T40] audit: type=1400 audit(114.702:564): avc: denied { link } for pid=8869 comm="syz.3.883" name="00fb21000140cdd7f9a8b94a65b7da83541ef538edae83882cf304000000000000" dev="tmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.800378][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.807298][ T40] audit: type=1400 audit(114.702:565): avc: denied { bpf } for pid=8867 comm="syz.0.882" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.852002][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.857686][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.925095][ T8876] overlayfs: orphan index entry (index/00fb21000140cdd7f9a8b94a65b7da83541ef538edae83882cf304000000000000, ftype=2000, nlink=1) [ 114.957784][ T1143] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.961954][ T1143] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.967383][ T1143] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.970633][ T1143] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.974610][ T1143] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.977423][ T1143] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.981860][ T1143] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.984926][ T1143] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.038614][ T8880] netlink: 162520 bytes leftover after parsing attributes in process `syz.0.885'. [ 115.044614][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.885'. [ 115.132198][ T8887] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 115.234120][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 115.329327][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.358048][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 115.362135][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.892'. [ 115.365085][ T8903] loop5: detected capacity change from 0 to 7 [ 115.366056][ T8899] netlink: 'syz.1.892': attribute type 7 has an invalid length. [ 115.372721][ C2] blk_print_req_error: 11 callbacks suppressed [ 115.372735][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.379171][ C2] buffer_io_error: 47 callbacks suppressed [ 115.379185][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.385181][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.388744][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.391860][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.395746][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.399293][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.402940][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.406755][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.411040][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.414729][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.418740][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.422418][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.423962][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 115.426382][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.430308][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 115.433835][ T8903] ldm_validate_partition_table(): Disk read failed. [ 115.441407][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.448019][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.452013][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.455502][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.459478][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.463442][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 115.467062][ T8903] Dev loop5: unable to read RDB block 0 [ 115.469917][ T8903] loop5: unable to read partition table [ 115.472268][ T8903] loop5: partition table beyond EOD, truncated [ 115.482562][ T8903] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 115.487733][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.496054][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.502149][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.506255][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.511820][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.517912][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.523975][ T29] usb 5-1: config 0 descriptor?? [ 115.966692][ T29] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 115.995270][ T8937] vivid-000: ================= START STATUS ================= [ 115.997956][ T8937] vivid-000: Test Pattern: 75% Colorbar [ 116.000191][ T8937] vivid-000: Fill Percentage of Frame: 100 [ 116.002435][ T8937] vivid-000: Horizontal Movement: No Movement [ 116.006093][ T8937] vivid-000: Vertical Movement: No Movement [ 116.008546][ T8937] vivid-000: OSD Text Mode: All [ 116.010546][ T8937] vivid-000: Show Border: true [ 116.012532][ T8937] vivid-000: Show Square: false [ 116.014561][ T8937] vivid-000: Sensor Flipped Horizontally: false [ 116.017315][ T8937] vivid-000: Sensor Flipped Vertically: false [ 116.019910][ T8937] vivid-000: Insert SAV Code in Image: false [ 116.021810][ T8937] vivid-000: Insert EAV Code in Image: false [ 116.023750][ T8937] vivid-000: Insert Video Guard Band: false [ 116.025705][ T8937] vivid-000: Reduced Framerate: false [ 116.027580][ T8937] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 116.032381][ T8937] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 116.035769][ T8937] vivid-000: Enable Capture Cropping: true [ 116.038909][ T8937] vivid-000: Enable Capture Composing: false [ 116.041580][ T8937] vivid-000: Enable Capture Scaler: true [ 116.044000][ T8937] vivid-000: Timestamp Source: End of Frame [ 116.046107][ T8937] vivid-000: Colorspace: sRGB [ 116.047753][ T8937] vivid-000: Transfer Function: Default [ 116.049793][ T8937] vivid-000: Y'CbCr Encoding: Default [ 116.051609][ T8937] vivid-000: HSV Encoding: Hue 0-179 [ 116.053399][ T8937] vivid-000: Quantization: Default [ 116.055155][ T8937] vivid-000: Apply Alpha To Red Only: true [ 116.057116][ T8937] vivid-000: Standard Aspect Ratio: 4x3 [ 116.059489][ T8937] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 116.061479][ T8939] QAT: failed to copy from user cfg_data. [ 116.062080][ T8937] vivid-000: DV Timings: 640x480p59 inactive [ 116.066423][ T8937] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 116.068870][ T8937] vivid-000: Maximum EDID Blocks: 2 [ 116.070859][ T8937] vivid-000: Limited RGB Range (16-235): false [ 116.073076][ T8937] vivid-000: Rx RGB Quantization Range: Automatic [ 116.075292][ T8937] vivid-000: Power Present: 0x00000001 [ 116.077158][ T8937] tpg source WxH: 320x180 (R'G'B) [ 116.081175][ T8937] tpg field: 1 [ 116.082884][ T8937] tpg crop: (0,0)/320x180 [ 116.084352][ T8937] tpg compose: (0,0)/320x180 [ 116.085855][ T8937] tpg colorspace: 8 [ 116.087032][ T8937] tpg transfer function: 0/0 [ 116.088483][ T8937] tpg quantization: 0/0 [ 116.089699][ T8937] tpg RGB range: 0/2 [ 116.090861][ T8937] vivid-000: ================== END STATUS ================== [ 116.270269][ T8964] fuse: Bad value for 'group_id' [ 116.272536][ T8964] fuse: Bad value for 'group_id' [ 116.306832][ T8966] vivid-000: ================= START STATUS ================= [ 116.309406][ T8966] vivid-000: Test Pattern: 75% Colorbar [ 116.311174][ T8966] vivid-000: Fill Percentage of Frame: 100 [ 116.313109][ T8966] vivid-000: Horizontal Movement: No Movement [ 116.315054][ T8966] vivid-000: Vertical Movement: No Movement [ 116.316960][ T8966] vivid-000: OSD Text Mode: All [ 116.318727][ T8966] vivid-000: Show Border: true [ 116.320467][ T8966] vivid-000: Show Square: false [ 116.322095][ T8966] vivid-000: Sensor Flipped Horizontally: false [ 116.324140][ T8966] vivid-000: Sensor Flipped Vertically: false [ 116.326089][ T8966] vivid-000: Insert SAV Code in Image: false [ 116.328000][ T8966] vivid-000: Insert EAV Code in Image: false [ 116.329988][ T8966] vivid-000: Insert Video Guard Band: false [ 116.332031][ T8966] vivid-000: Reduced Framerate: false [ 116.333788][ T8966] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 116.336305][ T8966] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 116.338824][ T8966] vivid-000: Enable Capture Cropping: true [ 116.341068][ T8966] vivid-000: Enable Capture Composing: false [ 116.343453][ T8966] vivid-000: Enable Capture Scaler: true [ 116.345457][ T8966] vivid-000: Timestamp Source: End of Frame [ 116.347397][ T8966] vivid-000: Colorspace: sRGB [ 116.348983][ T8966] vivid-000: Transfer Function: Default [ 116.350789][ T8966] vivid-000: Y'CbCr Encoding: Default [ 116.352499][ T8966] vivid-000: HSV Encoding: Hue 0-179 [ 116.354243][ T8966] vivid-000: Quantization: Default [ 116.355908][ T8966] vivid-000: Apply Alpha To Red Only: true [ 116.361147][ T8966] vivid-000: Standard Aspect Ratio: 4x3 [ 116.362909][ T8966] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 116.365430][ T8966] vivid-000: DV Timings: 640x480p59 inactive [ 116.367369][ T8966] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 116.369941][ T8966] vivid-000: Maximum EDID Blocks: 2 [ 116.371595][ T8966] vivid-000: Limited RGB Range (16-235): false [ 116.373537][ T8966] vivid-000: Rx RGB Quantization Range: Automatic [ 116.375652][ T8966] vivid-000: Power Present: 0x00000001 [ 116.377390][ T8966] tpg source WxH: 320x180 (R'G'B) [ 116.379053][ T8966] tpg field: 1 [ 116.380271][ T8966] tpg crop: (0,0)/320x180 [ 116.381647][ T8966] tpg compose: (0,0)/320x180 [ 116.383122][ T8966] tpg colorspace: 8 [ 116.384397][ T8966] tpg transfer function: 0/0 [ 116.385952][ T8966] tpg quantization: 0/0 [ 116.387280][ T8966] tpg RGB range: 0/2 [ 116.388607][ T8966] vivid-000: ================== END STATUS ================== [ 116.431523][ T8969] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 116.595891][ T8973] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 116.845727][ T8984] program syz.1.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.093507][ T8994] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.097457][ T8994] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 117.102333][ T8994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.214190][ T9001] block device autoloading is deprecated and will be removed. [ 117.328540][ T6138] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 117.531492][ T9041] netlink: 'syz.1.943': attribute type 9 has an invalid length. [ 117.537982][ T9041] netlink: 'syz.1.943': attribute type 11 has an invalid length. [ 117.543470][ T9041] netlink: 'syz.1.943': attribute type 12 has an invalid length. [ 117.554053][ T9044] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 117.562337][ T9044] CIFS mount error: No usable UNC path provided in device string! [ 117.562337][ T9044] [ 117.565757][ T9044] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 117.653524][ T9053] xt_hashlimit: size too large, truncated to 1048576 [ 117.659446][ T53] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 117.814189][ T9062] tmpfs: Cannot disable swap on remount [ 117.818275][ T53] usb 5-1: device descriptor read/64, error -32 [ 117.853787][ T9064] overlayfs: failed to resolve './file0': -2 [ 118.058242][ T53] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 118.188494][ T53] usb 5-1: device descriptor read/64, error -32 [ 118.294515][ T9071] ALSA: seq fatal error: cannot create timer (-19) [ 118.428234][ T53] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 118.449343][ T53] usb 5-1: device descriptor read/8, error -32 [ 118.592971][ T6021] IPVS: starting estimator thread 0... [ 118.596976][ T9084] FAULT_INJECTION: forcing a failure. [ 118.596976][ T9084] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.602740][ T9084] CPU: 2 UID: 0 PID: 9084 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.602764][ T9084] Tainted: [L]=SOFTLOCKUP [ 118.602770][ T9084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.602778][ T9084] Call Trace: [ 118.602783][ T9084] [ 118.602790][ T9084] dump_stack_lvl+0x16c/0x1f0 [ 118.602851][ T9084] should_fail_ex+0x512/0x640 [ 118.602939][ T9084] _copy_from_user+0x2e/0xd0 [ 118.602963][ T9084] copy_msghdr_from_user+0x98/0x160 [ 118.602990][ T9084] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 118.603022][ T9084] ___sys_sendmsg+0xfe/0x1d0 [ 118.603043][ T9084] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.603102][ T9084] __sys_sendmsg+0x16d/0x220 [ 118.603123][ T9084] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.603160][ T9084] do_syscall_64+0xcd/0xf80 [ 118.603183][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.603202][ T9084] RIP: 0033:0x7fb7ae78f7c9 [ 118.603215][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.603232][ T9084] RSP: 002b:00007fb7af5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.603249][ T9084] RAX: ffffffffffffffda RBX: 00007fb7ae9e5fa0 RCX: 00007fb7ae78f7c9 [ 118.603263][ T9084] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 118.603271][ T9084] RBP: 00007fb7af5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 118.603282][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.603292][ T9084] R13: 00007fb7ae9e6038 R14: 00007fb7ae9e5fa0 R15: 00007ffc51036998 [ 118.603317][ T9084] [ 118.726011][ T9099] loop4: detected capacity change from 0 to 2560 [ 118.731372][ T9085] IPVS: using max 44 ests per chain, 105600 per kthread [ 118.764571][ T9104] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 118.768361][ T9104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.873211][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 118.873227][ T40] audit: type=1400 audit(374.789:579): avc: denied { getopt } for pid=9108 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.902535][ T9112] macvlan0: entered allmulticast mode [ 118.905102][ T9112] veth1_vlan: entered allmulticast mode [ 118.917367][ T9112] pim6reg: entered allmulticast mode [ 118.918397][ T40] audit: type=1400 audit(374.839:580): avc: denied { load_policy } for pid=9113 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.921619][ T9112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9112 comm=syz.1.968 [ 118.922122][ T9114] SELinux: ebitmap: high bit 33554688 is not equal to the expected value 384 [ 118.926142][ T9114] SELinux: failed to load policy [ 118.955235][ T40] audit: type=1400 audit(374.869:581): avc: denied { checkpoint_restore } for pid=9115 comm="syz.0.970" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.970306][ T40] audit: type=1400 audit(374.869:582): avc: denied { create } for pid=9115 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 118.976784][ T40] audit: type=1400 audit(374.869:583): avc: denied { write } for pid=9115 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 118.991625][ T9119] xt_hashlimit: max too large, truncated to 1048576 [ 119.092041][ T40] audit: type=1400 audit(375.009:584): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 119.115971][ T9132] __nla_validate_parse: 14 callbacks suppressed [ 119.115983][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'. [ 119.180929][ T40] audit: type=1400 audit(375.099:585): avc: denied { mounton } for pid=9136 comm="syz.1.977" path="/244/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 119.229700][ T9138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9138 comm=syz.1.977 [ 119.329735][ T40] audit: type=1400 audit(375.249:586): avc: denied { ioctl } for pid=9152 comm="syz.0.984" path="socket:[25388]" dev="sockfs" ino=25388 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.371923][ T837] usb 5-1: USB disconnect, device number 7 [ 119.430775][ T9158] xt_cluster: node mask cannot exceed total number of nodes [ 119.526062][ T9164] *;eܲ speed is unknown, defaulting to 1000 [ 119.635014][ T9172] IPVS: sed: FWM 3 0x00000003 - no destination available [ 120.153612][ T9189] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 120.225350][ T9192] kvm: user requested TSC rate below hardware speed [ 120.231751][ T9192] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 120.235962][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.249260][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.252437][ T9192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.257371][ T9192] bridge0: entered promiscuous mode [ 120.259627][ T9192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.380895][ T9194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 120.428225][ T6001] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 120.523985][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 120.546893][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 120.562541][ T9205] syzkaller0: entered promiscuous mode [ 120.564491][ T9205] syzkaller0: entered allmulticast mode [ 120.577185][ T9205] tipc: Enabled bearer , priority 0 [ 120.580869][ T9204] tipc: Resetting bearer [ 120.588469][ T6001] usb 7-1: Using ep0 maxpacket: 16 [ 120.592011][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.598012][ T6001] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 120.601182][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.601782][ T9204] tipc: Disabling bearer [ 120.604041][ T6001] usb 7-1: Product: syz [ 120.607193][ T6001] usb 7-1: Manufacturer: syz [ 120.608774][ T6001] usb 7-1: SerialNumber: syz [ 120.613585][ T6001] usb 7-1: config 0 descriptor?? [ 120.617207][ T6001] hub 7-1:0.0: bad descriptor, ignoring hub [ 120.620444][ T6001] hub 7-1:0.0: probe with driver hub failed with error -5 [ 120.625557][ T6001] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input15 [ 120.653028][ T9209] kvm: MONITOR instruction emulated as NOP! [ 120.715509][ T9212] team0: No ports can be present during mode change [ 120.759982][ T40] audit: type=1400 audit(376.679:587): avc: denied { ioctl } for pid=9216 comm="syz.1.1006" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.764784][ T9219] SELinux: policydb string SE LS does not match my string SE Linux [ 120.774328][ T9219] SELinux: failed to load policy [ 120.819326][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 120.823133][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 120.842773][ T9223] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 120.846747][ T9228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1011'. [ 120.888718][ T6003] usb 7-1: USB disconnect, device number 25 [ 120.924188][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 120.927934][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 120.929383][ T9237] syzkaller0: entered promiscuous mode [ 120.933300][ T9237] syzkaller0: entered allmulticast mode [ 120.944877][ T9237] tipc: Enabled bearer , priority 0 [ 120.947861][ T9236] tipc: Resetting bearer [ 120.958018][ T9236] tipc: Disabling bearer [ 121.017654][ T40] audit: type=1400 audit(376.929:588): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 121.093379][ T9254] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1020'. [ 121.234464][ T3601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.238225][ T3601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.241627][ T3601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.245208][ T3601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.278303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.338438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.341997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.518187][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'. [ 121.578424][ T6001] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.740340][ T6001] usb 5-1: config index 0 descriptor too short (expected 27506, got 36) [ 121.743900][ T6001] usb 5-1: config 109 has an invalid descriptor of length 97, skipping remainder of the config [ 121.752203][ T6001] usb 5-1: config 109 has 0 interfaces, different from the descriptor's value: 10 [ 121.758082][ T6001] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 121.762143][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.771217][ T5942] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 121.771846][ T9314] IPv6: addrconf: prefix option has invalid lifetime [ 121.778242][ T9314] 9pnet_virtio: no channels available for device /dev/nullb0 [ 121.976353][ T6001] usb 5-1: string descriptor 0 read error: -71 [ 121.985311][ T6001] usb 5-1: USB disconnect, device number 8 [ 122.085687][ T9333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.338227][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 122.493803][ T53] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 122.496783][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 122.499543][ T53] usb 8-1: Product: syz [ 122.500988][ T53] usb 8-1: Manufacturer: syz [ 122.502833][ T53] usb 8-1: SerialNumber: syz [ 122.506111][ T53] usb 8-1: config 0 descriptor?? [ 122.512921][ T53] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 122.515729][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 122.528670][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.532626][ T53] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 122.535546][ T53] usb 8-1: media controller created [ 122.543607][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.564138][ T9338] syzkaller0: entered promiscuous mode [ 122.566030][ T9338] syzkaller0: entered allmulticast mode [ 122.579727][ T9338] tipc: Enabled bearer , priority 0 [ 122.583005][ T9336] tipc: Resetting bearer [ 122.597530][ T9336] tipc: Disabling bearer [ 122.664854][ T9347] *;eܲ speed is unknown, defaulting to 1000 [ 122.711746][ T9333] cxusb: i2c wr: len=80 is too big! [ 122.711746][ T9333] [ 122.771839][ T9333] team0 (unregistering): Port device team_slave_0 removed [ 122.781058][ T9333] team0 (unregistering): Port device team_slave_1 removed [ 122.879073][ T53] cxusb: set interface failed [ 122.880910][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 122.911814][ T53] DVB: Unable to find symbol mt352_attach() [ 122.914575][ T53] dvb-usb: bulk message failed: -22 (5/0) [ 122.920647][ T53] zl10353_read_register: readreg error (reg=127, ret==-121) [ 122.923458][ T53] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 122.975995][ T9376] 9p: Bad value for 'wfdno' [ 122.988189][ T53] rc_core: IR keymap rc-dvico-mce not found [ 122.990166][ T53] Registered IR keymap rc-empty [ 122.992739][ T53] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 122.997876][ T53] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input16 [ 123.010639][ T53] dvb-usb: schedule remote query interval to 100 msecs. [ 123.013010][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 123.022656][ T53] usb 8-1: USB disconnect, device number 9 [ 123.118052][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 123.143023][ T9398] IPVS: sed: FWM 3 0x00000003 - no destination available [ 123.440983][ T9429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9429 comm=syz.1.1076 [ 123.708235][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.713975][ T9438] gfs2: error -5 reading superblock [ 123.847913][ T9452] geneve2: entered promiscuous mode [ 123.850918][ T9452] geneve2: entered allmulticast mode [ 124.278037][ T9488] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 124.294313][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 124.294323][ T40] audit: type=1400 audit(380.209:605): avc: denied { append } for pid=9489 comm="syz.0.1094" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.295869][ T9490] random: crng reseeded on system resumption [ 124.296726][ T40] audit: type=1400 audit(380.209:606): avc: denied { open } for pid=9489 comm="syz.0.1094" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.508408][ T53] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 124.511712][ T40] audit: type=1326 audit(380.429:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.1.1098" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74b9d8f7c9 code=0x0 [ 124.558293][ T837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.668272][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 124.672659][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.679175][ T53] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.682941][ T53] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.686357][ T53] usb 7-1: Product: syz [ 124.689121][ T53] usb 7-1: Manufacturer: syz [ 124.691224][ T53] usb 7-1: SerialNumber: syz [ 124.698494][ T53] usb 7-1: config 0 descriptor?? [ 124.701380][ T9486] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.705586][ T53] hub 7-1:0.0: bad descriptor, ignoring hub [ 124.708355][ T53] hub 7-1:0.0: probe with driver hub failed with error -5 [ 124.714589][ T837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.718470][ T837] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.722891][ T837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.726789][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 124.735910][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 124.742712][ T837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.746588][ T837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.750531][ T837] usb 5-1: Product: syz [ 124.752254][ T837] usb 5-1: Manufacturer: syz [ 124.760285][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 124.762602][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 124.768527][ T837] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 124.771040][ T837] cdc_wdm 5-1:1.0: Unknown control protocol [ 124.819006][ T40] audit: type=1400 audit(380.739:608): avc: denied { relabelfrom } for pid=9506 comm="syz.3.1101" name="NETLINK" dev="sockfs" ino=28272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.819152][ T9507] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 124.833304][ T40] audit: type=1400 audit(380.749:609): avc: denied { relabelto } for pid=9506 comm="syz.3.1101" name="NETLINK" dev="sockfs" ino=28272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0" [ 124.876583][ T9509] netlink: 'syz.3.1102': attribute type 29 has an invalid length. [ 124.881085][ T9509] netlink: 'syz.3.1102': attribute type 29 has an invalid length. [ 124.885378][ T9509] __nla_validate_parse: 7 callbacks suppressed [ 124.885394][ T9509] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1102'. [ 124.893474][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1102'. [ 124.935954][ T40] audit: type=1400 audit(380.849:610): avc: denied { connect } for pid=9508 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.945442][ T40] audit: type=1400 audit(380.859:611): avc: denied { create } for pid=9508 comm="syz.3.1102" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.954183][ T40] audit: type=1400 audit(380.859:612): avc: denied { map } for pid=9508 comm="syz.3.1102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.964015][ T40] audit: type=1400 audit(380.859:613): avc: denied { read write } for pid=9508 comm="syz.3.1102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.014024][ T9] usb 5-1: USB disconnect, device number 9 [ 125.025146][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 125.030764][ T9515] Unrecognized hibernate image header format! [ 125.033182][ T9515] PM: hibernation: Image mismatch: architecture specific data [ 125.165337][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.168970][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.240235][ T5942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 125.244069][ T5942] Bluetooth: hci1: Injecting HCI hardware error event [ 125.247483][ T5942] Bluetooth: hci1: hardware error 0x00 [ 125.276828][ T40] audit: type=1800 audit(381.189:614): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1105" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 125.414715][ T9526] cgroup: fork rejected by pids controller in /syz3 [ 125.418757][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 125.779102][ T1144] raw-gadget.0 gadget.2: failed to queue suspend event [ 125.848264][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 125.898284][ T1144] raw-gadget.0 gadget.2: failed to queue suspend event [ 125.978229][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.002879][ T4139] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.010208][ T9572] syzkaller0: entered promiscuous mode [ 126.012101][ T9572] syzkaller0: entered allmulticast mode [ 126.078258][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.123516][ T4139] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.198788][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.219085][ T4139] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.245483][ T9577] tipc: Enabled bearer , priority 0 [ 126.276123][ T9571] tipc: Resetting bearer [ 126.299049][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.367779][ T4200] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.438309][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.459094][ T9571] tipc: Disabling bearer [ 126.468881][ T4200] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.538255][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.569120][ T4200] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.648345][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.718657][ T4139] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.798191][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 126.815632][ T9595] pim6reg: entered allmulticast mode [ 126.829769][ T1206] raw-gadget.0 gadget.2: failed to queue suspend event [ 126.834796][ T9597] IPVS: sed: FWM 3 0x00000003 - no destination available [ 126.837710][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 126.908689][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 127.157608][ T9606] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 127.220809][ T1143] raw-gadget.0 gadget.2: failed to queue suspend event [ 127.229343][ T9609] bond3: option packets_per_slave: invalid value (93952) [ 127.232515][ T9609] bond3: option packets_per_slave: allowed values 0 - 65535 [ 127.298218][ T9486] raw-gadget.0 gadget.2: failed to queue resume event [ 127.311346][ T9612] kvm: kvm [9611]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000008) = 0xfffffffffffffffa [ 127.318328][ T5942] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 127.329763][ T1144] raw-gadget.0 gadget.2: failed to queue suspend event [ 127.336071][ T9609] bond3 (unregistering): Released all slaves [ 127.406922][ T9486] raw-gadget.0 gadget.2: failed to queue disconnect event [ 127.510152][ T141] usb 7-1: USB disconnect, device number 26 [ 127.587955][ T9618] binder_alloc: 9616: binder_alloc_buf, no vma [ 127.635365][ T9618] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 127.638775][ T9618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1126'. [ 127.984926][ T9647] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 128.082122][ T9658] xt_nfacct: accounting object `syz0' does not exist [ 128.428186][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 128.508255][ T1284] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.546171][ T9551] syz.3.1105 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 128.586477][ T9551] CPU: 2 UID: 0 PID: 9551 Comm: syz.3.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.586497][ T9551] Tainted: [L]=SOFTLOCKUP [ 128.586500][ T9551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.586506][ T9551] Call Trace: [ 128.586511][ T9551] [ 128.586515][ T9551] dump_stack_lvl+0x16c/0x1f0 [ 128.586559][ T9551] dump_header+0x101/0x960 [ 128.586579][ T9551] oom_kill_process+0x176/0x910 [ 128.586597][ T9551] out_of_memory+0x350/0x1700 [ 128.586613][ T9551] ? __lock_acquire+0x436/0x2890 [ 128.586627][ T9551] ? __pfx_out_of_memory+0x10/0x10 [ 128.586647][ T9551] mem_cgroup_out_of_memory+0x118/0x130 [ 128.586663][ T9551] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 128.586677][ T9551] ? do_raw_spin_unlock+0x172/0x230 [ 128.586693][ T9551] try_charge_memcg+0x695/0xd30 [ 128.586710][ T9551] ? __pfx_try_charge_memcg+0x10/0x10 [ 128.586724][ T9551] ? __print_lock_name+0xb1/0xe0 [ 128.586740][ T9551] ? rcu_read_unlock+0x17/0x60 [ 128.586759][ T9551] charge_memcg+0x8a/0x230 [ 128.586773][ T9551] __mem_cgroup_charge+0x2b/0x1e0 [ 128.586789][ T9551] filemap_add_folio+0xe6/0x610 [ 128.586800][ T9551] ? __pfx_filemap_add_folio+0x10/0x10 [ 128.586815][ T9551] __filemap_get_folio_mpol+0x511/0xc60 [ 128.586829][ T9551] filemap_fault+0x684/0x29d0 [ 128.586843][ T9551] ? __pfx_filemap_fault+0x10/0x10 [ 128.586859][ T9551] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.586868][ T9551] __do_fault+0x10d/0x490 [ 128.586879][ T9551] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.586888][ T9551] do_fault+0xae4/0x1ad0 [ 128.586901][ T9551] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.586913][ T9551] __handle_mm_fault+0x1919/0x2bb0 [ 128.586933][ T9551] ? __pfx___handle_mm_fault+0x10/0x10 [ 128.586949][ T9551] ? __pte_offset_map_lock+0x174/0x310 [ 128.586962][ T9551] ? find_held_lock+0x2b/0x80 [ 128.586982][ T9551] ? follow_page_pte+0x5cf/0x1390 [ 128.586998][ T9551] handle_mm_fault+0x3fe/0xad0 [ 128.587016][ T9551] __get_user_pages+0x54e/0x3590 [ 128.587035][ T9551] ? __pfx___get_user_pages+0x10/0x10 [ 128.587052][ T9551] get_dump_page+0x257/0x3d0 [ 128.587066][ T9551] ? __pfx_get_dump_page+0x10/0x10 [ 128.587080][ T9551] ? cgroup1_freezing+0x136/0x3b0 [ 128.587093][ T9551] dump_user_range+0x195/0xb70 [ 128.587113][ T9551] ? __pfx_dump_user_range+0x10/0x10 [ 128.587130][ T9551] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 128.587145][ T9551] ? __pfx_writenote+0x10/0x10 [ 128.587159][ T9551] elf_core_dump+0x29c3/0x3c10 [ 128.587176][ T9551] ? __pfx_elf_core_dump+0x10/0x10 [ 128.587185][ T9551] ? kasan_save_stack+0x33/0x60 [ 128.587197][ T9551] ? kasan_save_track+0x14/0x30 [ 128.587207][ T9551] ? __kasan_kmalloc+0xaa/0xb0 [ 128.587217][ T9551] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 128.587229][ T9551] ? vfs_coredump+0x1dd9/0x55e0 [ 128.587243][ T9551] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 128.587257][ T9551] ? irqentry_exit+0x38a/0x8c0 [ 128.587271][ T9551] ? asm_exc_page_fault+0x26/0x30 [ 128.587284][ T9551] ? 0xffffffffff600000 [ 128.587316][ T9551] ? vfs_coredump+0x2b85/0x55e0 [ 128.587330][ T9551] vfs_coredump+0x2b85/0x55e0 [ 128.587351][ T9551] ? __pfx_vfs_coredump+0x10/0x10 [ 128.587366][ T9551] ? __lock_acquire+0x436/0x2890 [ 128.587380][ T9551] ? __lock_acquire+0x436/0x2890 [ 128.587393][ T9551] ? lock_acquire+0x179/0x330 [ 128.587408][ T9551] ? lock_acquire+0x179/0x330 [ 128.587429][ T9551] ? arch_stack_walk+0xa6/0x100 [ 128.587447][ T9551] ? stack_trace_save+0x8e/0xc0 [ 128.587459][ T9551] ? __pfx_stack_trace_save+0x10/0x10 [ 128.587470][ T9551] ? stack_depot_save_flags+0x29/0x9b0 [ 128.587487][ T9551] ? __lock_acquire+0x436/0x2890 [ 128.587500][ T9551] ? kasan_save_stack+0x42/0x60 [ 128.587535][ T9551] ? proc_coredump_connector+0x2d1/0x4f0 [ 128.587549][ T9551] ? __pfx_proc_coredump_connector+0x10/0x10 [ 128.587602][ T9551] ? rcu_is_watching+0x12/0xc0 [ 128.587614][ T9551] get_signal+0x22e1/0x26d0 [ 128.587635][ T9551] ? __pfx_get_signal+0x10/0x10 [ 128.587654][ T9551] arch_do_signal_or_restart+0x8f/0x7e0 [ 128.587669][ T9551] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 128.587687][ T9551] ? do_user_addr_fault+0x926/0x1370 [ 128.587703][ T9551] irqentry_exit+0x38a/0x8c0 [ 128.587719][ T9551] asm_exc_page_fault+0x26/0x30 [ 128.587728][ T9551] RIP: 0033:0x7f3230f8f7c9 [ 128.587740][ T9551] Code: Unable to access opcode bytes at 0x7f3230f8f79f. [ 128.587745][ T9551] RSP: 002b:00007f322f1d4f08 EFLAGS: 00010246 [ 128.587753][ T9551] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3230f8f7c9 [ 128.587760][ T9551] RDX: 00007f322f1d4f20 RSI: 0000000000000058 RDI: 00007f322f1d4f20 [ 128.587766][ T9551] RBP: 00007f3231013f91 R08: 0000000000000000 R09: 0000000000000058 [ 128.587772][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.587777][ T9551] R13: 00007f32311e6128 R14: 00007f32311e6090 R15: 00007ffd85b094f8 [ 128.587791][ T9551] [ 128.587796][ T9551] memory: usage 307200kB, limit 307200kB, failcnt 20227 [ 128.592066][ T29] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 128.616927][ T9551] memory+swap: usage 431952kB, limit 9007199254740988kB, failcnt 0 [ 128.624031][ T29] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.651896][ T9551] kmem: usage 5044kB, limit 9007199254740988kB, failcnt 0 [ 128.652851][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.654889][ T9667] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 128.658633][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.658654][ T29] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.658670][ T29] usb 6-1: Product: syz [ 128.658681][ T29] usb 6-1: Manufacturer: syz [ 128.658692][ T29] usb 6-1: SerialNumber: syz [ 128.663287][ T9551] Memory cgroup stats for [ 128.669566][ T29] usb 6-1: config 0 descriptor?? [ 128.682162][ T1284] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.698995][ T9551] /syz3 [ 128.701856][ T1284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.702864][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 128.702884][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 128.704673][ T29] usb 6-1: selecting invalid altsetting 0 [ 128.709604][ T1284] usb 5-1: Product: syz [ 128.760423][ T9551] : [ 128.760479][ T9551] cache 309383168 [ 128.760485][ T9551] rss 20480 [ 128.760489][ T9551] rss_huge 0 [ 128.760493][ T9551] shmem 309239808 [ 128.760497][ T9551] mapped_file 0 [ 128.760501][ T9551] dirty 0 [ 128.760505][ T9551] writeback 0 [ 128.760509][ T9551] workingset_refault_anon 629 [ 128.760514][ T9551] workingset_refault_file 815 [ 128.760518][ T9551] swap 127729664 [ 128.760522][ T9551] swapcached 8192 [ 128.760527][ T9551] pgpgin 172331 [ 128.760531][ T9551] pgpgout 98836 [ 128.763273][ T1284] usb 5-1: Manufacturer: syz [ 128.768992][ T9667] bond2: entered promiscuous mode [ 128.772396][ T1284] usb 5-1: SerialNumber: syz [ 128.775207][ T9667] bond2: entered allmulticast mode [ 128.783307][ T9551] pgfault 84711 [ 128.801095][ T9667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.805382][ T1284] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.864482][ T6003] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.880798][ T9671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.898175][ T9551] pgmajfault 54 [ 128.899792][ T9551] inactive_anon 144355328 [ 128.901643][ T9551] active_anon 164909056 [ 128.903449][ T9551] inactive_file 143360 [ 128.905177][ T9551] active_file 0 [ 128.906511][ T9551] unevictable 0 [ 128.908316][ T9551] hierarchical_memory_limit 314572800 [ 128.910643][ T9551] hierarchical_memsw_limit 9223372036854771712 [ 128.913363][ T9551] total_cache 309383168 [ 128.915382][ T9551] total_rss 20480 [ 128.917165][ T9551] total_rss_huge 0 [ 128.919059][ T9551] total_shmem 309239808 [ 128.920994][ T9551] total_mapped_file 0 [ 128.922797][ T9551] total_dirty 0 [ 128.924411][ T9551] total_writeback 0 [ 128.926092][ T9551] total_workingset_refault_anon 629 [ 128.928733][ T9551] total_workingset_refault_file 815 [ 128.931007][ T9551] total_swap 127729664 [ 128.932841][ T9551] total_swapcached 8192 [ 128.934651][ T9551] total_pgpgin 172331 [ 128.936399][ T9551] total_pgpgout 98836 [ 128.938275][ T9551] total_pgfault 84711 [ 128.940085][ T9551] total_pgmajfault 54 [ 128.941867][ T9551] total_inactive_anon 144355328 [ 128.944025][ T9551] total_active_anon 164909056 [ 128.946117][ T9551] total_inactive_file 143360 [ 128.948486][ T9551] total_active_file 0 [ 128.950302][ T9551] total_unevictable 0 [ 128.952123][ T9551] anon_cost 0 [ 128.953628][ T9551] file_cost 0 [ 128.955137][ T9551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1105,pid=9537,uid=0 [ 128.962337][ T9551] Memory cgroup out of memory: Killed process 9537 (syz.3.1105) total-vm:49268kB, anon-rss:0kB, file-rss:33152kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 129.519610][ T9676] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1145'. [ 129.641741][ T9675] syz.3.1145 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 129.657097][ T9675] CPU: 3 UID: 0 PID: 9675 Comm: syz.3.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.657125][ T9675] Tainted: [L]=SOFTLOCKUP [ 129.657131][ T9675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.657142][ T9675] Call Trace: [ 129.657147][ T9675] [ 129.657154][ T9675] dump_stack_lvl+0x16c/0x1f0 [ 129.657182][ T9675] dump_header+0x101/0x960 [ 129.657211][ T9675] oom_kill_process+0x176/0x910 [ 129.657239][ T9675] out_of_memory+0x350/0x1700 [ 129.657265][ T9675] ? __lock_acquire+0x436/0x2890 [ 129.657289][ T9675] ? __pfx_out_of_memory+0x10/0x10 [ 129.657322][ T9675] mem_cgroup_out_of_memory+0x118/0x130 [ 129.657339][ T9675] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 129.657363][ T9675] ? do_raw_spin_unlock+0x172/0x230 [ 129.657390][ T9675] try_charge_memcg+0x695/0xd30 [ 129.657417][ T9675] ? __pfx_try_charge_memcg+0x10/0x10 [ 129.657439][ T9675] ? __print_lock_name+0xb1/0xe0 [ 129.657464][ T9675] ? rcu_read_unlock+0x17/0x60 [ 129.657496][ T9675] charge_memcg+0x8a/0x230 [ 129.657518][ T9675] __mem_cgroup_charge+0x2b/0x1e0 [ 129.657544][ T9675] filemap_add_folio+0xe6/0x610 [ 129.657563][ T9675] ? __pfx_filemap_add_folio+0x10/0x10 [ 129.657588][ T9675] __filemap_get_folio_mpol+0x511/0xc60 [ 129.657619][ T9675] filemap_fault+0x684/0x29d0 [ 129.657641][ T9675] ? __pfx_filemap_fault+0x10/0x10 [ 129.657671][ T9675] __do_fault+0x10d/0x490 [ 129.657686][ T9675] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 129.657712][ T9675] do_fault+0x302/0x1ad0 [ 129.657749][ T9675] ? __pfx_filemap_map_pages+0x10/0x10 [ 129.657771][ T9675] __handle_mm_fault+0x1919/0x2bb0 [ 129.657802][ T9675] ? reacquire_held_locks+0xcd/0x1f0 [ 129.657822][ T9675] ? __pfx___handle_mm_fault+0x10/0x10 [ 129.657850][ T9675] ? lock_vma_under_rcu+0x176/0x580 [ 129.657885][ T9675] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 129.657918][ T9675] handle_mm_fault+0x3fe/0xad0 [ 129.657948][ T9675] do_user_addr_fault+0x60c/0x1370 [ 129.657977][ T9675] ? rcu_is_watching+0x12/0xc0 [ 129.657997][ T9675] exc_page_fault+0x64/0xc0 [ 129.658020][ T9675] asm_exc_page_fault+0x26/0x30 [ 129.658036][ T9675] RIP: 0033:0x7f3230e6148c [ 129.658050][ T9675] Code: 42 eb 00 01 48 8d 50 ff 48 89 15 e7 42 eb 00 88 48 ff 8b 2d ce 42 eb 00 e8 21 7a ff ff 48 8b 05 da 42 eb 00 41 bc 04 00 00 00 <89> 28 48 83 c0 08 66 44 89 60 fc 83 05 ca 42 eb 00 01 66 83 3d c6 [ 129.658066][ T9675] RSP: 002b:00007ffd85b095a0 EFLAGS: 00010202 [ 129.658080][ T9675] RAX: 0000001b2f82421c RBX: 00007f3231d15720 RCX: 0000000000000003 [ 129.658090][ T9675] RDX: 0000001b2f82421c RSI: 0000000000000008 RDI: 00007f3231d15720 [ 129.658100][ T9675] RBP: 0000000000000061 R08: 00007f32311e6038 R09: 00007f32311d2000 [ 129.658110][ T9675] R10: 00007f32309ff008 R11: 0000000000000005 R12: 0000000000000004 [ 129.658120][ T9675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.658144][ T9675] [ 129.752871][ T9675] memory: usage 307200kB, limit 307200kB, failcnt 27271 [ 129.755891][ T9675] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 129.759424][ T9675] kmem: usage 4996kB, limit 9007199254740988kB, failcnt 0 [ 129.762351][ T9675] Memory cgroup stats for /syz3: [ 129.762606][ T9675] cache 309239808 [ 129.766201][ T9675] rss 196608 [ 129.767634][ T9675] rss_huge 0 [ 129.769145][ T9675] shmem 309231616 [ 129.770725][ T9675] mapped_file 0 [ 129.772157][ T9675] dirty 0 [ 129.773322][ T9675] writeback 0 [ 129.774614][ T9675] workingset_refault_anon 653 [ 129.776288][ T9675] workingset_refault_file 7759 [ 129.777879][ T9675] swap 127975424 [ 129.779132][ T9675] swapcached 20480 [ 129.780322][ T9675] pgpgin 189332 [ 129.781485][ T9675] pgpgout 115825 [ 129.782709][ T9675] pgfault 85746 [ 129.783935][ T9675] pgmajfault 270 [ 129.785157][ T9675] inactive_anon 129019904 [ 129.786747][ T9675] active_anon 180428800 [ 129.788173][ T9675] inactive_file 8192 [ 129.789454][ T9675] active_file 0 [ 129.790614][ T9675] unevictable 0 [ 129.791786][ T9675] hierarchical_memory_limit 314572800 [ 129.793564][ T9675] hierarchical_memsw_limit 9223372036854771712 [ 129.795729][ T9675] total_cache 309239808 [ 129.797242][ T9675] total_rss 196608 [ 129.798814][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 129.798822][ T40] audit: type=1400 audit(385.719:623): avc: denied { ioctl } for pid=9679 comm="syz.2.1146" path="socket:[30520]" dev="sockfs" ino=30520 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.803876][ T1284] usb 5-1: USB disconnect, device number 10 [ 129.808689][ T9675] total_rss_huge 0 [ 129.808794][ T9675] total_shmem 309231616 [ 129.808842][ T9675] total_mapped_file 0 [ 129.808849][ T9675] total_dirty 0 [ 129.808854][ T9675] total_writeback 0 [ 129.808858][ T9675] total_workingset_refault_anon 653 [ 129.808862][ T9675] total_workingset_refault_file 7759 [ 129.808867][ T9675] total_swap 127975424 [ 129.808871][ T9675] total_swapcached 20480 [ 129.808875][ T9675] total_pgpgin 189332 [ 129.808879][ T9675] total_pgpgout 115825 [ 129.808883][ T9675] total_pgfault 85746 [ 129.808887][ T9675] total_pgmajfault 270 [ 129.808891][ T9675] total_inactive_anon 129019904 [ 129.808896][ T9675] total_active_anon 180428800 [ 129.808900][ T9675] total_inactive_file 8192 [ 129.808904][ T9675] total_active_file 0 [ 129.808908][ T9675] total_unevictable 0 [ 129.808912][ T9675] anon_cost 0 [ 129.808916][ T9675] file_cost 0 [ 129.808921][ T9675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1105,pid=9541,uid=0 [ 129.810397][ T9675] Memory cgroup out of memory: Killed process 9541 (syz.3.1105) total-vm:49268kB, anon-rss:0kB, file-rss:33592kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 129.881949][ T9685] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.888146][ T6003] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 129.890595][ T6003] ath9k_htc: Failed to initialize the device [ 129.892875][ T1284] usb 5-1: ath9k_htc: USB layer deinitialized [ 130.063176][ T9675] syz.3.1145 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.072319][ T141] hid (null): unknown global tag 0xf8 [ 130.074153][ T141] hid (null): unknown global tag 0xc [ 130.075924][ T141] hid (null): unknown global tag 0xe [ 130.078203][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.3.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.078220][ T9675] Tainted: [L]=SOFTLOCKUP [ 130.078224][ T9675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.078230][ T9675] Call Trace: [ 130.078234][ T9675] [ 130.078238][ T9675] dump_stack_lvl+0x16c/0x1f0 [ 130.078257][ T9675] dump_header+0x101/0x960 [ 130.078275][ T9675] oom_kill_process+0x176/0x910 [ 130.078293][ T9675] out_of_memory+0x350/0x1700 [ 130.078309][ T9675] ? __lock_acquire+0x436/0x2890 [ 130.078324][ T9675] ? __pfx_out_of_memory+0x10/0x10 [ 130.078344][ T9675] mem_cgroup_out_of_memory+0x118/0x130 [ 130.078355][ T9675] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 130.078369][ T9675] ? do_raw_spin_unlock+0x172/0x230 [ 130.078385][ T9675] try_charge_memcg+0x695/0xd30 [ 130.078402][ T9675] ? __pfx_try_charge_memcg+0x10/0x10 [ 130.078416][ T9675] ? __print_lock_name+0xb1/0xe0 [ 130.078431][ T9675] ? rcu_read_unlock+0x17/0x60 [ 130.078449][ T9675] charge_memcg+0x8a/0x230 [ 130.078463][ T9675] __mem_cgroup_charge+0x2b/0x1e0 [ 130.078479][ T9675] filemap_add_folio+0xe6/0x610 [ 130.078490][ T9675] ? __pfx_filemap_add_folio+0x10/0x10 [ 130.078504][ T9675] __filemap_get_folio_mpol+0x511/0xc60 [ 130.078518][ T9675] filemap_fault+0x684/0x29d0 [ 130.078531][ T9675] ? __pfx_filemap_fault+0x10/0x10 [ 130.078548][ T9675] __do_fault+0x10d/0x490 [ 130.078557][ T9675] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 130.078573][ T9675] do_fault+0x302/0x1ad0 [ 130.078585][ T9675] ? __pfx_filemap_map_pages+0x10/0x10 [ 130.078598][ T9675] __handle_mm_fault+0x1919/0x2bb0 [ 130.078630][ T9675] ? reacquire_held_locks+0xcd/0x1f0 [ 130.078649][ T9675] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.078676][ T9675] ? lock_vma_under_rcu+0x176/0x580 [ 130.078710][ T9675] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 130.078729][ T9675] handle_mm_fault+0x3fe/0xad0 [ 130.078747][ T9675] do_user_addr_fault+0x60c/0x1370 [ 130.078762][ T9675] ? rcu_is_watching+0x12/0xc0 [ 130.078773][ T9675] exc_page_fault+0x64/0xc0 [ 130.078788][ T9675] asm_exc_page_fault+0x26/0x30 [ 130.078798][ T9675] RIP: 0033:0x7f3230e6148c [ 130.078808][ T9675] Code: 42 eb 00 01 48 8d 50 ff 48 89 15 e7 42 eb 00 88 48 ff 8b 2d ce 42 eb 00 e8 21 7a ff ff 48 8b 05 da 42 eb 00 41 bc 04 00 00 00 <89> 28 48 83 c0 08 66 44 89 60 fc 83 05 ca 42 eb 00 01 66 83 3d c6 [ 130.078818][ T9675] RSP: 002b:00007ffd85b095a0 EFLAGS: 00010202 [ 130.078826][ T9675] RAX: 0000001b2f82421c RBX: 00007f3231d15720 RCX: 0000000000000003 [ 130.078833][ T9675] RDX: 0000001b2f82421c RSI: 0000000000000008 RDI: 00007f3231d15720 [ 130.078839][ T9675] RBP: 0000000000000061 R08: 00007f32311e6038 R09: 00007f32311d2000 [ 130.078845][ T9675] R10: 00007f32309ff008 R11: 0000000000000005 R12: 0000000000000004 [ 130.078851][ T9675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.078866][ T9675] [ 130.078870][ T9675] memory: usage 307200kB, limit 307200kB, failcnt 28106 [ 130.083203][ T141] hid-generic FFF2:FFFFFFFD:0007.0005: unexpected long global item [ 130.122861][ T9675] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 130.124776][ T141] hid-generic FFF2:FFFFFFFD:0007.0005: probe with driver hid-generic failed with error -22 [ 130.128197][ T9675] kmem: usage 4988kB, limit 9007199254740988kB, failcnt 0 [ 130.128213][ T9675] Memory cgroup stats for /syz3 [ 130.227602][ T9704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1156'. [ 130.274524][ T9675] : [ 130.274595][ T9675] cache 305770496 [ 130.276632][ T9675] rss 196608 [ 130.277681][ T9675] rss_huge 0 [ 130.278924][ T9675] shmem 303755264 [ 130.280126][ T9675] mapped_file 1585152 [ 130.281419][ T9675] dirty 0 [ 130.282513][ T9675] writeback 0 [ 130.283690][ T9675] workingset_refault_anon 653 [ 130.285217][ T9675] workingset_refault_file 8462 [ 130.285913][ T40] audit: type=1400 audit(386.199:624): avc: denied { create } for pid=9706 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 130.286726][ T9675] swap 127463424 [ 130.286732][ T9675] swapcached 24576 [ 130.286736][ T9675] pgpgin 191449 [ 130.299454][ T9675] pgpgout 118755 [ 130.300629][ T9675] pgfault 85821 [ 130.301755][ T9675] pgmajfault 287 [ 130.303199][ T9675] inactive_anon 157196288 [ 130.305119][ T9675] active_anon 146317312 [ 130.306862][ T9675] inactive_file 413696 [ 130.309034][ T9675] active_file 1437696 [ 130.310966][ T9675] unevictable 0 [ 130.312486][ T9675] hierarchical_memory_limit 314572800 [ 130.314760][ T9675] hierarchical_memsw_limit 9223372036854771712 [ 130.317392][ T9675] total_cache 305770496 [ 130.319607][ T9675] total_rss 196608 [ 130.321179][ T9675] total_rss_huge 0 [ 130.322495][ T9675] total_shmem 303755264 [ 130.323967][ T9675] total_mapped_file 1585152 [ 130.325440][ T9675] total_dirty 0 [ 130.326690][ T9675] total_writeback 0 [ 130.327999][ T9675] total_workingset_refault_anon 653 [ 130.330155][ T9675] total_workingset_refault_file 8462 [ 130.331974][ T9675] total_swap 127463424 [ 130.333551][ T9675] total_swapcached 24576 [ 130.334937][ T9675] total_pgpgin 191449 [ 130.336368][ T9675] total_pgpgout 118755 [ 130.337668][ T9675] total_pgfault 85821 [ 130.345344][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 130.352222][ T9675] total_pgmajfault 287 [ 130.353999][ T9675] total_inactive_anon 157196288 [ 130.356129][ T9675] total_active_anon 146317312 [ 130.357687][ T9675] total_inactive_file 413696 [ 130.372500][ T9675] total_active_file 1437696 [ 130.374528][ T9675] total_unevictable 0 [ 130.376294][ T9675] anon_cost 0 [ 130.388168][ T9675] file_cost 0 [ 130.389286][ T9675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1105,pid=9530,uid=0 [ 130.408787][ T9675] Memory cgroup out of memory: Killed process 9530 (syz.3.1105) total-vm:49268kB, anon-rss:0kB, file-rss:33580kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 130.542533][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 130.557221][ T9733] FAULT_INJECTION: forcing a failure. [ 130.557221][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.583882][ T9733] CPU: 3 UID: 0 PID: 9733 Comm: syz.3.1164 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.583901][ T9733] Tainted: [L]=SOFTLOCKUP [ 130.583905][ T9733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.583911][ T9733] Call Trace: [ 130.583915][ T9733] [ 130.583919][ T9733] dump_stack_lvl+0x16c/0x1f0 [ 130.583938][ T9733] should_fail_ex+0x512/0x640 [ 130.583950][ T9733] _copy_from_user+0x2e/0xd0 [ 130.583966][ T9733] kstrtouint_from_user+0xd6/0x1d0 [ 130.583978][ T9733] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.583990][ T9733] ? __lock_acquire+0x436/0x2890 [ 130.584004][ T9733] ? lock_acquire+0x179/0x330 [ 130.584019][ T9733] proc_fail_nth_write+0x83/0x220 [ 130.584031][ T9733] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.584045][ T9733] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.584054][ T9733] vfs_write+0x2a0/0x11d0 [ 130.584069][ T9733] ? __pfx___mutex_lock+0x10/0x10 [ 130.584086][ T9733] ? __pfx_vfs_write+0x10/0x10 [ 130.584102][ T9733] ? __fget_files+0x20e/0x3c0 [ 130.584121][ T9733] ksys_write+0x12a/0x250 [ 130.584134][ T9733] ? __pfx_ksys_write+0x10/0x10 [ 130.584147][ T9733] ? fput+0x70/0xf0 [ 130.584158][ T9733] do_syscall_64+0xcd/0xf80 [ 130.584173][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.584183][ T9733] RIP: 0033:0x7f3230f8e27f [ 130.584192][ T9733] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 130.584201][ T9733] RSP: 002b:00007f322f1f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 130.584211][ T9733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3230f8e27f [ 130.584218][ T9733] RDX: 0000000000000001 RSI: 00007f322f1f60a0 RDI: 0000000000000004 [ 130.584223][ T9733] RBP: 00007f322f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.584229][ T9733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 130.584235][ T9733] R13: 00007f32311e6038 R14: 00007f32311e5fa0 R15: 00007ffd85b094f8 [ 130.584248][ T9733] [ 130.727082][ T5942] Bluetooth: hci3: link tx timeout [ 130.730800][ T5942] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 130.735695][ T5942] Bluetooth: hci3: link tx timeout [ 130.737655][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.745290][ T9541] syz.3.1105 (9541) used greatest stack depth: 17720 bytes left [ 130.877318][ T9751] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 130.882224][ T9751] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.927122][ T9755] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.988446][ T9754] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1173'. [ 130.999351][ T9754] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1173'. [ 131.002271][ T9754] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1173'. [ 131.009414][ T9755] overlayfs: failed to get inode (-116) [ 131.012753][ T9755] overlayfs: failed to get inode (-116) [ 131.015356][ T9754] overlayfs: failed to get inode (-116) [ 131.017855][ T9754] overlayfs: failed to get inode (-116) [ 131.152212][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 131.163879][ T40] audit: type=1400 audit(387.079:625): avc: denied { create } for pid=9766 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.176621][ T40] audit: type=1400 audit(387.089:626): avc: denied { bind } for pid=9766 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.185646][ T40] audit: type=1400 audit(387.089:627): avc: denied { accept } for pid=9766 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.190756][ T9772] syzkaller0: entered promiscuous mode [ 131.194516][ T9772] syzkaller0: entered allmulticast mode [ 131.205452][ T40] audit: type=1400 audit(387.089:628): avc: denied { write } for pid=9766 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.209785][ T9772] tipc: Enabled bearer , priority 0 [ 131.215891][ T9771] tipc: Resetting bearer [ 131.231972][ T9771] tipc: Disabling bearer [ 131.308329][ T837] usb 6-1: USB disconnect, device number 15 [ 131.335511][ T40] audit: type=1400 audit(387.249:629): avc: denied { write } for pid=9773 comm="syz.3.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.342550][ T40] audit: type=1400 audit(387.259:630): avc: denied { listen } for pid=9773 comm="syz.3.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.382825][ T40] audit: type=1400 audit(387.299:631): avc: denied { bind } for pid=9781 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 131.390053][ T40] audit: type=1400 audit(387.299:632): avc: denied { read } for pid=9781 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 131.441434][ T9786] SELinux: policydb magic number 0x14 does not match expected magic number 0xf97cff8c [ 131.444396][ T9786] SELinux: failed to load policy [ 131.512893][ T9797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 131.515716][ T9797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.522600][ T9797] vhci_hcd vhci_hcd.0: Device attached [ 131.528058][ T9798] vhci_hcd: unknown pdu 2 [ 131.530118][ T4139] vhci_hcd vhci_hcd.2: stop threads [ 131.532631][ T4139] vhci_hcd vhci_hcd.2: release socket [ 131.535050][ T4139] vhci_hcd vhci_hcd.2: disconnect device [ 131.582511][ T9802] loop7: detected capacity change from 0 to 7 [ 131.640584][ T9802] Dev loop7: unable to read RDB block 7 [ 131.641294][ C1] blk_print_req_error: 11 callbacks suppressed [ 131.641305][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 131.643099][ T9802] loop7: unable to read partition table [ 131.645112][ C1] buffer_io_error: 330 callbacks suppressed [ 131.645126][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 131.657504][ T9802] loop7: partition table beyond EOD, truncated [ 131.665800][ T9802] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 131.740589][ T5343] Dev loop7: unable to read RDB block 7 [ 131.742476][ T5343] loop7: unable to read partition table [ 131.744484][ T5343] loop7: partition table beyond EOD, truncated [ 131.975215][ T9810] random: crng reseeded on system resumption [ 131.986851][ T9810] Restarting kernel threads ... [ 131.990983][ T9810] Done restarting kernel threads. [ 132.186503][ T9826] overlayfs: failed to resolve './file0': -40 [ 132.214582][ T9782] delete_channel: no stack [ 132.254730][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 132.296740][ T9831] IPVS: sed: FWM 3 0x00000003 - no destination available [ 132.299945][ C3] IPVS: sed: FWM 3 0x00000003 - no destination available [ 132.306401][ T9832] IPVS: sed: FWM 3 0x00000003 - no destination available [ 132.494799][ T9845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56846 sclass=netlink_route_socket pid=9845 comm=syz.1.1206 [ 132.686422][ T9852] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 132.694216][ T9852] bond3 (unregistering): Released all slaves [ 132.748704][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 132.752660][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 132.759766][ T5942] Bluetooth: hci3: command 0x0406 tx timeout [ 132.890750][ T9866] ufs: You didn't specify the type of your ufs filesystem [ 132.890750][ T9866] [ 132.890750][ T9866] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 132.890750][ T9866] [ 132.890750][ T9866] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 132.904767][ T9866] ufs: ufstype=old is supported read-only [ 132.943181][ T9869] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 132.943352][ T9870] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 132.952247][ T9869] VFS: Can't find a romfs filesystem on dev nullb0. [ 132.952247][ T9869] [ 132.959583][ T9870] VFS: Can't find a romfs filesystem on dev nullb0. [ 132.959583][ T9870] [ 133.238605][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.302936][ T9911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9911 comm=syz.1.1221 [ 133.486289][ T9924] input: syz0 as /devices/virtual/input/input18 [ 133.531757][ T9927] tipc: Cannot configure node identity twice [ 133.724206][ T9965] unsupported nla_type 4111 [ 133.982402][ T9984] erspan1: entered promiscuous mode [ 134.127392][T10000] netlink: 'syz.0.1242': attribute type 30 has an invalid length. [ 134.139759][ T1144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.143402][ T1144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.146759][ T1144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.150250][ T1144] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.451918][T10018] rdma_op ffff888054bd59f0 conn xmit_rdma 0000000000000000 [ 134.498262][ T6032] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.565884][T10026] ip6gre1: entered promiscuous mode [ 134.567753][T10026] ip6gre1: entered allmulticast mode [ 134.578807][T10026] dvmrp6: entered allmulticast mode [ 134.668237][ T6032] usb 6-1: Using ep0 maxpacket: 16 [ 134.672440][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.676906][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.683867][ T6032] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.689551][ T6032] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 134.693346][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.702688][ T6032] usb 6-1: config 0 descriptor?? [ 134.838287][ T5942] Bluetooth: hci3: command 0x0406 tx timeout [ 135.117535][ T6032] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 135.146705][ T6032] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 135.150467][ T6032] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 135.295363][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 135.295381][ T40] audit: type=1400 audit(391.209:781): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.310327][T10007] random: crng reseeded on system resumption [ 135.328395][ T40] audit: type=1400 audit(391.229:782): avc: denied { read write } for pid=10001 comm="syz.1.1243" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.330190][ T837] usb 6-1: USB disconnect, device number 16 [ 135.331912][T10051] __nla_validate_parse: 10 callbacks suppressed [ 135.331926][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1258'. [ 135.337921][ T141] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.337969][ T40] audit: type=1400 audit(391.229:783): avc: denied { ioctl open } for pid=10001 comm="syz.1.1243" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.338015][ T40] audit: type=1400 audit(391.249:784): avc: denied { append } for pid=10050 comm="syz.0.1258" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.374575][ T837] ------------[ cut here ]------------ [ 135.374773][ T141] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.376898][ T837] workqueue: work disable count underflowed [ 135.381920][ T141] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.384210][ T837] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#2: kworker/2:2/837 [ 135.389104][ T141] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.392719][ T837] Modules linked in: [ 135.399172][ T837] CPU: 2 UID: 0 PID: 837 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.403277][ T837] Tainted: [L]=SOFTLOCKUP [ 135.405058][ T837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.408965][ T837] Workqueue: usb_hub_wq hub_event [ 135.411060][ T837] RIP: 0010:enable_work+0x2ca/0x310 [ 135.413258][ T837] Code: ff e8 aa 12 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 9c 12 3a 00 e8 87 a8 f3 09 e9 49 ff ff ff e8 8d 12 3a 00 48 8d 3d b6 d6 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 b4 ee a3 00 e9 f7 fd ff [ 135.421165][ T837] RSP: 0018:ffffc90005717348 EFLAGS: 00010093 [ 135.423418][ T837] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184e773 [ 135.426441][ T837] RDX: ffff888026db0000 RSI: ffffffff8184e943 RDI: ffffffff908bc000 [ 135.429632][ T837] RBP: ffff888012618738 R08: 0000000000000005 R09: 0000000000000000 [ 135.432826][ T837] R10: 0000000000000000 R11: ffff888026db0b30 R12: 1ffff92000ae2e6a [ 135.436040][ T837] R13: ffffffff8fc4f13f R14: ffff888012618698 R15: ffff888012618730 [ 135.438944][ T837] FS: 0000000000000000(0000) GS:ffff8880d6af2000(0000) knlGS:0000000000000000 [ 135.442345][ T837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.445017][ T837] CR2: 000055558c048808 CR3: 000000003e108000 CR4: 0000000000352ef0 [ 135.448190][ T837] Call Trace: [ 135.449554][ T837] [ 135.450771][ T837] ? __pfx_enable_work+0x10/0x10 [ 135.452632][ T837] cancel_delayed_work_sync+0x96/0xf0 [ 135.454563][ T837] thermal_zone_device_unregister+0x28e/0x4d0 [ 135.457029][ T837] ? __pfx_shield_remove+0x10/0x10 [ 135.459078][ T837] power_supply_unregister+0x10a/0x150 [ 135.461288][ T837] shield_remove+0x75/0x130 [ 135.463139][ T837] ? __pfx_shield_remove+0x10/0x10 [ 135.465231][ T837] hid_device_remove+0xd1/0x260 [ 135.467238][ T837] ? __pfx_hid_device_remove+0x10/0x10 [ 135.469077][ T837] device_remove+0xcb/0x170 [ 135.470909][ T837] device_release_driver_internal+0x44b/0x620 [ 135.473350][ T837] bus_remove_device+0x22f/0x450 [ 135.475382][ T837] device_del+0x396/0x9f0 [ 135.477150][ T837] ? __pfx_device_del+0x10/0x10 [ 135.479108][ T837] ? do_raw_spin_lock+0x12c/0x2b0 [ 135.480864][ T837] hid_destroy_device+0x19c/0x240 [ 135.482771][ T837] usbhid_disconnect+0xa0/0xe0 [ 135.484759][ T837] usb_unbind_interface+0x1dd/0x9e0 [ 135.486855][ T837] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 135.489142][ T837] ? __pfx_usb_unbind_interface+0x10/0x10 [ 135.491439][ T837] device_remove+0x125/0x170 [ 135.493174][ T837] device_release_driver_internal+0x44b/0x620 [ 135.495298][ T837] bus_remove_device+0x22f/0x450 [ 135.497302][ T837] device_del+0x396/0x9f0 [ 135.499028][ T837] ? __pfx_device_del+0x10/0x10 [ 135.501009][ T837] ? kobject_put+0x218/0x6f0 [ 135.502905][ T837] usb_disable_device+0x355/0x820 [ 135.504914][ T837] usb_disconnect+0x2e1/0x9e0 [ 135.506574][ T837] hub_event+0x1d84/0x52f0 [ 135.507937][ T837] ? __lock_acquire+0x436/0x2890 [ 135.509819][ T837] ? do_raw_spin_unlock+0x172/0x230 [ 135.512231][ T837] ? __pfx_hub_event+0x10/0x10 [ 135.514376][ T837] ? assoc_array_insert+0x2d50/0x3970 [ 135.516584][ T837] ? finish_task_switch.isra.0+0x202/0xbd0 [ 135.518716][ T837] ? rcu_is_watching+0x12/0xc0 [ 135.520525][ T837] process_one_work+0x9ba/0x1b20 [ 135.522585][ T837] ? __pfx_process_one_work+0x10/0x10 [ 135.524923][ T837] ? assign_work+0x1a0/0x250 [ 135.526844][ T837] worker_thread+0x6c8/0xf10 [ 135.528698][ T837] ? __pfx_worker_thread+0x10/0x10 [ 135.530686][ T837] kthread+0x3c5/0x780 [ 135.532321][ T837] ? __pfx_kthread+0x10/0x10 [ 135.534204][ T837] ? rcu_is_watching+0x12/0xc0 [ 135.536181][ T837] ? __pfx_kthread+0x10/0x10 [ 135.537667][ T837] ret_from_fork+0x983/0xb10 [ 135.539554][ T837] ? __pfx_ret_from_fork+0x10/0x10 [ 135.541637][ T837] ? __switch_to+0x7af/0x10d0 [ 135.543635][ T837] ? __pfx_kthread+0x10/0x10 [ 135.545947][ T837] ret_from_fork_asm+0x1a/0x30 [ 135.548021][ T837] [ 135.549283][ T837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.552084][ T837] CPU: 2 UID: 0 PID: 837 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.556199][ T837] Tainted: [L]=SOFTLOCKUP [ 135.557517][ T837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.561288][ T837] Workqueue: usb_hub_wq hub_event [ 135.563392][ T837] Call Trace: [ 135.564810][ T837] [ 135.566009][ T837] dump_stack_lvl+0x3d/0x1f0 [ 135.567535][ T837] vpanic+0x640/0x6f0 [ 135.569181][ T837] ? enable_work+0x2ca/0x310 [ 135.571117][ T837] panic+0xca/0xd0 [ 135.572692][ T837] ? __pfx_panic+0x10/0x10 [ 135.574558][ T837] ? check_panic_on_warn+0x1f/0xb0 [ 135.576683][ T837] check_panic_on_warn+0xab/0xb0 [ 135.578708][ T837] __warn+0x108/0x3c0 [ 135.580194][ T837] __report_bug+0x2a0/0x520 [ 135.581793][ T837] ? enable_work+0x2ca/0x310 [ 135.583743][ T837] ? __pfx___report_bug+0x10/0x10 [ 135.585807][ T837] ? __wait_for_common+0x1e0/0x4e0 [ 135.587923][ T837] ? enable_work+0x2c3/0x310 [ 135.589759][ T837] ? enable_work+0xf3/0x310 [ 135.591218][ T837] ? find_held_lock+0x2b/0x80 [ 135.592905][ T837] report_bug_entry+0xe1/0x290 [ 135.594881][ T837] ? enable_work+0x2ca/0x310 [ 135.596788][ T837] handle_bug+0x18a/0x260 [ 135.598548][ T837] exc_invalid_op+0x17/0x50 [ 135.600080][ T837] asm_exc_invalid_op+0x1a/0x20 [ 135.601980][ T837] RIP: 0010:enable_work+0x2ca/0x310 [ 135.604106][ T837] Code: ff e8 aa 12 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 9c 12 3a 00 e8 87 a8 f3 09 e9 49 ff ff ff e8 8d 12 3a 00 48 8d 3d b6 d6 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 b4 ee a3 00 e9 f7 fd ff [ 135.611897][ T837] RSP: 0018:ffffc90005717348 EFLAGS: 00010093 [ 135.614413][ T837] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184e773 [ 135.617628][ T837] RDX: ffff888026db0000 RSI: ffffffff8184e943 RDI: ffffffff908bc000 [ 135.620710][ T837] RBP: ffff888012618738 R08: 0000000000000005 R09: 0000000000000000 [ 135.623600][ T837] R10: 0000000000000000 R11: ffff888026db0b30 R12: 1ffff92000ae2e6a [ 135.626879][ T837] R13: ffffffff8fc4f13f R14: ffff888012618698 R15: ffff888012618730 [ 135.630145][ T837] ? enable_work+0xf3/0x310 [ 135.632039][ T837] ? enable_work+0x2c3/0x310 [ 135.633890][ T837] ? enable_work+0x2c3/0x310 [ 135.635844][ T837] ? __pfx_enable_work+0x10/0x10 [ 135.637820][ T837] cancel_delayed_work_sync+0x96/0xf0 [ 135.640015][ T837] thermal_zone_device_unregister+0x28e/0x4d0 [ 135.642519][ T837] ? __pfx_shield_remove+0x10/0x10 [ 135.644587][ T837] power_supply_unregister+0x10a/0x150 [ 135.646268][ T837] shield_remove+0x75/0x130 [ 135.648184][ T837] ? __pfx_shield_remove+0x10/0x10 [ 135.650270][ T837] hid_device_remove+0xd1/0x260 [ 135.652261][ T837] ? __pfx_hid_device_remove+0x10/0x10 [ 135.654388][ T837] device_remove+0xcb/0x170 [ 135.656312][ T837] device_release_driver_internal+0x44b/0x620 [ 135.658451][ T837] bus_remove_device+0x22f/0x450 [ 135.660052][ T837] device_del+0x396/0x9f0 [ 135.661864][ T837] ? __pfx_device_del+0x10/0x10 [ 135.663848][ T837] ? do_raw_spin_lock+0x12c/0x2b0 [ 135.665493][ T837] hid_destroy_device+0x19c/0x240 [ 135.667243][ T837] usbhid_disconnect+0xa0/0xe0 [ 135.669207][ T837] usb_unbind_interface+0x1dd/0x9e0 [ 135.670944][ T837] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 135.672958][ T837] ? __pfx_usb_unbind_interface+0x10/0x10 [ 135.675271][ T837] device_remove+0x125/0x170 [ 135.676765][ T837] device_release_driver_internal+0x44b/0x620 [ 135.678956][ T837] bus_remove_device+0x22f/0x450 [ 135.680974][ T837] device_del+0x396/0x9f0 [ 135.682536][ T837] ? __pfx_device_del+0x10/0x10 [ 135.684098][ T837] ? kobject_put+0x218/0x6f0 [ 135.686008][ T837] usb_disable_device+0x355/0x820 [ 135.687980][ T837] usb_disconnect+0x2e1/0x9e0 [ 135.689472][ T837] hub_event+0x1d84/0x52f0 [ 135.691233][ T837] ? __lock_acquire+0x436/0x2890 [ 135.693269][ T837] ? do_raw_spin_unlock+0x172/0x230 [ 135.694928][ T837] ? __pfx_hub_event+0x10/0x10 [ 135.696717][ T837] ? assoc_array_insert+0x2d50/0x3970 [ 135.699015][ T837] ? finish_task_switch.isra.0+0x202/0xbd0 [ 135.700934][ T837] ? rcu_is_watching+0x12/0xc0 [ 135.702760][ T837] process_one_work+0x9ba/0x1b20 [ 135.704830][ T837] ? __pfx_process_one_work+0x10/0x10 [ 135.706519][ T837] ? assign_work+0x1a0/0x250 [ 135.708336][ T837] worker_thread+0x6c8/0xf10 [ 135.710128][ T837] ? __pfx_worker_thread+0x10/0x10 [ 135.712146][ T837] kthread+0x3c5/0x780 [ 135.713462][ T837] ? __pfx_kthread+0x10/0x10 [ 135.715035][ T837] ? rcu_is_watching+0x12/0xc0 [ 135.717018][ T837] ? __pfx_kthread+0x10/0x10 [ 135.718663][ T837] ret_from_fork+0x983/0xb10 [ 135.720148][ T837] ? __pfx_ret_from_fork+0x10/0x10 [ 135.722182][ T837] ? __switch_to+0x7af/0x10d0 [ 135.723980][ T837] ? __pfx_kthread+0x10/0x10 [ 135.725479][ T837] ret_from_fork_asm+0x1a/0x30 [ 135.727282][ T837] [ 135.729357][ T837] Kernel Offset: disabled [ 135.730751][ T837] Rebooting in 86400 seconds..