last executing test programs: 43.824637732s ago: executing program 3 (id=515): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2c}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x1277, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f964000000000000000000000000000200", [0x800]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x8, @mcast2, 0x2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x7fffffff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0xa0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="96091080bb48", 0x6}], 0x2}, 0x0) socket$inet(0x2, 0x2, 0x1) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2c}) (async) syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) (async) ioctl$LOOP_CONFIGURE(r2, 0x1277, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f964000000000000000000000000000200", [0x800]}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x8, @mcast2, 0x2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x7fffffff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0xa0) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="96091080bb48", 0x6}], 0x2}, 0x0) (async) 43.730714897s ago: executing program 3 (id=517): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0x100, 0x4}, {0x7, 0x4}]}, 0x14, 0x1) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000a80)={0x1ff, 0x200, 0x1, {0x6, @sliced={0x0, [0x9, 0x100, 0x4, 0x3, 0x6, 0xffff, 0x1, 0x4, 0x4, 0x7, 0x200, 0x2, 0xad, 0x0, 0x6e, 0xfff7, 0x6, 0x2, 0x2, 0x0, 0x2, 0x1800, 0x5, 0x0, 0x8000, 0xa000, 0x401, 0x2480, 0x7, 0x101, 0x4, 0x1, 0x1, 0x0, 0x6, 0x1, 0x8, 0x0, 0x800, 0x5, 0x3, 0xffff, 0xfff, 0x3400, 0x5c69, 0x2, 0xd17, 0x7], 0x9}}, 0x9}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000a80)={0x1ff, 0x200, 0x1, {0x6, @sliced={0x0, [0x9, 0x100, 0x4, 0x3, 0x6, 0xffff, 0x1, 0x4, 0x4, 0x7, 0x200, 0x2, 0xad, 0x0, 0x6e, 0xfff7, 0x6, 0x2, 0x2, 0x0, 0x2, 0x1800, 0x5, 0x0, 0x8000, 0xa000, 0x401, 0x2480, 0x7, 0x101, 0x4, 0x1, 0x1, 0x0, 0x6, 0x1, 0x8, 0x0, 0x800, 0x5, 0x3, 0xffff, 0xfff, 0x3400, 0x5c69, 0x2, 0xd17, 0x7], 0x9}}, 0x9}) 43.730508362s ago: executing program 3 (id=518): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) io_uring_setup(0x983, &(0x7f0000000280)={0x0, 0x4, 0x4, 0x1, 0x154, 0x0, r0}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 43.644953012s ago: executing program 3 (id=519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x78, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8916, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 43.544460462s ago: executing program 3 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40100, 0x10) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000180)) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x800) mkdirat(r4, &(0x7f0000000340)='./file1\x00', 0x84) mount$bind(&(0x7f0000000540)='./file1\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x11388, 0x2, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x8, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xff, 0x0, 0x6}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb, 0x0, 0x0, '\x00', 0x6}, {0x3, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x7f, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x3}, {0x3}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x81, 0x0, '\x00', 0x10}, {0x0, 0x2, 0x1, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x6}, {0x7f, 0x1, 0x3, '\x00', 0x7}]}}) 43.394076456s ago: executing program 3 (id=523): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ffffffff0000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x40140921, 0x200000000005) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r6, 0x4) mount$overlay(0x0, &(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680), 0x2000000, &(0x7f00000006c0)={[{@default_permissions}], [{@obj_user={'obj_user', 0x3d, '\\{-\'-,,@['}}, {@subj_user={'subj_user', 0x3d, '$]{'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2d}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x3b69, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x42, '\x00', r4, @fallback=0x30, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0xb, 0x80000000, 0x2d44}, 0x10, r6, r3, 0x3, &(0x7f00000004c0)=[0xffffffffffffffff, r2, r2, r2, r2], &(0x7f0000000540)=[{0x5, 0x2, 0xf, 0x3}, {0x5, 0x1, 0x80000001, 0x8}, {0x5, 0x5, 0x9}], 0x10, 0x510}, 0x94) close(r0) 28.149790578s ago: executing program 32 (id=523): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ffffffff0000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x40140921, 0x200000000005) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r6, 0x4) mount$overlay(0x0, &(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680), 0x2000000, &(0x7f00000006c0)={[{@default_permissions}], [{@obj_user={'obj_user', 0x3d, '\\{-\'-,,@['}}, {@subj_user={'subj_user', 0x3d, '$]{'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2d}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x3b69, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x42, '\x00', r4, @fallback=0x30, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0xb, 0x80000000, 0x2d44}, 0x10, r6, r3, 0x3, &(0x7f00000004c0)=[0xffffffffffffffff, r2, r2, r2, r2], &(0x7f0000000540)=[{0x5, 0x2, 0xf, 0x3}, {0x5, 0x1, 0x80000001, 0x8}, {0x5, 0x5, 0x9}], 0x10, 0x510}, 0x94) close(r0) 3.436176252s ago: executing program 2 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f246}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ff72901e5f7d2a48b517dbee792cffffff000002000000000200000000020000000000001302000000e3000000000000"], 0x0, 0x54, 0x0, 0x4}, 0x20) 3.434768371s ago: executing program 2 (id=1057): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1d) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000f14010027bd70200f000000000000000100000008004500636d6100"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000140)) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) fchdir(0xffffffffffffffff) getpid() ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './cgroup/../file0\x00'}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00004a0000/0x1000)=nil}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.174249386s ago: executing program 2 (id=1059): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8070bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000000)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x40, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x53, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000)={0x8002, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) 3.083059192s ago: executing program 2 (id=1062): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0x3) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000600), 0x61e800, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000640)=0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) close(0x3) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000600), 0x61e800, 0x0) (async) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000640)=0x3) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async) 3.023813831s ago: executing program 2 (id=1064): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd01220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x3, 0x4, &(0x7f0000000240)={0x1e, "91a47e09fa3400c07f19c2bb2925ad1e172604ff007a2000f42a000000002dc500"}}) 1.241153131s ago: executing program 1 (id=1090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000100003052cbd7000ffffffff00cf0000", @ANYRES32=0x0, @ANYBLOB="030000000000000010001280080001006772650004000280080028008b3eb2"], 0x38}}, 0x0) 1.113305748s ago: executing program 1 (id=1097): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r2, 0x4000, r1}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 999.471396ms ago: executing program 1 (id=1098): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 995.934362ms ago: executing program 1 (id=1100): creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @empty}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x2, 0x5, "fbfeedf76d"}, 0xd) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r4, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 867.659348ms ago: executing program 1 (id=1103): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x5a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000002000/0x2000)=nil, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0xf, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x3, 0x7}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 486.327685ms ago: executing program 0 (id=1107): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000000c0)={0x8, r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 284.470324ms ago: executing program 0 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) (async, rerun: 32) write$ppp(r2, &(0x7f0000000240)='\"\b', 0x2) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000f400000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000a000200bbbbbbbbbbbb0000"], 0x28}}, 0x40040) 213.314687ms ago: executing program 4 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x2, 0x0, 0x2, 0x0, 0x203fff, 0x4, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1, 0x8, 0x6000, 0x0, 0x0, r3, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r7 = syz_open_dev$loop(&(0x7f0000000180), 0x8f, 0x482c0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15, 0x4, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe]}}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000, 0x200, 0x2, 0x5, 0x3}}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r8, 0x1, 0x2c, 0x0, &(0x7f00000004c0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r9, &(0x7f00000061c0)={0x130, 0x0, r10, {0x4, 0x5, 0x0, '\x00', {0x0, 0x8, 0x4, 0x480000, r2, r3, 0xe000, '\x00', 0x7, 0x5, 0x4, 0x0, {0x2, 0x5}, {0xfffffffffffffffe, 0x7d}, {0xe9, 0x3}, {0x7fffffffffffffff, 0x4}, 0x9, 0xdf3a, 0x8, 0x2}}}, 0x130) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000240)={{r7}, 0x3, &(0x7f0000000080)=[0x66, 0x6, 0x7], 0x4, 0x17, 0x1}) ioctl$FIBMAP(r9, 0x401070c9, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./file0\x00', 0x24) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') open_by_handle_at(r11, &(0x7f0000000bc0)=ANY=[@ANYRES64=r11], 0x0) 153.648672ms ago: executing program 4 (id=1114): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b97003000066b867c9000066ba000000000f300fc72d260f01df0f01cf0fc771000f01df440f20c066350e000000440f22c0660f0090348c650f01df65f2660f005bd3", 0x44}], 0x1, 0x8, &(0x7f0000000300)=[@dstype3={0x7, 0x9}], 0x1) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x15e, 0x1, 0x2800, 0xd59f80, 0x2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0x8, 0x30, {0x8, 0xb31}, 0xd0, 0x9}}) 151.42377ms ago: executing program 0 (id=1115): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x121a00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x6}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c038a"]) 151.088238ms ago: executing program 4 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x400, 0x11227}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44890}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 82.623393ms ago: executing program 0 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0100001000", @ANYRESDEC], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) writev(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) fdatasync(r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000001c0)={r7, 0x0, r0, 0x0, 0x80000}) 82.015806ms ago: executing program 4 (id=1118): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xe8, 0x2200) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/250) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x11, 0x79, &(0x7f00000001c0)="74ce3cf27986eddc3cef6f6157acd932a64187be02c5e551cfa09c401c8371050374e14f5d796f25792cd3bfd6bc1f1956f6703ed48686865690ca17b0456406ee20b5bcddfcb26f5153a25530828511af59540879c4b75d95f0819227d4675c36f4564455fb26cda832a7db60a2a6f8f24af860ff81c4773e"}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000002c0)={{@host, 0x9}, @local, 0x8, 0x2, 0x1ff, 0xfbb, 0x9, 0xff, 0x8}) (async) fcntl$setstatus(r1, 0x4, 0x4000) (async) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @empty}, 0x108, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='virt_wifi0\x00', 0xffffffffffffffff, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) r4 = syz_clone(0x2000000, &(0x7f0000000400)="a83f03cca3d55d7bad3fe67ba50c1eb9359f5cb639b6f14fd8aafb3faeacf44d061ee78dc59cc6f76f065b5cd38c2902a3a30495a755112c765e7be6ed0620e6cbe29a48515ea98818833101ee16", 0x4e, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="930017fcae47ab9c5c1c2b594a86a4f6c781818709194434dcf36a33db59bd42bc3604503d165a987d457b0b1fe6007fd67d394323c7fa4ad79e1cd57651e07af3d2fe53209a76cf50744a44f39eee553cd33c6047b3b09a63be9ae4b6ac9aeba237c73abe49ed3e090bd9cb611624c88a4c01ec8566ba3a2bcff9") timer_create(0x0, &(0x7f0000000580)={0x0, 0x8, 0x4, @tid=r4}, &(0x7f00000005c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder1\x00', 0x800, 0x0) r5 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000006c0)={0x0, 0xffffffffffffff7f}) (async) poll(&(0x7f0000000700)=[{r0, 0xa244}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000740)={0x0, 0x8, 0x6257, 0x4, 0x3, 0xa, 0x6, 0x8, {0x0, @in={{0x2, 0x4e22, @private=0x5}}, 0x3ff0000, 0x4, 0x3, 0x8, 0xa6}}, &(0x7f0000000800)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000840)={r7, 0x7, 0xe, 0x101, 0x8, 0xe}, 0x14) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, &(0x7f0000000880)="66b9800000c00f326635010000000f309acb0d2901640fc731260f1c86fe119a0900030166b9800000c00f326635008000000f300f00180f03fdf2d8a5050026660fc770ff", 0x45}], 0x1, 0x55, &(0x7f0000000940)=[@flags={0x3, 0x40000}, @cr4={0x1, 0x10000}], 0x2) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000dc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a40)={0x31c, r8, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x5, 0x25, 0x60, 0x3, 0x18, 0xc, 0x2, 0x46]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1700, 0x1, 0x2, 0xd, 0xf, 0x40, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x13, 0x48, 0x12, 0x33, 0xb, 0x3, 0xc, 0x1, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x16, 0x60, 0x1b, 0x5, 0x6c, 0x24, 0x9, 0x18, 0x6e, 0xb, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x24, 0x4d6ccf7d4d2d79b4, 0x48, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x0, 0xb, 0x3, 0x2, 0x7, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd6, 0x4, 0x8, 0xa, 0x3, 0x0, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x16, 0x2, 0x2, 0x1b, 0x60, 0xb, 0x9, 0x5, 0xb, 0x16, 0x3, 0x16, 0x36, 0xb, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x7, 0x3, 0x4e4, 0x1000, 0xe0]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xff, 0x0, 0x67a4, 0xb, 0x4, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x9, 0xfffb, 0x8000, 0x40, 0x3]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x5, 0x5, 0x9, 0x4, 0x200, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x30, 0x12, 0x60, 0x6c, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff81, 0x9, 0xd6, 0x6, 0x200, 0x5, 0x17d]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x79d4, 0x9, 0x8, 0x4, 0x3, 0x3, 0x200]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0xc, 0x36, 0x3, 0x24, 0x2, 0x0, 0x1b, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x5, 0x24, 0x9, 0x60, 0x36, 0x16, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x1b, 0x12, 0x6c, 0x30, 0x24, 0x30, 0xb]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x18, 0x24, 0x4, 0x3, 0x6]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x12, 0x1, 0x48, 0x6, 0x30, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0x7, 0x67e, 0x8, 0x9, 0x3, 0xc]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0xb, 0x6, 0x6c, 0x36, 0x1b, 0x48, 0x30, 0x18, 0x36, 0xc, 0x18, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xf, 0x4c, 0x6, 0x0, 0x78b, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8001, 0x2, 0x35, 0x101, 0x3, 0x90, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x7ff, 0x8, 0x9, 0xf001, 0x80, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x9}, {0x3, 0x6}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x5}, {0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0xb, 0x3, 0x30, 0x16, 0x30, 0x60, 0x60, 0x5, 0x3, 0xb, 0x9, 0x60, 0x3, 0x36, 0x6, 0x2, 0x12, 0x6, 0x6, 0x6c, 0x6c, 0xb, 0x5, 0x9]}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40000}, 0x85) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0xcb31d4a8f04f2cb3}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x60, r11, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x20040010) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffffe, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x3b1593d627d7cea8}, 0x4) (async) close(r2) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f00000010c0)={0x74, 0x0, 0x10}) 81.510342ms ago: executing program 1 (id=1119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 23.203271ms ago: executing program 0 (id=1120): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.399274ms ago: executing program 4 (id=1121): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = geteuid() write$FUSE_DIRENTPLUS(r0, &(0x7f00000040c0)={0x290, 0x0, r1, [{{0x4, 0x2, 0x3, 0x5, 0x7ff, 0x9, {0x5, 0xffffffffffffffff, 0x13b5a000, 0x34f, 0x5, 0x1, 0x1, 0x8, 0xd, 0x1000, 0x8, r4, r3, 0x80000000, 0x4}}, {0x3, 0xffffffffffffffff, 0xa, 0xffff, '/dev/cuse\x00'}}, {{0x1, 0x0, 0x80000000, 0xf85, 0x9912, 0x1, {0x1, 0xd8e, 0x7fffffffffffffff, 0x8, 0x3, 0x49, 0x7, 0x4, 0x3e0, 0x2000, 0x4c4c, r2, 0x0, 0x1, 0x8}}, {0x3, 0x7fff, 0x0, 0x7f}}, {{0x5, 0x2, 0x3, 0xfffffffffffffff8, 0xa, 0x8, {0x3, 0x6, 0x0, 0x4, 0x7, 0x80000001, 0x80000000, 0x1, 0x8, 0xa000, 0x1, r2, r3, 0x9, 0x8}}, {0x5, 0x2, 0xa, 0x2, '/dev/cuse\x00'}}, {{0x4, 0x1, 0x9, 0xfffffffffffffff7, 0xfffffff7, 0x9, {0x4, 0x1, 0x5, 0x0, 0xf, 0x1, 0x1, 0x94, 0x3, 0x6000, 0x7, r7, r3, 0x8, 0x1}}, {0x4, 0x8, 0x0, 0x4}}]}, 0x290) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xe}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000000) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000004780)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004740)={&(0x7f00000044c0)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0x19}, 0x0, 0x4, 0xb, 0x6, 0xa, 'syz0\x00', "e1dff03853957a0a95cca8e7abbcc2ca85cca63673949d56a6549b5ee390b263", "c82abc8debd38c08f1b4a2ce47e8c2c59c09e91eb00be70de934e9455308932a", [{0xc50, 0x1000, {0x1, 0x5}}, {0x2, 0x7f, {0x1, 0x2}}, {0x100, 0xdc, {0x1, 0x81}}, {0x7ff, 0x2, {0x1, 0x7}}, {0x2, 0x351f, {0x0, 0x6}}, {0xd97, 0x1000, {0x3, 0x1302}}, {0x6, 0x600, {0x3, 0x1e}}, {0x58, 0x8, {0x1, 0x4}}, {0x4, 0x5, {0x0, 0x400}}, {0x7, 0x6, {0x3, 0x25}}, {0x15, 0x2, {0x2, 0xec3}}, {0x6, 0x6de5, {0x1, 0x7}}, {0xa8b, 0x1, {0x2, 0x7}}, {0xac68, 0x2, {0x2, 0x36bf17e}}, {0x0, 0xffff, {0x2, 0x7fffffff}}, {0xffff, 0x8, {0x3, 0xa}}, {0x5, 0xfff6, {0x3, 0x4}}, {0x0, 0x2, {0x2, 0x7}}, {0x3, 0x9, {0x1, 0x3}}, {0x5, 0x5, {0x1}}, {0x4800, 0x9, {0x1, 0x10}}, {0x40, 0x3, {0x0, 0x4}}, {0x401, 0x7, {0x0, 0x10}}, {0x4e, 0x3ff, {0x0, 0xbe}}, {0xffb4, 0xc, {0x0, 0x83}}, {0x3, 0xeb1, {0x3, 0x10000}}, {0xb, 0x2, {0x0, 0x3}}, {0x7f, 0x7ff, {0x0, 0x2}}, {0x5, 0xc, {0x3, 0xffff}}, {0x7e34, 0x40, {0x0, 0xffffff00}}, {0x2, 0x0, {0x1, 0xd}}, {0x8, 0x53f0, {0x2, 0x8001}}, {0x100, 0xffff, {0x2, 0x9}}, {0x1, 0x5, {0x2, 0x1d3a}}, {0x400, 0xfff7, {0x0, 0x80}}, {0x1, 0x2, {0x3, 0x5}}, {0xfff4, 0x34, {0x0, 0x6}}, {0xfe41, 0x1, {0x3, 0x8}}, {0x6, 0x8, {0x2, 0x323}}, {0x8000, 0x0, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000007300)={0x0, 0x0, 0x0}, &(0x7f0000007340)=0xc) r11 = geteuid() syz_fuse_handle_req(r0, &(0x7f00000047c0)="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", 0x2000, &(0x7f00000075c0)={&(0x7f00000067c0)={0x50, 0x0, 0x1, {0x7, 0x2d, 0x3, 0x40, 0xfffb, 0x81, 0x17f, 0x40, 0x0, 0x0, 0x4, 0x400}}, &(0x7f0000006840)={0x18, 0x0, 0x4, {0x8f}}, &(0x7f0000006880)={0x18, 0xfffffffffffffff5, 0x100, {0xfffffffffffffffa}}, &(0x7f00000068c0)={0x18, 0x0, 0x10000, {0xd634}}, &(0x7f0000006900)={0x18, 0x0, 0x8000000000000001, {0x2}}, &(0x7f0000006940)={0x28, 0x0, 0x3, {{0xfffffffffffffffe, 0x9, 0x1, r6}}}, &(0x7f0000006980)={0x60, 0xfffffffffffffff5, 0x7fffffffffffffff, {{0x7fff, 0x8001, 0x2, 0x5, 0x2, 0x3, 0x2, 0xffffffff}}}, &(0x7f0000006a00)={0x18, 0x0, 0x1, {0x4}}, &(0x7f0000006a40)={0x15, 0x0, 0x4, {'syz0\x00'}}, &(0x7f0000006a80)={0x20, 0x0, 0x401, {0x0, 0x8}}, &(0x7f0000006ac0)={0x78, 0x0, 0x4, {0x8000000000000001, 0x1, 0x0, {0x1, 0x7, 0x6, 0x7, 0xb, 0x5, 0xd, 0x7f, 0xabf1, 0x6000, 0x9bc, r2, r3, 0x1, 0x7}}}, &(0x7f0000006b40)={0x90, 0x0, 0x4, {0x0, 0x2, 0x1000, 0xf8e, 0x20000, 0xb, {0x4, 0x8, 0x5, 0x8, 0x5, 0x741f, 0x5, 0x4, 0x3, 0x4000, 0x19, r4, r3, 0x5, 0x3}}}, &(0x7f0000006c00)={0x130, 0x0, 0x8001, [{0x4, 0x8f73, 0x5, 0x5, 'syz0\x00'}, {0x2, 0xa8c, 0xc, 0x9, '}[!#]-@]${\\['}, {0x1, 0x8, 0x5, 0x6, 'syz0\x00'}, {0x5, 0x4, 0x5, 0x1, 'syz0\x00'}, {0x3, 0xaaf, 0x2, 0x1, '(^'}, {0x5, 0x0, 0x5, 0xffffff7e, '[-](\\'}, {0x6, 0x3, 0x0, 0x8}, {0x4, 0x1ff, 0x0, 0x6}, {0x0, 0x459, 0xa, 0x9, '/dev/cuse\x00'}]}, &(0x7f0000006d40)={0x5c0, 0x0, 0x8, [{{0x3, 0x3, 0x9, 0xe4c7, 0xffff, 0x1, {0x4, 0x100000000, 0xfffffffffffffff7, 0x7f, 0x0, 0x9, 0xffe00000, 0x0, 0x3, 0xc000, 0x0, r4, r5, 0xda, 0xfff}}, {0x5, 0x6, 0x0, 0x8}}, {{0x4, 0x0, 0x5fd, 0x2, 0x40, 0x0, {0x6, 0x6, 0x1, 0xfffffffffffffffa, 0x101, 0x7, 0x5, 0x2d3, 0x800, 0x2000, 0x7f, r4, r5, 0xec, 0x8}}, {0x2, 0x8000000000000001, 0x6, 0x8, '\\{./),'}}, {{0x4, 0x3, 0x8, 0xd, 0x4b, 0x401, {0x0, 0x7ff, 0x7, 0x7, 0x7, 0x2f65, 0x748, 0x5, 0x6, 0x6000, 0x10000, r2, r5, 0x8, 0x1}}, {0x4, 0x0, 0xc, 0x9, '&&,-{\x05?4-),!'}}, {{0x4, 0x2, 0x2, 0x1, 0x5, 0x20, {0x3, 0x6, 0x2, 0x2, 0x10000, 0xd, 0x5, 0x2, 0x2, 0xa000, 0x3, r7, r5, 0x0, 0x100}}, {0x5, 0x1, 0x5, 0x3, 'syz0\x00'}}, {{0x2, 0x2, 0xfffffffffffffffb, 0x40, 0x61e, 0x8, {0x6, 0x6, 0x4cf1, 0x6, 0x1, 0xa7, 0x3ff, 0x10000, 0x5b, 0x6000, 0x8d, r2, r5, 0x101, 0x1}}, {0x6, 0x0, 0x1, 0x5, '&'}}, {{0x2, 0x1, 0x5, 0x8000, 0xa, 0x80008, {0x3, 0x9d, 0x8, 0x1, 0x0, 0x2, 0x6, 0x8, 0x5aea, 0x1000, 0x73, r2, r5, 0x0, 0x6}}, {0x3, 0x8000000000000000, 0xa, 0x400, '/dev/cuse\x00'}}, {{0x0, 0x0, 0x5, 0x7, 0x9, 0x1, {0x3, 0x6, 0xd4, 0x7, 0x1, 0x1ff, 0x8000, 0x7, 0x3, 0x2000, 0xfffffff3, r2, r3, 0x7, 0x8}}, {0x2, 0x4, 0x5, 0x6, 'syz0\x00'}}, {{0x1, 0x2, 0x3, 0x5, 0xfffffffc, 0xa, {0x3, 0x6, 0x9, 0x81, 0x748, 0x3, 0x7, 0x6, 0x80, 0x9000, 0x5, r2, r5, 0x7ff, 0x4}}, {0x4, 0x7fffffffffffffff, 0x5, 0x2, 'syz0\x00'}}, {{0x4, 0x2, 0x5, 0x6, 0x7, 0x5, {0x0, 0x2, 0x5, 0xdc3f, 0x0, 0x0, 0x0, 0x1, 0x5, 0xa000, 0x6, r7, r3, 0x7, 0x30b}}, {0x6, 0x8001, 0xa, 0x4, '/dev/cuse\x00'}}]}, &(0x7f0000007380)={0xa0, 0x0, 0xc0000, {{0x5, 0xd, 0x1, 0x7, 0xfffffff9, 0xfffffffa, {0x2, 0x4, 0x100000000, 0x4, 0xfffffffffffffff7, 0x7, 0x80000000, 0x100, 0x1, 0x2000, 0xf, r2, r10, 0xc, 0x10000}}, {0x0, 0x39}}}, &(0x7f0000007440)={0x20, 0xfffffffffffffff5, 0x8, {0x7, 0x0, 0x7, 0x7680}}, &(0x7f0000007480)={0x130, 0x0, 0x8000000000000001, {0x100000000, 0x7ff, 0x0, '\x00', {0x820, 0x9, 0x58c, 0x6, r11, r5, 0x8000, '\x00', 0x7, 0x80000001, 0xfff, 0x8000, {0x2, 0x100}, {0xc, 0x50}, {0xfff, 0x8}, {0x1ff, 0x2}, 0x274c00, 0x10001, 0xfffffffa, 0xfffffffa}}}}) r12 = syz_ublk_setup_io_uring(0x3331, &(0x7f0000007680)={0x0, 0xe050, 0x200, 0x3, 0x3be}, &(0x7f0000007700)=0x0, &(0x7f0000007740)=0x0, &(0x7f0000007780)=0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r12, 0x17, &(0x7f0000007800)={&(0x7f0000008000)={[{&(0x7f00000077c0)="abb07b119fcbf219110d20f04c03786b", 0x10, 0x2}]}, 0x1, 0x2, 0x1}, 0x1) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007840)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000007880)) r17 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000078c0)='/sys/power/pm_wakeup_irq', 0x800, 0x1) syz_ublk_add_dev(r17, r13, r14, r15, &(0x7f0000007940)={0x2e, 0x10, 0x0, r17, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000007900)=@new_dev={0x1, 0xbe7, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x190}}}, &(0x7f00000079c0)) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000009000)={{r18}, "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"}) ioctl$BINDER_CTL_ADD(r17, 0xc1086201, &(0x7f000000a000)={'custom1\x00'}) ioctl$SW_SYNC_IOC_INC(r17, 0x40045701, &(0x7f000000a140)=0x3aa) fchownat(r17, &(0x7f000000a180)='./file0\x00', r11, r3, 0x800) ioctl$NS_GET_OWNER_UID(r17, 0xb704, &(0x7f000000a200)=0x0) fsetxattr$security_capability(r17, &(0x7f000000a1c0), &(0x7f000000a240)=@v3={0x3000000, [{0x4, 0x1}, {0x2, 0xd}], r19}, 0x18, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r17, 0xc018937b, &(0x7f000000a280)={{0x1, 0x1, 0x18, r18, {r2, 0xffffffffffffffff}}, './file0\x00'}) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000501, r21, &(0x7f000000a2c0)) r22 = syz_genetlink_get_family_id$batadv(&(0x7f000000a340), r20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r17, 0x89f8, &(0x7f000000a440)={'gre0\x00', &(0x7f000000a380)={'syztnl0\x00', 0x0, 0x1, 0x40, 0xe7, 0x7, {{0x22, 0x4, 0x1, 0x1e, 0x88, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0xce, [@empty, @remote, @private=0xa010101]}, @timestamp_prespec={0x44, 0x4c, 0xdb, 0x3, 0x1, [{@loopback, 0x45}, {@private=0xa010101, 0x80000000}, {@rand_addr=0x64010102, 0xf5}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xf}, {@remote, 0x3}, {@rand_addr=0x64010100}, {@broadcast, 0x5}, {@rand_addr=0x64010102, 0x6}, {@remote, 0x8000000}]}, @ssrr={0x89, 0x17, 0xdf, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r17, &(0x7f000000a500)={&(0x7f000000a300), 0xc, &(0x7f000000a4c0)={&(0x7f000000a480)={0x3c, r22, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4a050}, 0x40000) fgetxattr(r16, &(0x7f000000a540)=@known='system.posix_acl_default\x00', &(0x7f000000a580)=""/16, 0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r20, 0xc02064b9, &(0x7f000000a800)={&(0x7f000000a5c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000a600)=[0x0, 0x0], 0x8, 0x0, 0xcccccccc}) 7.198898ms ago: executing program 0 (id=1122): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r6) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.450538ms ago: executing program 4 (id=1123): sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4008000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100)='v7\x00', 0x8080, &(0x7f0000002140)='nfs\x00') 0s ago: executing program 2 (id=1124): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = userfaultfd(0x801) syz_clone(0x21080200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="00000000c00000004007000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0400000001000000010000e00c020000eae3962c04db26824d21f0a7069b18c3e8a783c7a94bf7938bc9070000000000006605fcc2ff14877f8e99345a71b28e94b2d4eb68f880dd39e3361bb915b07d7a6603140974b4ea660a9ad2cf633c965387d9e4512bbbdddddf2cceeb65891b758ca2220c23b3f28ce973a63fa7667c943556a035d4df9a95f2716d0c862573b5df6ae885dfe446e45c6267d1"], 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) recvmmsg(r3, &(0x7f0000001400)=[{{&(0x7f0000000340)=@caif=@util, 0x80, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/118, 0x76}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/39, 0x27}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/224, 0xe0}, {&(0x7f0000000780)=""/113, 0x71}, {&(0x7f0000000800)=""/145, 0x91}, {&(0x7f00000008c0)=""/153, 0x99}], 0xa, &(0x7f0000000a40)=""/178, 0xb2}, 0x8}, {{&(0x7f0000000b00)=@tipc=@id, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/35, 0x23}, {&(0x7f0000000bc0)=""/79, 0x4f}], 0x2, &(0x7f0000000c80)=""/26, 0x1a}, 0x8}, {{&(0x7f0000000cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/129, 0x81}, {&(0x7f0000000e00)=""/253, 0xfd}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/135, 0x87}], 0x1, &(0x7f0000001040)=""/169, 0xa9}, 0x3}, {{&(0x7f0000001100)=@hci, 0x80, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=""/61, 0x3d}, 0x4}], 0x5, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) kernel console output (not intermixed with test programs): r=3 [ 72.627694][ T6637] vivid-000: Sensor Flipped Vertically: false [ 72.632855][ T6637] vivid-000: Insert SAV Code in Image: false [ 72.633009][ T5820] usb 5-1: Product: syz [ 72.635235][ T6637] vivid-000: Insert EAV Code in Image: false [ 72.635250][ T6637] vivid-000: Insert Video Guard Band: false [ 72.635260][ T6637] vivid-000: Reduced Framerate: false [ 72.635271][ T6637] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 72.642976][ T5820] usb 5-1: Manufacturer: syz [ 72.643362][ T6637] [ 72.646440][ T5820] usb 5-1: SerialNumber: syz [ 72.651194][ T6637] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 72.653736][ T6637] vivid-000: Enable Capture Cropping: true [ 72.655573][ T6637] vivid-000: Enable Capture Composing: true [ 72.657900][ T6637] vivid-000: Enable Capture Scaler: true [ 72.660009][ T5820] usb 5-1: config 0 descriptor?? [ 72.661978][ T6637] vivid-000: Timestamp Source: End of Frame [ 72.664048][ T6637] vivid-000: Colorspace: SMPTE 170M [ 72.665843][ T6637] vivid-000: Transfer Function: Default [ 72.667931][ T6637] vivid-000: Y'CbCr Encoding: Default [ 72.669753][ T6637] vivid-000: HSV Encoding: Hue 0-179 [ 72.671442][ T6637] vivid-000: Quantization: Default [ 72.673107][ T6637] vivid-000: Apply Alpha To Red Only: false [ 72.675009][ T6637] vivid-000: Standard Aspect Ratio: 4x3 [ 72.676739][ T6637] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 72.679277][ T6637] vivid-000: DV Timings: 640x480p59 inactive [ 72.681169][ T6637] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 72.683544][ T6637] vivid-000: Maximum EDID Blocks: 2 [ 72.685258][ T6637] vivid-000: Limited RGB Range (16-235): false [ 72.687631][ T6637] vivid-000: Rx RGB Quantization Range: Automatic [ 72.689683][ T6637] vivid-000: Power Present: 0x00000001 [ 72.691418][ T6637] tpg source WxH: 720x576 (Y'CbCr) [ 72.693120][ T6637] tpg field: 4 [ 72.694265][ T6637] tpg crop: (0,0)/720x576 [ 72.695642][ T6637] tpg compose: (0,0)/720x576 [ 72.698561][ T6637] tpg colorspace: 1 [ 72.699769][ T6637] tpg transfer function: 0/0 [ 72.701211][ T6637] tpg Y'CbCr encoding: 0/0 [ 72.702699][ T6637] tpg quantization: 0/0 [ 72.704101][ T6637] tpg RGB range: 0/2 [ 72.705498][ T6637] vivid-000: ================== END STATUS ================== [ 72.745875][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 72.763778][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 72.889154][ T1494] usb 5-1: USB disconnect, device number 3 [ 73.039790][ T6653] syzkaller0: entered promiscuous mode [ 73.041721][ T6653] syzkaller0: entered allmulticast mode [ 73.080162][ T6672] netlink: 'syz.2.244': attribute type 29 has an invalid length. [ 73.083243][ T6672] netlink: 'syz.2.244': attribute type 3 has an invalid length. [ 73.086345][ T6672] netlink: 76 bytes leftover after parsing attributes in process `syz.2.244'. [ 73.177303][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.195467][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 73.195480][ T43] audit: type=1400 audit(1784807729.023:473): avc: denied { mount } for pid=6676 comm="syz.1.245" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 73.546993][ T1494] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 73.708635][ T1494] usb 5-1: config 0 has no interfaces? [ 73.712989][ T1494] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 73.716743][ T1494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.720011][ T1494] usb 5-1: Product: syz [ 73.721892][ T1494] usb 5-1: Manufacturer: syz [ 73.723822][ T1494] usb 5-1: SerialNumber: syz [ 73.737250][ T1494] usb 5-1: config 0 descriptor?? [ 73.959588][ T847] usb 5-1: USB disconnect, device number 4 [ 73.967071][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.967104][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.971789][ T5097] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.127436][ T43] audit: type=1400 audit(1784807729.963:474): avc: denied { create } for pid=6695 comm="syz.1.251" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.135770][ T43] audit: type=1400 audit(1784807729.963:475): avc: denied { read append open } for pid=6695 comm="syz.1.251" path="/61/file0/cpuset.effective_cpus" dev="9p" ino=77858047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.163017][ T6698] loop4: detected capacity change from 0 to 7 [ 74.163647][ T43] audit: type=1400 audit(1784807729.993:476): avc: denied { ioctl } for pid=6695 comm="syz.1.251" path="/61/file0/cpuset.effective_cpus" dev="9p" ino=77858047 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.274336][ T43] audit: type=1400 audit(1784807730.103:477): avc: denied { unlink } for pid=6702 comm="syz.3.254" name="#9" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.291803][ T43] audit: type=1400 audit(1784807730.123:478): avc: denied { create } for pid=6702 comm="syz.3.254" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.300621][ T43] audit: type=1400 audit(1784807730.133:479): avc: denied { link } for pid=6702 comm="syz.3.254" name="#b" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.310091][ T43] audit: type=1400 audit(1784807730.133:480): avc: denied { rename } for pid=6702 comm="syz.3.254" name="#c" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.383369][ T6708] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 74.413473][ T6708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.418516][ T6708] bond1: (slave bond2): making interface the new active one [ 74.421602][ T6708] bond1: (slave bond2): Enslaving as an active interface with an up link [ 74.438601][ T6708] netlink: 216 bytes leftover after parsing attributes in process `syz.1.253'. [ 74.468615][ T6698] Dev loop4: unable to read RDB block 7 [ 74.470571][ T6698] loop4: unable to read partition table [ 74.472485][ T6698] loop4: partition table beyond EOD, truncated [ 74.474475][ T6698] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 74.574692][ T6724] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 74.578340][ T43] audit: type=1400 audit(1784807730.413:481): avc: denied { create } for pid=6723 comm="syz.2.259" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 74.580438][ T6724] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 74.608148][ T43] audit: type=1400 audit(1784807730.413:482): avc: denied { associate } for pid=6723 comm="syz.2.259" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 74.637729][ T6724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.637724][ T847] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.797307][ T847] usb 8-1: Using ep0 maxpacket: 8 [ 74.804427][ T847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.809492][ T847] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.812972][ T847] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.816231][ T847] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 74.820255][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.826092][ T847] hub 8-1:1.0: bad descriptor, ignoring hub [ 74.834374][ T847] hub 8-1:1.0: probe with driver hub failed with error -5 [ 74.842942][ T847] cdc_wdm 8-1:1.0: skipping garbage [ 74.847528][ T847] cdc_wdm 8-1:1.0: skipping garbage [ 74.850315][ T847] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 75.147369][ T847] usb 8-1: USB disconnect, device number 3 [ 75.247175][ T64] Bluetooth: hci1: command 0x0c1a tx timeout qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xcd000) [ 75.487883][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 75.490121][ T1134] ata1: failed to read log page 10h (errno=-5) [ 75.492179][ T1134] ata1.00: exception Emask 0x1 SAct 0xe000 SErr 0x0 action 0x0 [ 75.494735][ T1134] ata1.00: irq_stat 0x41000000 [ 75.496402][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 75.498578][ T1134] ata1.00: cmd 61/c0:68:a6:11:08/02:00:00:00:00/40 tag 13 ncq dma 360448 out [ 75.498578][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 75.504108][ T1134] ata1.00: status: { DRDY } [ 75.505547][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 75.509720][ T1134] ata1.00: cmd 61/68:70:66:14:08/06:00:00:00:00/40 tag 14 ncq dma 839680 out [ 75.509720][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 75.515505][ T1134] ata1.00: status: { DRDY } [ 75.518466][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 75.520504][ T1134] ata1.00: cmd 61/f0:78:ce:1a:08/03:00:00:00:00/40 tag 15 ncq dma 516096 out [ 75.520504][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 75.526174][ T1134] ata1.00: status: { DRDY } [ 75.528798][ T1134] ata1.00: configured for UDMA/100 [ 75.531069][ T1134] ata1: EH complete [ 75.817337][ T5834] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.821692][ T5834] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.831816][ T5834] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 75.896119][ T6783] veth1_to_batadv: entered promiscuous mode [ 75.899872][ T6782] veth1_to_batadv: left promiscuous mode [ 75.938909][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 75.977401][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 76.052567][ T64] Bluetooth: hci0: Malformed Event: 0x02 [ 76.087571][ T6815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.304725][ T6833] afs: Unknown parameter 'dont_appraise' [ 76.310542][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 76.314785][ T6833] overlayfs: missing 'workdir' [ 76.387057][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.487685][ T6843] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 76.489461][ T6843] @0: renamed from bond_slave_1 (while UP) [ 76.547115][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 76.550929][ T5834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 76.554140][ T5834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.558006][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.561729][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.565683][ T5834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.570855][ T5834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.574449][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.676232][ T6849] netlink: 'syz.2.297': attribute type 4 has an invalid length. [ 76.695582][ T6849] Process accounting resumed [ 76.750895][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 76.771522][ T6855] deleting an unspecified loop device is not supported. [ 76.775064][ T6856] ufs: You didn't specify the type of your ufs filesystem [ 76.775064][ T6856] [ 76.775064][ T6856] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 76.775064][ T6856] [ 76.775064][ T6856] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 76.792751][ T5834] usb 6-1: GET_CAPABILITIES returned 0 [ 76.794645][ T5834] usbtmc 6-1:16.0: can't read capabilities [ 76.795832][ T6858] xt_l2tp: invalid flags combination: 8 [ 76.803161][ T6856] ufs: You didn't specify the type of your ufs filesystem [ 76.803161][ T6856] [ 76.803161][ T6856] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 76.803161][ T6856] [ 76.803161][ T6856] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 76.803692][ T6858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6858 comm=syz.2.301 [ 76.816192][ T6856] ufs: You didn't specify the type of your ufs filesystem [ 76.816192][ T6856] [ 76.816192][ T6856] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 76.816192][ T6856] [ 76.816192][ T6856] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 76.854769][ T6862] CUSE: info not properly terminated [ 76.919580][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 76.927095][ T6872] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 76.930467][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 76.951379][ T6872] geneve3: entered promiscuous mode [ 76.953573][ T6872] geneve3: entered allmulticast mode [ 77.047389][ T847] usb 6-1: USB disconnect, device number 3 [ 77.175350][ T6881] syzkaller0: entered promiscuous mode [ 77.177691][ T6881] syzkaller0: entered allmulticast mode [ 77.277929][ T6894] syzkaller1: entered promiscuous mode [ 77.280382][ T6894] syzkaller1: entered allmulticast mode [ 77.625104][ T6919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.751312][ T6924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.762930][ T6924] ovl_remap_lower_ino: 8 callbacks suppressed [ 77.762941][ T6924] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 77.767733][ T6924] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 77.770458][ T6924] overlayfs: d_ino too big (74, ino=9223372036854776224, xinobits=3) [ 77.773301][ T6924] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 77.776152][ T6924] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 77.779332][ T6924] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 77.782062][ T6924] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 77.784839][ T6924] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 77.787848][ T6924] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 77.790673][ T6924] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 78.303824][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 78.303837][ T43] audit: type=1400 audit(1784807734.133:511): avc: denied { ioctl } for pid=6933 comm="syz.0.315" path="socket:[15114]" dev="sockfs" ino=15114 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.307046][ T1351] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 78.315950][ T43] audit: type=1400 audit(1784807734.143:512): avc: denied { listen } for pid=6933 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.326786][ T43] audit: type=1400 audit(1784807734.143:513): avc: denied { accept } for pid=6933 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.397193][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.468356][ T43] audit: type=1400 audit(1784807734.303:514): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.468845][ T1351] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.481125][ T1351] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.485445][ T1351] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 78.490099][ T1351] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.493907][ T1351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.500103][ T6926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.505896][ T1351] hub 7-1:1.0: bad descriptor, ignoring hub [ 78.508739][ T1351] hub 7-1:1.0: probe with driver hub failed with error -5 [ 78.512089][ T1351] cdc_wdm 7-1:1.0: skipping garbage [ 78.513217][ T43] audit: type=1400 audit(1784807734.343:515): avc: denied { write } for pid=6938 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.514233][ T1351] cdc_wdm 7-1:1.0: skipping garbage [ 78.526338][ T1351] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 78.529236][ T1351] cdc_wdm 7-1:1.0: Unknown control protocol [ 78.533930][ T6939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.547075][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 78.551831][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.556349][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 78.561047][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 78.564787][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.568721][ T24] usb 8-1: Product: syz [ 78.571243][ T24] usb 8-1: Manufacturer: syz [ 78.575551][ T24] usb 8-1: SerialNumber: syz [ 78.591662][ T24] usb 8-1: config 0 descriptor?? [ 78.598614][ T6941] __nla_validate_parse: 2 callbacks suppressed [ 78.598628][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 78.604265][ T6941] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 78.609296][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 78.620999][ T6941] geneve3: entered promiscuous mode [ 78.622895][ T6941] geneve3: entered allmulticast mode [ 78.706523][ T43] audit: type=1400 audit(1784807734.533:516): avc: denied { read write } for pid=6925 comm="syz.2.312" name="cdc-wdm0" dev="devtmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 78.713892][ T43] audit: type=1400 audit(1784807734.533:517): avc: denied { open } for pid=6925 comm="syz.2.312" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 78.802055][ C2] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 78.802495][ T43] audit: type=1400 audit(1784807734.633:518): avc: denied { read write } for pid=6960 comm="syz.0.324" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 78.804702][ T6961] xt_cgroup: xt_cgroup: no path or classid specified [ 78.806567][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 78.812306][ T43] audit: type=1400 audit(1784807734.633:519): avc: denied { open } for pid=6960 comm="syz.0.324" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 78.812334][ T43] audit: type=1400 audit(1784807734.633:520): avc: denied { ioctl } for pid=6960 comm="syz.0.324" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 78.815362][ T24] imon:send_packet: packet tx failed (-71) [ 78.857890][ T24] imon 8-1:0.0: panel buttons/knobs setup failed [ 78.863577][ T6968] 0x00000000001d-0x000000020000 : "" [ 78.882224][ T6968] ftl_cs: FTL header corrupt! [ 78.918034][ T24] rc_core: IR keymap rc-imon-pad not found [ 78.919891][ T24] Registered IR keymap rc-empty [ 78.925488][ T24] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 78.932197][ T24] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 78.938093][ T24] imon:send_packet: packet tx failed (-71) [ 78.957043][ T24] imon 8-1:0.0: remote input dev register failed [ 78.959298][ T24] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 79.023232][ T24] imon 8-1:0.0: unable to initialize intf0, err 0 [ 79.030864][ T24] imon:imon_probe: failed to initialize context! [ 79.032954][ T24] imon 8-1:0.0: unable to register, err -19 [ 79.043354][ T24] usb 8-1: USB disconnect, device number 4 [ 79.162695][ T6989] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 79.181912][ T6989] bond3: entered promiscuous mode [ 79.184144][ T6989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.201645][ T6989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.204807][ T6989] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 79.209108][ T6989] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 79.216450][ T6989] bond3: (slave ip6gre1): making interface the new active one [ 79.219704][ T6989] ip6gre1: entered promiscuous mode [ 79.223335][ T6989] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 79.238467][ T6989] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 79.241110][ T6989] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 79.244141][ T6989] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 79.291244][ T6926] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 79.332075][ T7004] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 79.337006][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 79.386320][ T7008] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.414140][ T7013] block nbd0: NBD_DISCONNECT [ 79.468014][ T7018] hugetlbfs: syz.1.339 (7018): Using mlock ulimits for SHM_HUGETLB is obsolete [ 79.488438][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 79.492720][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 79.496129][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.500796][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 79.503665][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.506134][ T24] usb 8-1: Product: syz [ 79.507859][ T24] usb 8-1: Manufacturer: syz [ 79.509409][ T24] usb 8-1: SerialNumber: syz [ 79.512783][ T24] usb 8-1: config 0 descriptor?? [ 79.515103][ T6929] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.597699][ T6926] usb 7-1: device firmware changed [ 79.603480][ T6926] cdc_wdm 7-1:1.0: Error autopm - -16 [ 79.603641][ T5649] usb 7-1: USB disconnect, device number 5 [ 79.606674][ T7012] cdc_wdm 7-1:1.0: Error autopm - -16 [ 79.610771][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'. [ 79.723751][ C2] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 79.735598][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 79.757100][ T5649] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 79.773940][ T7024] nbd: must specify at least one socket [ 79.807161][ T24] rc_core: IR keymap rc-imon-pad not found [ 79.809734][ T24] Registered IR keymap rc-empty [ 79.811829][ T24] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 79.815288][ T7027] netlink: 'syz.0.343': attribute type 12 has an invalid length. [ 79.816903][ T24] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 79.910609][ T5649] usb 7-1: unable to get BOS descriptor or descriptor too short [ 79.913723][ T5649] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 79.916171][ T5649] usb 7-1: can't read configurations, error -71 [ 79.970509][ T24] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 79.974815][ T24] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input13 [ 79.982629][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 79.983330][ T24] imon 8-1:0.0: iMON device (15c2:0045, intf0) on usb<8:5> initialized [ 79.992649][ T24] usb 8-1: USB disconnect, device number 5 [ 80.086406][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 80.089925][ T7037] netlink: 868 bytes leftover after parsing attributes in process `syz.3.345'. [ 80.182137][ T7045] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.346'. [ 80.187848][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 80.400952][ T5834] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.403432][ T5834] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.411623][ T5834] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 80.859590][ T7067] input: syz0 as /devices/virtual/input/input15 [ 81.052127][ T7079] kvm: kvm [7078]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 81.056315][ T7079] kvm: kvm [7078]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 81.263302][ T64] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 81.263574][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 81.330886][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.360'. [ 81.375695][ T7106] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 81.653407][ T7139] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 81.680446][ T5576] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.684185][ T7139] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 81.690025][ T5576] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.696055][ T5576] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.698723][ T5576] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.981973][ T7174] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 81.984366][ T29] cfg80211: failed to load regulatory.db [ 82.017340][ T40] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 82.131308][ T7183] nft_compat: unsupported protocol 0 [ 82.187145][ T40] usb 8-1: Using ep0 maxpacket: 32 [ 82.193485][ T40] usb 8-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.209413][ T40] usb 8-1: config 1 interface 0 has no altsetting 0 [ 82.215210][ T40] usb 8-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.40 [ 82.223044][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.226412][ T40] usb 8-1: Product: ⢆䎟৶璨ᯰ䉻언ꤱ엶幔쀽䋺Ⴘᖷ먿㎣丅傷趾ᅀ띎᚞綔叠莸&픋⽀ᣄ䄆慁툎Ꚁㅻᘽ偲燓⊆Ź윮喨䲌螊蟫㾾騱⟿텖ᵘ⯗稭㧝짂쇔䪆䒫Ꮞι꣼꺞㮢㿆堼孥軸璳╺琓矷퇻 [ 82.237904][ T40] usb 8-1: Manufacturer: 蕿ᅹ烰뿤✯페㡒金傘⢚Ǚ橪䁲끕ꨖ須짘炮번罓⁂櫿ꄰ쟇꒸Ϡ昧喡䕲啽碛꺀뺊䪡㔗झ쪃씹쟖쏜쟚逧聿惉帝 [ 82.245125][ T40] usb 8-1: SerialNumber: Љ [ 82.469554][ T40] usbhid 8-1:1.0: can't add hid device: -71 [ 82.472082][ T40] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 82.478838][ T40] usb 8-1: USB disconnect, device number 6 [ 82.608210][ T7223] netlink: 'syz.0.388': attribute type 29 has an invalid length. [ 83.007149][ T1494] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.007154][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.013755][ T1494] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 84.528440][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.087280][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.091528][ T1494] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 85.093900][ T1494] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 85.329770][ T5097] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.334401][ T5097] Bluetooth: hci2: Injecting HCI hardware error event [ 85.337957][ T64] Bluetooth: hci2: hardware error 0x00 [ 87.167104][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.167329][ T1494] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 87.173535][ T1494] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 89.247185][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.247700][ T1494] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 89.252145][ T1494] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 89.483875][ T7237] fuse: Bad value for 'user_id' [ 89.485510][ T7237] fuse: Bad value for 'user_id' [ 89.488802][ T7238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7238 comm=syz.2.390 [ 89.489037][ T7237] overlayfs: conflicting lowerdir path [ 89.541513][ T43] kauditd_printk_skb: 53 callbacks suppressed [ 89.541531][ T43] audit: type=1400 audit(1784807745.373:574): avc: denied { name_bind } for pid=7243 comm="syz.0.395" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 89.694255][ T43] audit: type=1400 audit(1784807745.523:575): avc: denied { nlmsg_read } for pid=7258 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.714003][ T7264] netlink: 'syz.0.403': attribute type 3 has an invalid length. [ 89.753554][ T7260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.755006][ T7264] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.816864][ T7264] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 89.820158][ T7264] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 89.844166][ T7275] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 89.846340][ T43] audit: type=1400 audit(1784807745.673:576): avc: denied { mounton } for pid=7274 comm="syz.1.406" path="/105/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 89.869726][ T7260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.883267][ T7264] i2c i2c-1: dtv_property_process_set: SET cmd 0x7665642f undefined [ 89.918562][ T7264] hub 1-0:1.0: USB hub found [ 89.923018][ T7264] hub 1-0:1.0: 2 ports detected [ 89.983117][ T7260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.998625][ T7292] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.007076][ T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 90.109204][ T7290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.129255][ T43] audit: type=1400 audit(1784807745.963:577): avc: denied { append } for pid=7298 comm="syz.0.413" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.152674][ T7260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.168713][ T24] usb 8-1: config 0 has no interfaces? [ 90.172833][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.175171][ T43] audit: type=1400 audit(1784807746.003:578): avc: denied { setattr } for pid=7298 comm="syz.0.413" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.175745][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.185936][ T24] usb 8-1: Product: syz [ 90.187230][ T24] usb 8-1: Manufacturer: syz [ 90.188626][ T24] usb 8-1: SerialNumber: syz [ 90.192843][ T24] usb 8-1: config 0 descriptor?? [ 90.287901][ T5834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 90.293756][ T5576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.328302][ T5576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337031][ T43] audit: type=1400 audit(1784807746.163:579): avc: denied { bind } for pid=7300 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.346680][ T5576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.363895][ T5576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.414492][ T24] usb 8-1: USB disconnect, device number 7 [ 90.426860][ T43] audit: type=1400 audit(1784807746.253:580): avc: denied { name_connect } for pid=7309 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 90.441216][ T5834] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.444573][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.450051][ T5834] usb 6-1: Product: syz [ 90.451392][ T5834] usb 6-1: Manufacturer: syz [ 90.454109][ T5834] usb 6-1: SerialNumber: syz [ 90.516234][ T7307] __nla_validate_parse: 7 callbacks suppressed [ 90.516254][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 90.537032][ T43] audit: type=1400 audit(1784807746.363:581): avc: denied { remount } for pid=7303 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.537069][ T7304] tmpfs: Bad value for 'size' [ 90.594660][ T7318] loop4: detected capacity change from 0 to 2640 [ 90.600462][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.603888][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.609950][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.613024][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.616164][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.618956][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.621464][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.624050][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.626609][ T7318] ldm_validate_partition_table(): Disk read failed. [ 90.628786][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.631207][ T7318] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.633749][ T7318] Dev loop4: unable to read RDB block 0 [ 90.635889][ T7318] loop4: unable to read partition table [ 90.637942][ T7318] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 90.642252][ T43] audit: type=1400 audit(1784807746.473:582): avc: denied { map } for pid=7317 comm="syz.2.418" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.651542][ T43] audit: type=1400 audit(1784807746.473:583): avc: denied { execute } for pid=7317 comm="syz.2.418" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.678675][ T5834] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 90.684876][ T5834] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 90.689245][ T5834] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 90.698902][ T5834] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 90.699376][ T5148] ldm_validate_partition_table(): Disk read failed. [ 90.704658][ T5148] Dev loop4: unable to read RDB block 0 [ 90.705655][ T5834] usb 6-1: USB disconnect, device number 4 [ 90.707267][ T5148] loop4: unable to read partition table [ 91.127830][ T7340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.424'. [ 91.196173][ T7342] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 91.200067][ T7342] netlink: 756 bytes leftover after parsing attributes in process `syz.2.425'. [ 91.214816][ T7348] netlink: 11148 bytes leftover after parsing attributes in process `syz.1.427'. [ 91.250835][ T7354] CUSE: unknown device info "" [ 91.252984][ T7354] CUSE: unknown device info "" [ 91.255241][ T7354] CUSE: unknown device info "" [ 91.259652][ T7354] CUSE: unknown device info "" [ 91.261861][ T7354] CUSE: zero length info key specified [ 91.289660][ T7354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.473220][ T7373] trusted_key: encrypted_key: insufficient parameters specified [ 91.502997][ T7381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7381 comm=syz.3.437 [ 91.523445][ T7381] bond2: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 91.597666][ T40] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 91.749193][ T40] usb 5-1: No LPM exit latency info found, disabling LPM. [ 91.763479][ T40] usb 5-1: config 1 has an invalid interface number: 24 but max is 3 [ 91.766764][ T40] usb 5-1: config 1 has an invalid interface number: 188 but max is 3 [ 91.772267][ T40] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 91.775077][ T40] usb 5-1: config 1 has an invalid interface number: 111 but max is 3 [ 91.778020][ T40] usb 5-1: config 1 has an invalid interface number: 224 but max is 3 [ 91.781043][ T40] usb 5-1: config 1 has no interface number 0 [ 91.783542][ T40] usb 5-1: config 1 has no interface number 1 [ 91.786083][ T40] usb 5-1: config 1 has no interface number 2 [ 91.789021][ T40] usb 5-1: config 1 has no interface number 3 [ 91.791697][ T40] usb 5-1: config 1 interface 24 altsetting 238 has an invalid descriptor for endpoint zero, skipping [ 91.796174][ T40] usb 5-1: config 1 interface 24 altsetting 238 endpoint 0x9 has invalid maxpacket 64, setting to 8 [ 91.800725][ T40] usb 5-1: config 1 interface 24 altsetting 238 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 91.805177][ T40] usb 5-1: config 1 interface 24 altsetting 238 has a duplicate endpoint with address 0x9, skipping [ 91.810022][ T40] usb 5-1: config 1 interface 188 altsetting 7 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 91.815029][ T40] usb 5-1: config 1 interface 188 altsetting 7 endpoint 0x8 has invalid maxpacket 1495, setting to 8 [ 91.819765][ T40] usb 5-1: config 1 interface 111 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 91.823830][ T40] usb 5-1: config 1 interface 111 altsetting 127 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 91.828554][ T40] usb 5-1: config 1 interface 111 altsetting 127 has a duplicate endpoint with address 0x89, skipping [ 91.833030][ T40] usb 5-1: config 1 interface 111 altsetting 127 endpoint 0xC has invalid maxpacket 407, setting to 8 [ 91.837791][ T40] usb 5-1: config 1 interface 111 altsetting 127 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 91.842331][ T40] usb 5-1: config 1 interface 111 altsetting 127 endpoint 0x1 has invalid maxpacket 1023, setting to 8 [ 91.846712][ T40] usb 5-1: config 1 interface 111 altsetting 127 endpoint 0xE has invalid maxpacket 1919, setting to 8 [ 91.851292][ T40] usb 5-1: config 1 interface 111 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 91.855080][ T40] usb 5-1: config 1 interface 111 altsetting 127 endpoint 0xB has invalid maxpacket 1024, setting to 0 [ 91.858977][ T40] usb 5-1: config 1 interface 111 altsetting 127 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 91.863187][ T40] usb 5-1: config 1 interface 224 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 91.866450][ T40] usb 5-1: config 1 interface 224 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 91.869753][ T40] usb 5-1: config 1 interface 224 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 91.872970][ T40] usb 5-1: config 1 interface 224 altsetting 6 endpoint 0x7 has invalid maxpacket 32, setting to 8 [ 91.876148][ T40] usb 5-1: config 1 interface 24 has no altsetting 0 [ 91.878569][ T40] usb 5-1: config 1 interface 188 has no altsetting 0 [ 91.881159][ T40] usb 5-1: config 1 interface 111 has no altsetting 0 [ 91.883638][ T40] usb 5-1: config 1 interface 224 has no altsetting 0 [ 92.598714][ T7418] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 92.608976][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 92.656556][ T7421] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 92.802618][ T7438] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 93.194261][ T7454] netlink: 'syz.3.462': attribute type 4 has an invalid length. [ 93.197318][ T7454] netlink: 160 bytes leftover after parsing attributes in process `syz.3.462'. [ 93.315970][ T7456] bad cache= option: nonenr_mlock 0 [ 93.315970][ T7456] nr_zspages 0 [ 93.315970][ T7456] nr_free_cma 0 [ 93.315970][ T7456] numa_hit 649383 [ 93.315970][ T7456] numa_miss 153588 [ 93.315970][ T7456] numa_foreign 153588 [ 93.315970][ T7456] numa_interleave 7862 [ 93.315970][ T7456] numa_local 644950 [ 93.315970][ T7456] numa_other 158021 [ 93.315970][ T7456] nr_inactive_anon 116 [ 93.315970][ T7456] nr_active_anon 9562 [ 93.315970][ T7456] nr_inactive_file 61204 [ 93.315970][ T7456] nr_active_file 133 [ 93.315970][ T7456] nr_unevictable 1768 [ 93.315970][ T7456] nr_slab_reclaimable 12089 [ 93.315970][ T7456] nr_slab_unreclaimable 67843 [ 93.315970][ T7456] nr_isolated_anon 0 [ 93.315970][ T7456] nr_isolated_file 0 [ 93.315970][ T7456] workingset_nodes 1 [ 93.315970][ T7456] workingset_refault_anon 1545 [ 93.315970][ T7456] workingset_refault_file 54 [ 93.315970][ T7456] workingset_activate_anon 0 [ 93.315970][ T7456] workingset_activate_file 0 [ 93.315970][ T7456] workingset_restore_anon 0 [ 93.315970][ T7456] workingset_restore_file 0 [ 93.315970][ T7456] workingset_nodereclaim 0 [ 93.315970][ T7456] nr_anon_pages 9131 [ 93.315970][ T7456] nr_mapped 24801 [ 93.315970][ T7456] nr_file_pages 63632 [ 93.315970][ T7456] nr_dirty 52 [ 93.315970][ T7456] nr_writeback 0 [ 93.315970][ T7456] nr_shmem 2320 [ 93.315970][ T7456] nr_shmem_hugepages 0 [ 93.315970][ T7456] nr_shmem_pmdmapped 0 [ 93.315970][ T7456] nr_file_hugepages 0 [ 93.315970][ T7456] nr_file_pmdmapped 0 [ 93.315970][ T7456] nr_anon_transparent_hugepages 0 [ 93.315970][ T7456] nr_vmscan_write 2553 [ 93.315970][ T7456] nr_vmscan_immediate_reclaim 1 [ 93.315970][ T7456] nr_dirtied 1977 [ 93.315970][ T7456] nr_written 1925 [ 93.315970][ T7456] nr_throttled_written 0 [ 93.315970][ T7456] nr_kernel_misc_reclaimable 0 [ 93.315970][ T7456] nr_foll_pin_acquired 2580 [ 93.315970][ T7456] nr_foll_pin_released 2580 [ 93.315970][ T7456] nr_vmalloc 87551 [ 93.316348][ T7456] CIFS: VFS: bad cache= option: nonenr_mlock 0 [ 93.316348][ T7456] nr_zspages 0 [ 93.316348][ T7456] nr_free_cma 0 [ 93.316348][ T7456] numa_hit 649383 [ 93.316348][ T7456] numa_miss 153588 [ 93.316348][ T7456] numa_foreign 153588 [ 93.316348][ T7456] numa_interleave 7862 [ 93.316348][ T7456] numa_local 644950 [ 93.316348][ T7456] numa_other 158021 [ 93.316348][ T7456] nr_inactive_anon 116 [ 93.316348][ T7456] nr_active_anon 9562 [ 93.316348][ T7456] nr_inactive_file 61204 [ 93.316348][ T7456] nr_active_file 133 [ 93.316348][ T7456] nr_unevictable 1768 [ 93.316348][ T7456] nr_slab_reclaimable 12089 [ 93.316348][ T7456] nr_slab_unreclaimable 67843 [ 93.316348][ T7456] nr_isolated_anon 0 [ 93.316348][ T7456] nr_isolated_file 0 [ 93.316348][ T7456] workingset_nodes 1 [ 93.316348][ T7456] workingset_refault_anon 1545 [ 93.316348][ T7456] workingset_refault_file 54 [ 93.316348][ T7456] workingset_activate_anon 0 [ 93.316348][ T7456] workingset_activate_file 0 [ 93.316348][ T7456] workingset_restore_anon 0 [ 93.316348][ T7456] workingset_restore_file 0 [ 93.316348][ T7456] workingset_nodereclaim 0 [ 93.316348][ T7456] nr_anon_pages 9131 [ 93.316348][ T7456] nr_mapped 24801 [ 93.316348][ T7456] nr_file_pages 63632 [ 93.316348][ T7456] nr_dirty 52 [ 93.316348][ T7456] nr_writeback 0 [ 93.316348][ T7456] nr_shmem 2320 [ 93.316348][ T7456] nr_shmem_hugepages 0 [ 93.316348][ T7456] nr_shmem_pmdmapped 0 [ 93.316348][ T7456] nr_file_hugepages 0 [ 93.316348][ T7456] nr_file_pmdmapped 0 [ 93.316348][ T7456] nr_anon_transparent_hugepages 0 [ 93.316348][ T7456] nr_vmscan_write 2553 [ 93.316348][ T7456] nr_vmscan_immediate_reclaim 1 [ 93.316348][ T7456] nr_dirtied 1977 [ 93.316348][ T7456] nr_written 1925 [ 93.316348][ T7456] nr_throttled_written 0 [ 93.316348][ T7456] nr_kernel_misc_reclaimable 0 [ 93.316348][ T7456] nr_foll_pin_acquired 2580 [ 93.316348][ T7456] nr_foll_pin_released 2580 [ 93.417012][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.631138][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.636617][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.643656][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.648577][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.656302][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.666247][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.671122][ T24] usb 7-1: Product: syz [ 93.672826][ T24] usb 7-1: Manufacturer: syz [ 93.682635][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 93.685470][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 93.688800][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 93.691245][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 93.927240][ T24] usb 7-1: USB disconnect, device number 8 [ 93.996457][ T7468] netlink: 'syz.1.465': attribute type 19 has an invalid length. [ 94.121614][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.162773][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.394516][ T40] usb 5-1: New USB device found, idVendor=1e70, idProduct=e9e9, bcdDevice=d8.c6 [ 94.402711][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.423074][ T7483] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.431245][ T40] usb 5-1: can't set config #1, error -71 [ 94.433757][ T7483] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 94.443837][ T7483] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.447947][ T40] usb 5-1: USB disconnect, device number 5 [ 94.451824][ T7483] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 94.475382][ T7486] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 94.478239][ T7486] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.483240][ T7486] vhci_hcd vhci_hcd.0: Device attached [ 94.495582][ T7486] binder: 7485:7486 ioctl 400c620e 200000000180 returned -22 [ 94.511793][ T7487] vhci_hcd: connection closed [ 94.512063][ T5576] vhci_hcd vhci_hcd.0: stop threads [ 94.518496][ T5576] vhci_hcd vhci_hcd.0: release socket [ 94.520817][ T5576] vhci_hcd vhci_hcd.0: disconnect device [ 94.623057][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 94.623076][ T43] audit: type=1400 audit(1784807750.453:595): avc: denied { bind } for pid=7496 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.689238][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 94.855122][ T7514] tipc: Can't bind to reserved service type 2 [ 94.932464][ T43] audit: type=1400 audit(1784807750.763:596): avc: denied { read } for pid=7517 comm="syz.1.482" path="socket:[19241]" dev="sockfs" ino=19241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.045203][ T43] audit: type=1400 audit(1784807750.873:597): avc: denied { mmap_zero } for pid=7517 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 95.083657][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 95.094735][ T7522] openvswitch: netlink: Missing key (keys=40, expected=100) [ 95.111105][ T7526] netlink: 'syz.0.485': attribute type 5 has an invalid length. [ 95.135623][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.139615][ T7531] netlink: 'syz.1.487': attribute type 14 has an invalid length. [ 95.142880][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 95.160799][ T5576] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.160889][ T7531] netlink: 'syz.1.487': attribute type 14 has an invalid length. [ 95.163833][ T5576] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.175610][ T5576] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.180307][ T5576] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.213948][ T7537] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 95.223351][ T43] audit: type=1400 audit(1784807751.053:598): avc: denied { setopt } for pid=7536 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.350286][ T7545] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 95.449265][ T43] audit: type=1400 audit(1784807751.283:599): avc: denied { write } for pid=7553 comm="syz.3.493" lport=34906 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.451482][ T7562] BIDI support in bsg has been removed. [ 95.462998][ T43] audit: type=1400 audit(1784807751.293:600): avc: denied { read } for pid=7553 comm="syz.3.493" lport=34906 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.633387][ T7570] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 95.638925][ T43] audit: type=1400 audit(1784807751.473:601): avc: denied { getopt } for pid=7568 comm="syz.3.499" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.647801][ T43] audit: type=1400 audit(1784807751.473:602): avc: denied { write } for pid=7571 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.672603][ T43] audit: type=1400 audit(1784807751.503:603): avc: denied { setattr } for pid=7571 comm="syz.1.500" name="PACKET" dev="sockfs" ino=18163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.767744][ T7575] __nla_validate_parse: 3 callbacks suppressed [ 95.767762][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 95.870634][ T7589] No such timeout policy "syz1" [ 96.115778][ T43] audit: type=1400 audit(1784807751.943:604): avc: denied { map } for pid=7613 comm="syz.3.515" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.434466][ T7639] kvm: Disabled LAPIC found during irq injection [ 96.667123][ T5834] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.817147][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 96.822842][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.826907][ T5834] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.830530][ T5834] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.834698][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.841915][ T5834] usb 6-1: config 0 descriptor?? [ 97.297185][ T7672] netlink: 'syz.2.530': attribute type 14 has an invalid length. [ 97.300737][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 97.305702][ T7672] netlink: 'syz.2.530': attribute type 14 has an invalid length. [ 97.309035][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 97.356251][ T7678] kAFS: unable to lookup cell 'syz1' [ 97.357016][ T7677] kAFS: unable to lookup cell 'syz1' [ 97.657045][ T5834] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 97.818792][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.823255][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.827078][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.831911][ T5834] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.835467][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.840970][ T5834] usb 7-1: config 0 descriptor?? [ 98.172582][ T7704] 9p: Unknown uid 00000000004294967295 [ 98.252599][ T5834] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 0/15 [ 98.256420][ T5834] plantronics 0003:047F:FFFF.0007: parse failed [ 98.260861][ T5834] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 98.483282][ T5834] usb 7-1: USB disconnect, device number 9 [ 98.947102][ T1351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.095442][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 99.117337][ T1351] usb 5-1: Using ep0 maxpacket: 8 [ 99.123245][ T1351] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 99.132182][ T1351] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.146984][ T1351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.151352][ T1351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.161393][ T1351] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 99.165150][ T1351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.168934][ T1351] usb 5-1: Product: syz [ 99.170758][ T1351] usb 5-1: Manufacturer: syz [ 99.172718][ T1351] usb 5-1: SerialNumber: syz [ 99.180905][ T1351] usb 5-1: config 0 descriptor?? [ 99.182736][ T7738] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.184080][ T7726] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 99.286369][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 99.299695][ T7742] vlan3: entered promiscuous mode [ 99.301393][ T7742] erspan0: entered promiscuous mode [ 99.392409][ T1351] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 99.411883][ T1351] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input18 [ 99.422975][ T42] usb 6-1: USB disconnect, device number 5 [ 99.541371][ T7753] vlan1: entered promiscuous mode [ 99.578465][ T7756] loop4: detected capacity change from 0 to 7 [ 99.580041][ T7758] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 99.591197][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.594865][ C2] buffer_io_error: 217 callbacks suppressed [ 99.594876][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.606894][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.610100][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.615638][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.618719][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.621748][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.624798][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.630078][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.634178][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.640640][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.644807][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.648459][ C3] powermate: config urb returned -71 [ 99.654485][ C3] powermate: config urb returned -71 [ 99.658035][ C3] powermate: config urb returned -71 [ 99.660422][ C3] powermate: config urb returned -71 [ 99.662714][ T1351] usb 5-1: USB disconnect, device number 6 [ 99.665053][ C3] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 99.749158][ T7768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.555'. [ 99.843725][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 99.843739][ T43] audit: type=1400 audit(1784807755.673:621): avc: denied { read } for pid=7769 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.232293][ T7778] netlink: 136 bytes leftover after parsing attributes in process `syz.1.559'. [ 100.235897][ T7778] openvswitch: netlink: Flow actions attr not present in new flow. [ 100.274948][ T43] audit: type=1400 audit(1784807756.103:622): avc: denied { connect } for pid=7782 comm="syz.1.561" lport=36768 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.287128][ T43] audit: type=1400 audit(1784807756.103:623): avc: denied { name_connect } for pid=7782 comm="syz.1.561" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 100.293836][ T43] audit: type=1400 audit(1784807756.113:624): avc: denied { setopt } for pid=7782 comm="syz.1.561" lport=36768 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.312114][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 100.340146][ T43] audit: type=1400 audit(1784807756.173:625): avc: denied { module_request } for pid=7786 comm="syz.2.562" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.378384][ T43] audit: type=1400 audit(1784807756.213:626): avc: denied { read write } for pid=7786 comm="syz.2.562" name="file0" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.389231][ T43] audit: type=1400 audit(1784807756.213:627): avc: denied { map } for pid=7786 comm="syz.2.562" path="pipe:[21019]" dev="pipefs" ino=21019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.444870][ T7800] 9pnet_virtio: no channels available for device syz [ 100.875871][ T7824] IPv6: addrconf: prefix option has invalid lifetime [ 100.900527][ T7824] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 100.907670][ T7824] bond2 (unregistering): Released all slaves [ 100.935081][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 100.938548][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 100.947845][ T7826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'. [ 100.998288][ T43] audit: type=1400 audit(1784807756.833:628): avc: denied { lock } for pid=7827 comm="syz.2.573" path="socket:[18337]" dev="sockfs" ino=18337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 101.161487][ T43] audit: type=1400 audit(1784807756.993:629): avc: denied { execute } for pid=7835 comm="syz.0.576" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 101.194175][ T7840] overlayfs: invalid redirect (./bus) [ 101.275140][ T7842] 9pnet_virtio: no channels available for device syz [ 101.276666][ T43] audit: type=1400 audit(1784807757.103:630): avc: denied { write } for pid=7843 comm="syz.2.579" name="cgroup.subtree_control" dev="cgroup2" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.476028][ T7865] MTD: Couldn't look up './bus': -15 [ 101.507637][ T7870] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.556573][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 101.813745][ T7880] kvm: kvm [7879]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 101.817348][ T7880] kvm: kvm [7879]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 101.861674][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 101.883453][ T7880] kvm_intel: kvm [7879]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 101.899331][ T7880] kvm: kvm [7879]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 101.902540][ T7880] kvm: kvm [7879]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 102.093821][ T7885] 9p: Bad value for 'rfdno' [ 102.261930][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 102.405161][ T7900] netlink: 84 bytes leftover after parsing attributes in process `syz.2.593'. [ 102.408524][ T7900] nbd: must specify at least one socket [ 102.442238][ T7904] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.470575][ T7907] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 102.470575][ T7907] program syz.0.596 not setting count and/or reply_len properly [ 102.777035][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.930536][ T42] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 102.933544][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.936163][ T42] usb 5-1: Product: syz [ 102.938055][ T42] usb 5-1: Manufacturer: syz [ 102.939607][ T42] usb 5-1: SerialNumber: syz [ 102.943921][ T42] usb 5-1: config 0 descriptor?? [ 103.108999][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.604'. [ 103.153102][ T5834] usb 5-1: USB disconnect, device number 7 [ 103.212346][ T7932] bond4: entered promiscuous mode [ 103.523786][ T7946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.609'. [ 103.603173][ T7952] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 103.605513][ T7952] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 103.946755][ T7964] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 104.137070][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.228501][ T5834] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 104.234873][ T7978] 9pnet_virtio: no channels available for device syz [ 104.298787][ T5827] usb 5-1: too many configurations: 40, using maximum allowed: 8 [ 104.302686][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 104.305255][ T5827] usb 5-1: can't read configurations, error -61 [ 104.392702][ T5834] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 104.398860][ T5834] usb 7-1: can't read configurations, error -71 [ 104.447256][ T5827] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.608240][ T5827] usb 5-1: too many configurations: 40, using maximum allowed: 8 [ 104.613663][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 104.616361][ T5827] usb 5-1: can't read configurations, error -61 [ 104.618929][ T5827] usb usb5-port1: attempt power cycle [ 104.808555][ T5834] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 104.957010][ T5834] usb 7-1: Using ep0 maxpacket: 8 [ 104.957033][ T5827] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.960111][ T5834] usb 7-1: config 0 has no interfaces? [ 104.964530][ T5834] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 104.967906][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.970750][ T5834] usb 7-1: Product: syz [ 104.972123][ T5834] usb 7-1: Manufacturer: syz [ 104.973515][ T5834] usb 7-1: SerialNumber: syz [ 104.978099][ T5827] usb 5-1: too many configurations: 40, using maximum allowed: 8 [ 104.979481][ T5834] usb 7-1: config 0 descriptor?? [ 104.981656][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 104.984660][ T5827] usb 5-1: can't read configurations, error -61 [ 105.127080][ T5827] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.148190][ T5827] usb 5-1: too many configurations: 40, using maximum allowed: 8 [ 105.152653][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 105.155736][ T5827] usb 5-1: can't read configurations, error -61 [ 105.158967][ T5827] usb usb5-port1: unable to enumerate USB device [ 105.204234][ T42] usb 7-1: USB disconnect, device number 11 [ 105.302266][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 105.405341][ T8008] tmpfs: Bad value for 'mpol' [ 105.463891][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.466249][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.790022][ T8017] netlink: 'syz.2.630': attribute type 3 has an invalid length. [ 105.862970][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 105.862988][ T43] audit: type=1400 audit(1784807761.693:649): avc: denied { setattr } for pid=8020 comm="syz.2.632" path="/dev/nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.893833][ T8026] input: syz0 as /devices/virtual/input/input20 [ 106.207062][ T5834] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.337062][ T5834] usb 7-1: device descriptor read/64, error -71 [ 106.577185][ T5834] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 106.717013][ T5834] usb 7-1: device descriptor read/64, error -71 [ 106.735073][ T43] audit: type=1400 audit(1784807762.563:650): avc: denied { create } for pid=8030 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.744038][ T43] audit: type=1400 audit(1784807762.563:651): avc: denied { write } for pid=8030 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.798419][ T8035] 9pnet_virtio: no channels available for device syz [ 106.812700][ T5820] IPVS: starting estimator thread 0... [ 106.837327][ T5834] usb usb7-port1: attempt power cycle [ 106.897024][ T8036] IPVS: using max 44 ests per chain, 105600 per kthread [ 107.197082][ T5834] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 107.217819][ T5834] usb 7-1: device descriptor read/8, error -71 [ 107.457035][ T5834] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 107.477715][ T5834] usb 7-1: device descriptor read/8, error -71 [ 107.587557][ T5834] usb usb7-port1: unable to enumerate USB device [ 107.662689][ T8040] netlink: 'syz.0.638': attribute type 14 has an invalid length. [ 107.665217][ T8040] __nla_validate_parse: 1 callbacks suppressed [ 107.665226][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 107.672472][ T8040] netlink: 'syz.0.638': attribute type 14 has an invalid length. [ 107.675809][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 107.881541][ T43] audit: type=1400 audit(1784807763.713:652): avc: denied { map } for pid=8054 comm="syz.0.643" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.891455][ T43] audit: type=1400 audit(1784807763.713:653): avc: denied { write execute } for pid=8054 comm="syz.0.643" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.932391][ T43] audit: type=1400 audit(1784807763.763:654): avc: denied { accept } for pid=8057 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.524113][ T8137] overlay: Unknown parameter 'dont_appraise' [ 108.685119][ T8147] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 108.739988][ T8151] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 108.744109][ T8151] UDF-fs: Scanning with blocksize 2048 failed [ 108.750098][ T8151] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 108.754849][ T8151] UDF-fs: Scanning with blocksize 4096 failed [ 108.842968][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'. [ 108.845965][ T8159] Unknown options in mask b7f2 [ 108.987057][ T43] audit: type=1400 audit(1784807764.813:655): avc: denied { setopt } for pid=8165 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.058550][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 109.189455][ T8179] netlink: 11148 bytes leftover after parsing attributes in process `syz.2.661'. [ 109.646429][ T43] audit: type=1400 audit(1784807765.473:656): avc: denied { mount } for pid=8189 comm="syz.2.665" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 109.654251][ T8191] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.673739][ T43] audit: type=1400 audit(1784807765.503:657): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 109.682888][ T43] audit: type=1400 audit(1784807765.503:658): avc: denied { getopt } for pid=8192 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.823517][ T8213] netlink: 56 bytes leftover after parsing attributes in process `syz.2.673'. [ 109.864539][ T8211] binder: 8209:8211 ioctl c018620c 2000000001c0 returned -22 [ 109.934601][ T8219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.138727][ T8230] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 110.174802][ T8233] netlink: 9 bytes leftover after parsing attributes in process `syz.2.677'. [ 110.178809][ T8233] netlink: 9 bytes leftover after parsing attributes in process `syz.2.677'. [ 110.195897][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 110.225178][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 110.276690][ T8240] tipc: New replicast peer: 172.30.0.3 [ 110.278777][ T8240] tipc: Enabled bearer , priority 10 [ 110.281180][ T8240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8240 comm=syz.2.679 [ 110.285843][ T8240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8240 comm=syz.2.679 [ 110.340058][ T8247] 9pnet_virtio: no channels available for device syz [ 110.444346][ T8254] netlink: 'syz.0.683': attribute type 6 has an invalid length. [ 110.450626][ T8254] trusted_key: syz.0.683 sent an empty control message without MSG_MORE. [ 110.492951][ T8259] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 110.514070][ T8259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.553965][ T8259] syzkaller1: entered promiscuous mode [ 110.556167][ T8259] syzkaller1: entered allmulticast mode [ 110.630350][ T8265] batadv_slave_0: entered promiscuous mode [ 110.828950][ T8285] IPv6: Can't replace route, no match found [ 110.834277][ T8285] loop4: detected capacity change from 0 to 1 [ 110.841930][ T8285] Dev loop4: unable to read RDB block 1 [ 110.843454][ T8273] ceph: No mds server is up or the cluster is laggy [ 110.843833][ T8285] loop4: unable to read partition table [ 110.843931][ T8285] loop4: partition table beyond EOD, truncated [ 110.844589][ T8285] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 111.527077][ T5834] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 111.687003][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 111.692308][ T5834] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 111.695280][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.697861][ T5834] usb 7-1: Product: syz [ 111.699466][ T5834] usb 7-1: Manufacturer: syz [ 111.701353][ T5834] usb 7-1: SerialNumber: syz [ 111.708542][ T5834] usb 7-1: config 0 descriptor?? [ 111.784320][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 111.784339][ T43] audit: type=1400 audit(1784807767.613:670): avc: denied { execute } for pid=8311 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 111.803256][ T43] audit: type=1400 audit(1784807767.613:671): avc: denied { execute_no_trans } for pid=8311 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 111.845212][ T43] audit: type=1400 audit(1784807767.673:672): avc: denied { cmd } for pid=8312 comm="syz.0.701" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 111.885242][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.887076][ T8316] input: syz1 as /devices/virtual/input/input21 [ 111.893876][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.899708][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.903656][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.913293][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.944898][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.952865][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.958046][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.966024][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.968160][ T8319] No control pipe specified [ 111.970534][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.132340][ T5834] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 112.141998][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.145535][ T5834] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 112.150204][ T5834] usb 7-1: media controller created [ 112.164266][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.199467][ T5834] zl10353_read_register: readreg error (reg=127, ret==0) [ 112.201877][ T5834] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 112.204366][ T5834] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 112.208886][ T5834] usb 7-1: USB disconnect, device number 16 [ 112.235629][ T8335] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.254440][ T43] audit: type=1400 audit(1784807768.083:673): avc: denied { name_bind } for pid=8340 comm="syz.2.706" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 112.295956][ T5834] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 112.453538][ T43] audit: type=1326 audit(1784807768.283:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.1.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243f19de99 code=0x7ffc0000 [ 112.465560][ T43] audit: type=1326 audit(1784807768.293:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.1.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243f19de99 code=0x7ffc0000 [ 112.474864][ T43] audit: type=1326 audit(1784807768.293:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.1.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243f19de99 code=0x7ffc0000 [ 112.484923][ T43] audit: type=1326 audit(1784807768.293:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.1.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243f19de99 code=0x7ffc0000 [ 112.494115][ T43] audit: type=1326 audit(1784807768.293:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.1.712" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f243f19de99 code=0x7ffc0000 [ 112.503639][ T43] audit: type=1326 audit(1784807768.323:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.1.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243f19de99 code=0x7ffc0000 [ 112.679616][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.682732][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.685120][ T8317] bridge_slave_0: entered allmulticast mode [ 112.700220][ T8317] bridge_slave_0: entered promiscuous mode [ 112.705191][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.708837][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.711187][ T8317] bridge_slave_1: entered allmulticast mode [ 112.714268][ T8317] bridge_slave_1: entered promiscuous mode [ 112.735680][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.742377][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.779288][ T8317] team0: Port device team_slave_0 added [ 112.783169][ T8317] team0: Port device team_slave_1 added [ 112.815176][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.818166][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.828734][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.846351][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.848650][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.859279][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.935294][ T8317] hsr_slave_0: entered promiscuous mode [ 112.939640][ T8317] hsr_slave_1: entered promiscuous mode [ 112.941852][ T8317] debugfs: 'hsr0' already exists in 'hsr' [ 112.943660][ T8317] Cannot create hsr debugfs directory [ 113.183108][ T8317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.188824][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.191925][ T8317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.195972][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.199220][ T8317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.205377][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.208453][ T8317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.212324][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.267686][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.270951][ T8317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.274058][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.276361][ T8317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.328211][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.339678][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.346657][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.414055][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.435860][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.439019][ T8100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.449039][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.451958][ T8100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.651350][ T8420] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 113.688218][ T8420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.693966][ T8420] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 113.862636][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.017714][ T8450] vlan2: entered allmulticast mode [ 114.022380][ T8450] bond0: entered allmulticast mode [ 114.027108][ T8450] bond_slave_0: entered allmulticast mode [ 114.029585][ T8450] bond_slave_1: entered allmulticast mode [ 114.034852][ T8450] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 114.043523][ T8450] bridge0: port 3(vlan2) entered blocking state [ 114.046379][ T8450] bridge0: port 3(vlan2) entered disabled state [ 114.050217][ T64] Bluetooth: hci4: command tx timeout [ 114.052029][ T8450] vlan2: entered promiscuous mode [ 114.054852][ T8450] bond0: entered promiscuous mode [ 114.056441][ T8450] bond_slave_0: entered promiscuous mode [ 114.058512][ T8450] bond_slave_1: entered promiscuous mode [ 114.060363][ T8450] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 114.066349][ T8450] bridge0: port 3(vlan2) entered blocking state [ 114.069978][ T8450] bridge0: port 3(vlan2) entered forwarding state [ 114.111614][ T8317] veth0_vlan: entered promiscuous mode [ 114.132097][ T8317] veth1_vlan: entered promiscuous mode [ 114.170864][ T8317] veth0_macvtap: entered promiscuous mode [ 114.177121][ T8317] veth1_macvtap: entered promiscuous mode [ 114.186687][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.199250][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.212675][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.216180][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.226536][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.233158][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.339450][ T8097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.344701][ T8097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.368375][ T8100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.370895][ T8100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.373330][ T8470] __nla_validate_parse: 6 callbacks suppressed [ 114.373340][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 114.568040][ T5827] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 114.717249][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 114.720183][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.723946][ T5827] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.728979][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.731615][ T5827] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.734643][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.746126][ T5827] usb 6-1: config 0 descriptor?? [ 114.751590][ T5827] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 115.111939][ T8499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1491149184 (190867095552 ns) > initial count (176694493312 ns). Using initial count to start timer. [ 115.239923][ T8502] netlink: 656 bytes leftover after parsing attributes in process `syz.2.747'. [ 116.137164][ T64] Bluetooth: hci4: command tx timeout [ 117.354043][ T5827] usb 6-1: USB disconnect, device number 6 [ 118.209118][ T64] Bluetooth: hci4: command tx timeout [ 118.656373][ T8527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.698568][ T8564] sctp: [Deprecated]: syz.1.761 (pid 8564) Use of int in maxseg socket option. [ 118.698568][ T8564] Use struct sctp_assoc_value instead [ 118.761587][ T8566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8566 comm=syz.2.762 [ 118.768775][ T8566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8566 comm=syz.2.762 [ 118.926595][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 118.932174][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 118.936172][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 118.946812][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 118.946828][ T43] audit: type=1400 audit(1784807774.773:687): avc: denied { create } for pid=8584 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.959085][ T43] audit: type=1400 audit(1784807774.783:688): avc: denied { write } for pid=8584 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.005145][ T43] audit: type=1400 audit(1784807774.833:689): avc: denied { listen } for pid=8584 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.013187][ T43] audit: type=1400 audit(1784807774.833:690): avc: denied { accept } for pid=8584 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.088384][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.104181][ T43] audit: type=1400 audit(1784807774.933:691): avc: denied { read } for pid=8590 comm="syz.0.769" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.111492][ T43] audit: type=1400 audit(1784807774.933:692): avc: denied { open } for pid=8590 comm="syz.0.769" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.169172][ T8596] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 119.172200][ T8596] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 119.214597][ T8601] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 119.217116][ T8601] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.222133][ T8601] vhci_hcd vhci_hcd.0: Device attached [ 119.229363][ T8602] usbip_core: unknown command [ 119.231272][ T8602] vhci_hcd: unknown pdu 83886080 [ 119.233351][ T8602] usbip_core: unknown command [ 119.239306][ T5576] vhci_hcd vhci_hcd.2: stop threads [ 119.241350][ T5576] vhci_hcd vhci_hcd.2: release socket [ 119.243140][ T5576] vhci_hcd vhci_hcd.2: disconnect device [ 119.247234][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 119.251190][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.255581][ T42] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.260748][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 119.263622][ T42] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.267635][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.272133][ T42] usb 6-1: config 0 descriptor?? [ 119.282579][ T42] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 120.095978][ T43] audit: type=1400 audit(1784807775.923:693): avc: denied { ioctl } for pid=8609 comm="syz.0.775" path="socket:[28285]" dev="sockfs" ino=28285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.142743][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 120.146478][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 120.157973][ T8606] geneve2: entered promiscuous mode [ 120.287207][ T64] Bluetooth: hci4: command tx timeout [ 120.520391][ T8636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.541041][ T8632] sctp: [Deprecated]: syz.4.780 (pid 8632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.541041][ T8632] Use struct sctp_sack_info instead [ 120.624134][ T8644] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 120.640412][ T43] audit: type=1400 audit(1784807776.473:694): avc: denied { listen } for pid=8647 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.746144][ T43] audit: type=1400 audit(1784807776.573:695): avc: denied { block_suspend } for pid=8647 comm="syz.2.786" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.883040][ T8670] netlink: 52 bytes leftover after parsing attributes in process `syz.4.790'. [ 120.884317][ T8673] netlink: 92 bytes leftover after parsing attributes in process `syz.0.791'. [ 120.940422][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.948750][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.134331][ T8686] openvswitch: netlink: Missing key (keys=40, expected=100) [ 121.136478][ T43] audit: type=1400 audit(1784807776.963:696): avc: denied { relabelfrom } for pid=8683 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 121.141078][ T8685] netlink: 14 bytes leftover after parsing attributes in process `syz.4.796'. [ 121.573289][ T8715] overlayfs: overlapping lowerdir path [ 121.579175][ T8715] fuse: Unknown parameter 'group_i0GVPԐ|dHAK_+K+4 iu7n00000000000000000000' [ 121.673558][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 121.682372][ T8721] netlink: 'syz.4.805': attribute type 30 has an invalid length. [ 121.694557][ T5576] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.696177][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 121.699286][ T5576] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.701200][ T8721] netlink: 'syz.4.805': attribute type 30 has an invalid length. [ 121.703765][ T5576] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.703786][ T5576] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.852751][ T3273] usb 6-1: USB disconnect, device number 7 [ 121.953776][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 122.005744][ T8746] 8021q: adding VLAN 0 to HW filter on device eth0 [ 122.018320][ T8746] 8021q: adding VLAN 0 to HW filter on device eth1 [ 122.021655][ T8746] 8021q: adding VLAN 0 to HW filter on device eth2 [ 122.025393][ T8746] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.033232][ T8749] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 122.502876][ T8775] netlink: 200 bytes leftover after parsing attributes in process `syz.0.825'. [ 122.508581][ T8775] netlink: 'syz.0.825': attribute type 30 has an invalid length. [ 122.525378][ T8775] bond2: option arp_missed_max: invalid value (0) [ 122.527051][ T3273] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 122.527960][ T8775] bond2: option arp_missed_max: allowed values 1 - 255 [ 122.533773][ T8775] bond2 (unregistering): Released all slaves [ 122.677984][ T3273] usb 6-1: Using ep0 maxpacket: 8 [ 122.683198][ T3273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.694095][ T8797] fuse: Bad value for 'fd' [ 122.696604][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'. [ 122.697087][ T3273] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.704746][ T3273] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.714424][ T3273] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.722730][ T3273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.744770][ T3273] usb 6-1: config 0 descriptor?? [ 122.756785][ T3273] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 122.886896][ T8816] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 122.898453][ T8816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.902213][ T8816] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 122.912798][ T8816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.919178][ T8816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.923834][ T8816] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 122.928803][ T8816] bond0 (unregistering): Released all slaves [ 123.004372][ T8816] 9pnet_virtio: no channels available for device syz [ 123.009726][ T5820] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 123.167209][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 123.170598][ T5820] usb 7-1: config 0 has no interfaces? [ 123.176523][ T5820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.179666][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.182147][ T5820] usb 7-1: SerialNumber: syz [ 123.185037][ T5820] usb 7-1: config 0 descriptor?? [ 123.240179][ T8833] overlayfs: failed to clone upperpath [ 123.383437][ T8847] vivid-001: disconnect [ 123.433657][ T8846] vivid-001: reconnect [ 123.471195][ T10] usb 7-1: USB disconnect, device number 17 [ 123.596614][ T8855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.996850][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 123.996862][ T43] audit: type=1400 audit(1784807779.823:704): avc: denied { listen } for pid=8871 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.016021][ T43] audit: type=1400 audit(1784807779.843:705): avc: denied { accept } for pid=8871 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.044842][ T8877] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 124.206984][ T8885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.220615][ T43] audit: type=1400 audit(1784807780.053:706): avc: denied { mount } for pid=8884 comm="syz.2.856" name="/" dev="rpc_pipefs" ino=27493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 124.312819][ T43] audit: type=1400 audit(1784807780.143:707): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 125.118709][ T8921] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 125.144513][ T8921] bond0: option mode: invalid value (7) [ 125.150008][ T8921] bond0 (unregistering): Released all slaves [ 125.169610][ T8924] __nla_validate_parse: 7 callbacks suppressed [ 125.169628][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 125.183040][ T8924] netlink: 'syz.4.869': attribute type 10 has an invalid length. [ 125.186214][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.869'. [ 125.190599][ T8924] dummy0: entered promiscuous mode [ 125.303629][ T10] usb 6-1: USB disconnect, device number 8 [ 125.397258][ T3273] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 125.558908][ T3273] usb 5-1: config 0 has no interfaces? [ 125.561233][ T3273] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 125.564849][ T3273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.573211][ T3273] usb 5-1: config 0 descriptor?? [ 125.610861][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.877'. [ 125.788338][ T5827] usb 5-1: USB disconnect, device number 12 [ 125.829923][ T8958] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 125.923983][ T8962] input: syz0 as /devices/virtual/input/input23 [ 125.974992][ T8964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.881'. [ 125.979783][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 126.260214][ T5850] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 126.279395][ T8974] FAT-fs (nullb0): bogus number of reserved sectors [ 126.282268][ T8974] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 126.321868][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 126.371610][ T8978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 126.407055][ T5850] usb 7-1: device descriptor read/64, error -71 [ 126.462015][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 126.463225][ T43] audit: type=1400 audit(1784807782.293:708): avc: denied { read } for pid=8980 comm="syz.0.888" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 126.481930][ T8984] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.485664][ T43] audit: type=1400 audit(1784807782.293:709): avc: denied { open } for pid=8980 comm="syz.0.888" path="/251/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 126.504734][ T8984] block device autoloading is deprecated and will be removed. [ 126.515784][ T43] audit: type=1400 audit(1784807782.343:710): avc: denied { ioctl } for pid=8980 comm="syz.0.888" path="/251/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 126.553425][ T43] audit: type=1400 audit(1784807782.383:711): avc: denied { accept } for pid=8997 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 126.573900][ T8981] md: superblock version 12389 not known [ 126.578132][ T8981] md: couldn't set array info. -22 [ 126.599752][ T9004] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.677198][ T5850] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 126.698396][ T43] audit: type=1400 audit(1784807782.533:712): avc: denied { create } for pid=9018 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 126.730546][ T43] audit: type=1400 audit(1784807782.563:713): avc: denied { setopt } for pid=9022 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 126.807108][ T5850] usb 7-1: device descriptor read/64, error -71 [ 126.928808][ T5850] usb usb7-port1: attempt power cycle [ 126.977071][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 127.127210][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 127.130738][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.133860][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.137067][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.140150][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.144193][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.147132][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.267097][ T5850] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 127.287809][ T5850] usb 7-1: device descriptor read/8, error -71 [ 127.352879][ T42] usb 5-1: GET_CAPABILITIES returned 0 [ 127.354830][ T42] usbtmc 5-1:16.0: can't read capabilities [ 127.547565][ T5850] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 127.562045][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 127.575557][ T3273] usb 5-1: USB disconnect, device number 13 [ 127.582736][ T5850] usb 7-1: device descriptor read/8, error -71 [ 127.604895][ T9055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9055 comm=syz.1.909 [ 127.612070][ T9055] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 127.655732][ T9055] 8021q: adding VLAN 0 to HW filter on device bond5 [ 127.668435][ T9055] bond5: (slave dummy0): making interface the new active one [ 127.674874][ T9055] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 127.691290][ T5850] usb usb7-port1: unable to enumerate USB device [ 127.969166][ T9069] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.912'. [ 128.013658][ T9072] vlan2: entered promiscuous mode [ 128.015812][ T9072] syz_tun: entered promiscuous mode [ 128.018378][ T9072] vlan2: entered allmulticast mode [ 128.020562][ T9072] syz_tun: entered allmulticast mode [ 128.223581][ T9088] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 128.248638][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.349990][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 128.384604][ T9102] syzkaller1: entered promiscuous mode [ 128.386394][ T9102] syzkaller1: entered allmulticast mode [ 128.620135][ T9118] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 128.764601][ T6965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 128.779761][ T6965] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 128.830633][ T9141] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 128.856352][ T9137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.861779][ T9137] bond2: (slave bond3): making interface the new active one [ 128.864485][ T9137] bond2: (slave bond3): Enslaving as an active interface with an up link [ 128.875510][ T9137] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 128.882670][ T9137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.159555][ T9168] 9pnet_fd: Insufficient options for proto=fd [ 129.227038][ T6965] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 129.330650][ T9181] binfmt_misc: register: failed to install interpreter file ./file1 [ 129.343830][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 129.343842][ T43] audit: type=1400 audit(1785332073.171:716): avc: denied { associate } for pid=9180 comm="syz.2.944" name=3319D7EAB320576869D6E662E434CAB1B609BDCE8D2D27EADC25EC244636D818544480D3D1247E40A0BF84A388BE1D334D80F9695625F841681EAA116A93170646DDFA660BDE88120FE77CBF64C06E6669E5BB1DB32113C0E94252F1A285B81C71F67202BF649B07ACA6FF4E95D6BC128AD2BC609E1D5C scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 129.376994][ T6965] usb 5-1: Using ep0 maxpacket: 32 [ 129.380442][ T6965] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.384153][ T6965] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.387976][ T6965] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.391123][ T6965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.394961][ T6965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.398385][ T6965] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.402670][ T6965] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.405617][ T6965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.421010][ T6965] usb 5-1: config 0 descriptor?? [ 129.633162][ T6965] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 129.834827][ T43] audit: type=1400 audit(1785332073.661:717): avc: denied { read write } for pid=9148 comm="syz.0.934" name="lp0" dev="devtmpfs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 129.840621][ C1] usblp0: nonzero read bulk status received: -71 [ 129.844111][ T43] audit: type=1400 audit(1785332073.661:718): avc: denied { open } for pid=9148 comm="syz.0.934" path="/dev/usb/lp0" dev="devtmpfs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 129.848005][ T5850] usb 5-1: USB disconnect, device number 14 [ 130.047938][ T9148] usblp0: removed [ 130.255476][ T43] audit: type=1400 audit(1785332074.080:719): avc: denied { read write } for pid=9196 comm="syz.2.948" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 130.263452][ T43] audit: type=1400 audit(1785332074.080:720): avc: denied { open } for pid=9196 comm="syz.2.948" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 130.302588][ T43] audit: type=1400 audit(1785332074.130:721): avc: denied { mounton } for pid=9198 comm="syz.2.949" path="/270/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 130.822400][ T5850] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 130.984789][ T5850] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.988180][ T5850] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.991084][ T5850] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.994391][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.999511][ T9204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.007063][ T5850] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.193314][ T43] audit: type=1400 audit(1785332075.013:722): avc: denied { lock } for pid=9211 comm="syz.1.954" path="socket:[30438]" dev="sockfs" ino=30438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 131.201408][ T43] audit: type=1400 audit(1785332075.013:723): avc: denied { map } for pid=9211 comm="syz.1.954" path="/231" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 131.210912][ T43] audit: type=1400 audit(1785332075.013:724): avc: denied { execute } for pid=9211 comm="syz.1.954" path="/231" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 131.214709][ T5850] usb 5-1: USB disconnect, device number 15 [ 131.801125][ T9248] overlayfs: failed to clone upperpath [ 131.805090][ T9248] __nla_validate_parse: 4 callbacks suppressed [ 131.805105][ T9248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.957'. [ 131.839504][ T43] audit: type=1400 audit(1785332075.658:725): avc: denied { create } for pid=9251 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.875362][ T9255] fuse: Bad value for 'fd' [ 132.527524][ T9303] loop6: detected capacity change from 0 to 2640 [ 132.535584][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.538692][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.541882][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.545098][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.548636][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.551885][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.554999][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.559993][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.563959][ T9303] ldm_validate_partition_table(): Disk read failed. [ 132.566801][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.570392][ T9303] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.573634][ T9303] Dev loop6: unable to read RDB block 0 [ 132.576020][ T9303] loop6: unable to read partition table [ 132.578501][ T9303] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 132.591335][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 132.595299][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 132.602509][ C2] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 132.606636][ C2] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 132.610589][ C2] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 132.614152][ C2] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 132.618168][ C2] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 132.621965][ C2] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 132.628206][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 132.906861][ T9328] overlayfs: failed lookup in lower (newroot/278, name='bus', err=-40): overlapping layers [ 133.193227][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327217][ T9378] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 133.330805][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 133.561908][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.992'. [ 133.611212][ T9397] fuse: Bad value for 'fd' [ 133.614098][ T9397] ufs: You didn't specify the type of your ufs filesystem [ 133.614098][ T9397] [ 133.614098][ T9397] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 133.614098][ T9397] [ 133.614098][ T9397] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 134.077137][ T9441] futex_wake_op: syz.0.1002 tries to shift op by 32; fix this program [ 134.079972][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1003'. [ 134.085028][ T9441] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 134.090262][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1003'. [ 134.096833][ T9442] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1003'. [ 134.143387][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 134.147730][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 134.151112][ T9446] netlink: 'syz.4.1005': attribute type 12 has an invalid length. [ 134.160672][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 134.186178][ T9446] geneve2: entered promiscuous mode [ 134.190675][ T9446] geneve2: entered allmulticast mode [ 134.270634][ T9456] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 134.570590][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 134.607173][ T9487] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 134.741804][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 134.745680][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.750161][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.754317][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.759544][ T42] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 134.763419][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.769312][ T42] usb 6-1: config 0 descriptor?? [ 134.831312][ T9497] tipc: Started in network mode [ 134.833655][ T9497] tipc: Node identity 4, cluster identity 4711 [ 134.836177][ T9497] tipc: Node number set to 4 [ 134.887590][ T9501] binder: 9500:9501 ioctl 400c620e 200000000180 returned -22 [ 134.902537][ T9503] fuse: Unknown parameter '9F2GCS' [ 134.939349][ T9509] overlayfs: failed to clone lowerpath [ 134.942781][ T9508] overlayfs: failed to clone lowerpath [ 135.047608][ T9517] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 135.101016][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 135.101036][ T43] audit: type=1400 audit(1785332078.894:736): avc: denied { remount } for pid=9523 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 135.101096][ T9524] devtmpfs: Cannot change global quota limit on remount [ 135.118388][ T9524] comedi comedi3: comedi_config --init_data is deprecated [ 135.187444][ T42] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 135.190119][ T42] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 135.192636][ T42] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 135.195472][ T42] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 135.198615][ T42] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 135.212792][ T42] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 135.290809][ T43] audit: type=1400 audit(1785332079.082:737): avc: denied { map } for pid=9542 comm="syz.4.1036" path="socket:[33295]" dev="sockfs" ino=33295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.298162][ T42] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 135.301398][ T42] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 135.340497][ T9546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9546 comm=syz.4.1037 [ 135.450858][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.454655][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.473085][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.473261][ T1351] usb 6-1: USB disconnect, device number 9 [ 135.479350][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.488022][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.492826][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.503770][ T9559] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 135.654387][ T43] audit: type=1400 audit(1785332079.440:738): avc: denied { bind } for pid=9569 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.769014][ T43] audit: type=1400 audit(1785332079.549:739): avc: denied { getopt } for pid=9571 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.825068][ T43] audit: type=1400 audit(1785332079.618:740): avc: denied { ioctl } for pid=9574 comm="syz.0.1047" path="socket:[32118]" dev="sockfs" ino=32118 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.056560][ T9579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.083942][ T5850] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 136.242836][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 136.247376][ T5850] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 136.250575][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.253839][ T5850] usb 5-1: config 1 has no interface number 0 [ 136.255844][ T5850] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 136.259305][ T5850] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 136.263093][ T5850] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 136.272245][ T5850] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 136.275304][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.277921][ T5850] usb 5-1: Product: syz [ 136.279245][ T5850] usb 5-1: Manufacturer: syz [ 136.280663][ T5850] usb 5-1: SerialNumber: syz [ 136.314522][ T9589] Failed to initialize the IGMP autojoin socket (err -2) [ 136.794685][ T9616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9616 comm=syz.2.1059 [ 136.839429][ T9620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9620 comm=syz.4.1061 [ 136.921711][ T6965] usb 5-1: USB disconnect, device number 16 [ 136.925585][ T9575] netlink: 'syz.0.1047': attribute type 1 has an invalid length. [ 136.931886][ T9575] __nla_validate_parse: 15 callbacks suppressed [ 136.931903][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'. [ 137.169250][ T5850] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 137.330381][ T5850] usb 7-1: Using ep0 maxpacket: 8 [ 137.334809][ T5850] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.340435][ T5850] usb 7-1: config 0 interface 0 has no altsetting 0 [ 137.349254][ T5850] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.353223][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.358880][ T5850] usb 7-1: config 0 descriptor?? [ 137.365896][ T5850] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 137.862009][ T9694] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 137.910668][ T9694] bond4: (slave geneve3): Opening slave failed [ 138.490238][ T9705] Attempt to restore checkpoint with obsolete wellknown handles [ 138.551341][ T9707] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.554433][ T9707] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.613014][ T43] audit: type=1400 audit(1785332082.379:741): avc: denied { getopt } for pid=9706 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.647505][ T9720] openvswitch: netlink: Message has 8 unknown bytes. [ 138.647505][ T9719] openvswitch: netlink: Message has 8 unknown bytes. [ 138.752212][ T9731] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 138.755558][ T9731] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1093'. [ 138.755939][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 138.813486][ T43] audit: type=1400 audit(1785332082.587:742): avc: denied { write } for pid=9738 comm="syz.0.1096" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.816422][ T9740] random: crng reseeded on system resumption [ 138.829256][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 139.078124][ T9761] bridge4: entered allmulticast mode [ 139.249829][ T9766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.255012][ T9774] syzkaller0: entered promiscuous mode [ 139.257475][ T9774] syzkaller0: entered allmulticast mode [ 139.432536][ T9778] Failed to initialize the IGMP autojoin socket (err -2) [ 139.647751][ T9786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 139.651424][ T9786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 139.702652][ T9794] fuse: fd is not a fuse device [ 139.729721][ T9796] fuse: fd is not a fuse device [ 139.782961][ T43] audit: type=1400 audit(1785332083.541:743): avc: denied { write } for pid=9798 comm="syz.0.1115" name="usbmon1" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.800144][ T9800] program syz.0.1115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.859733][ T9804] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1117'. [ 139.883667][ T9811] syzkaller1: entered promiscuous mode [ 139.888066][ T9811] syzkaller1: entered allmulticast mode [ 139.910343][ T43] audit: type=1400 audit(1785332083.670:744): avc: denied { getopt } for pid=9815 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.939412][ T6965] usb 7-1: USB disconnect, device number 22 [ 139.950521][ C0] ------------[ cut here ]------------ [ 139.952315][ C0] len > ((int)(~0U >> 1)) [ 139.952323][ C0] WARNING: ./include/linux/skbuff.h:2864 at qdisc_pkt_len_segs_init+0x7af/0xb30, CPU#0: syz.1.1119/9821 [ 139.957258][ C0] Modules linked in: [ 139.960878][ C0] CPU: 0 UID: 0 PID: 9821 Comm: syz.1.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.964230][ C0] Tainted: [L]=SOFTLOCKUP [ 139.965606][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.968776][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x7af/0xb30 [ 139.970759][ C0] Code: 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 0f 84 38 fd ff ff 3c 03 0f 8f 30 fd ff ff e8 6c b3 ef f8 e9 26 fd ff ff e8 d2 2c 7f f8 90 <0f> 0b 90 e9 2f fb ff ff 48 89 cf e8 51 b3 ef f8 e9 b6 f8 ff ff e8 [ 139.976701][ C0] RSP: 0018:ffffc90000007710 EFLAGS: 00010246 [ 139.978664][ C0] RAX: 0000000000000000 RBX: ffff88803879f900 RCX: ffffffff898aaafd [ 139.981103][ C0] RDX: ffff88805880ca80 RSI: ffffffff898aafce RDI: ffff88805880ca80 [ 139.983605][ C0] RBP: ffff88803de91b80 R08: 0000000000000005 R09: 0000000000000000 [ 139.986207][ C0] R10: 00000000fffffffe R11: 0000000000000000 R12: 00000000ffffffea [ 139.989064][ C0] R13: ffff88803879f928 R14: 00000000fffffffe R15: 0000000000000001 [ 139.991595][ C0] FS: 00007f243fff66c0(0000) GS:ffff8880d5de6000(0000) knlGS:0000000000000000 [ 139.994426][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.996499][ C0] CR2: 00007f243fff5ff8 CR3: 0000000042756000 CR4: 0000000000352ef0 [ 139.999059][ C0] Call Trace: [ 140.000394][ C0] [ 140.001514][ C0] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 140.003767][ C0] ? find_held_lock+0x2b/0x80 [ 140.005280][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 140.007482][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 140.009177][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.011057][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 140.012745][ C0] ? kernel_text_address+0x8d/0x100 [ 140.014371][ C0] ? __kernel_text_address+0xd/0x30 [ 140.016004][ C0] __netif_receive_skb_list_core+0x353/0x940 [ 140.017812][ C0] ? kfree_skbmem+0x15d/0x210 [ 140.019364][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 140.021387][ C0] ? lock_acquire+0x1b9/0x370 [ 140.022867][ C0] ? tun_chr_write_iter+0xdc/0x200 [ 140.024786][ C0] ? vfs_write+0x6ac/0x1050 [ 140.026520][ C0] ? ksys_write+0x12a/0x250 [ 140.028513][ C0] netif_receive_skb_list_internal+0x722/0xd40 [ 140.031106][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 140.033444][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.035003][ C0] ? dev_gro_receive+0x238/0x3060 [ 140.036595][ C0] napi_complete_done+0x221/0x940 [ 140.038160][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 140.041298][ C0] ? find_held_lock+0x2b/0x80 [ 140.042774][ C0] ? gro_cell_poll+0x441/0x690 [ 140.044257][ C0] ? gro_cell_poll+0x441/0x690 [ 140.045860][ C0] gro_cell_poll+0x46e/0x690 [ 140.047336][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 140.049121][ C0] net_rx_action+0xa40/0xf20 [ 140.050571][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 140.052143][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 140.053840][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 140.055458][ C0] ? sched_clock+0x38/0x60 [ 140.057082][ C0] ? sched_clock_cpu+0x6c/0x570 [ 140.058878][ C0] ? rcu_is_watching+0x12/0xc0 [ 140.060528][ C0] handle_softirqs+0x1ea/0x9b0 [ 140.062163][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 140.064331][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 140.066049][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 140.067903][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 140.070013][ C0] do_softirq+0xac/0xe0 [ 140.071612][ C0] [ 140.072731][ C0] [ 140.073799][ C0] __local_bh_enable_ip+0xf8/0x120 [ 140.075772][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 140.077626][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 140.079711][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 140.081486][ C0] tun_get_user+0x1e31/0x3c20 [ 140.083027][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 140.084858][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 140.086840][ C0] ? find_held_lock+0x2b/0x80 [ 140.088612][ C0] ? tun_get+0x191/0x370 [ 140.090312][ C0] ? tun_get+0x191/0x370 [ 140.091909][ C0] tun_chr_write_iter+0xdc/0x200 [ 140.093716][ C0] vfs_write+0x6ac/0x1050 [ 140.095355][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 140.097439][ C0] ? __pfx_vfs_write+0x10/0x10 [ 140.099237][ C0] ? find_held_lock+0x2b/0x80 [ 140.101096][ C0] ksys_write+0x12a/0x250 [ 140.102815][ C0] ? __pfx_ksys_write+0x10/0x10 [ 140.104664][ C0] ? kcov_ioctl+0x17a/0x750 [ 140.106345][ C0] do_syscall_64+0x115/0x870 [ 140.107798][ C0] ? clear_bhb_loop+0x40/0x90 [ 140.109308][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.111212][ C0] RIP: 0033:0x7f243f19de99 [ 140.112722][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.118731][ C0] RSP: 002b:00007f243fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.121364][ C0] RAX: ffffffffffffffda RBX: 00007f243f426090 RCX: 00007f243f19de99 [ 140.123866][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 140.126337][ C0] RBP: 00007f243f233eaf R08: 0000000000000000 R09: 0000000000000000 [ 140.128796][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.131243][ C0] R13: 00007f243f426128 R14: 00007f243f426090 R15: 00007fff0e95f248 [ 140.133737][ C0] [ 140.134723][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.136998][ C0] CPU: 0 UID: 0 PID: 9821 Comm: syz.1.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.140310][ C0] Tainted: [L]=SOFTLOCKUP [ 140.141669][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.144788][ C0] Call Trace: [ 140.145873][ C0] [ 140.146785][ C0] dump_stack_lvl+0x100/0x190 [ 140.148272][ C0] vpanic+0x552/0x970 [ 140.149549][ C0] ? __pfx_vpanic+0x10/0x10 [ 140.150981][ C0] panic+0xd1/0xe0 [ 140.152164][ C0] ? __pfx_panic+0x10/0x10 [ 140.153651][ C0] ? check_panic_on_warn+0x1f/0x90 [ 140.155294][ C0] check_panic_on_warn.cold+0x19/0x34 [ 140.157033][ C0] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 140.159151][ C0] __warn.cold+0x191/0x318 [ 140.160709][ C0] __report_bug+0x30f/0x440 [ 140.162165][ C0] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 140.163963][ C0] ? __pfx___report_bug+0x10/0x10 [ 140.165843][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.167527][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.169108][ C0] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 140.170891][ C0] report_bug+0xb2/0x220 [ 140.172269][ C0] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 140.174295][ C0] handle_bug+0x16a/0x2a0 [ 140.175790][ C0] exc_invalid_op+0x17/0x50 [ 140.177267][ C0] asm_exc_invalid_op+0x1a/0x20 [ 140.178763][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x7af/0xb30 [ 140.180693][ C0] Code: 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 0f 84 38 fd ff ff 3c 03 0f 8f 30 fd ff ff e8 6c b3 ef f8 e9 26 fd ff ff e8 d2 2c 7f f8 90 <0f> 0b 90 e9 2f fb ff ff 48 89 cf e8 51 b3 ef f8 e9 b6 f8 ff ff e8 [ 140.186647][ C0] RSP: 0018:ffffc90000007710 EFLAGS: 00010246 [ 140.188543][ C0] RAX: 0000000000000000 RBX: ffff88803879f900 RCX: ffffffff898aaafd [ 140.190996][ C0] RDX: ffff88805880ca80 RSI: ffffffff898aafce RDI: ffff88805880ca80 [ 140.193551][ C0] RBP: ffff88803de91b80 R08: 0000000000000005 R09: 0000000000000000 [ 140.196089][ C0] R10: 00000000fffffffe R11: 0000000000000000 R12: 00000000ffffffea [ 140.198611][ C0] R13: ffff88803879f928 R14: 00000000fffffffe R15: 0000000000000001 [ 140.201032][ C0] ? qdisc_pkt_len_segs_init+0x2dd/0xb30 [ 140.202804][ C0] ? qdisc_pkt_len_segs_init+0x7ae/0xb30 [ 140.204542][ C0] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 140.206659][ C0] ? find_held_lock+0x2b/0x80 [ 140.208155][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 140.210342][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 140.211852][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.213821][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 140.215415][ C0] ? kernel_text_address+0x8d/0x100 [ 140.217044][ C0] ? __kernel_text_address+0xd/0x30 [ 140.218667][ C0] __netif_receive_skb_list_core+0x353/0x940 [ 140.220535][ C0] ? kfree_skbmem+0x15d/0x210 [ 140.222039][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 140.224086][ C0] ? lock_acquire+0x1b9/0x370 [ 140.225583][ C0] ? tun_chr_write_iter+0xdc/0x200 [ 140.227189][ C0] ? vfs_write+0x6ac/0x1050 [ 140.228636][ C0] ? ksys_write+0x12a/0x250 [ 140.230391][ C0] netif_receive_skb_list_internal+0x722/0xd40 [ 140.232880][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 140.235425][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.237421][ C0] ? dev_gro_receive+0x238/0x3060 [ 140.239339][ C0] napi_complete_done+0x221/0x940 [ 140.241234][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 140.243463][ C0] ? find_held_lock+0x2b/0x80 [ 140.245325][ C0] ? gro_cell_poll+0x441/0x690 [ 140.247207][ C0] ? gro_cell_poll+0x441/0x690 [ 140.249095][ C0] gro_cell_poll+0x46e/0x690 [ 140.250909][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 140.253062][ C0] net_rx_action+0xa40/0xf20 [ 140.254887][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 140.256853][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 140.258795][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 140.260514][ C0] ? sched_clock+0x38/0x60 [ 140.261878][ C0] ? sched_clock_cpu+0x6c/0x570 [ 140.263440][ C0] ? rcu_is_watching+0x12/0xc0 [ 140.264976][ C0] handle_softirqs+0x1ea/0x9b0 [ 140.266496][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 140.268151][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 140.269757][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 140.271451][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 140.273125][ C0] do_softirq+0xac/0xe0 [ 140.274431][ C0] [ 140.275365][ C0] [ 140.276301][ C0] __local_bh_enable_ip+0xf8/0x120 [ 140.277821][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 140.279414][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 140.281245][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 140.282794][ C0] tun_get_user+0x1e31/0x3c20 [ 140.284290][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 140.285885][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 140.287641][ C0] ? find_held_lock+0x2b/0x80 [ 140.289154][ C0] ? tun_get+0x191/0x370 [ 140.290487][ C0] ? tun_get+0x191/0x370 [ 140.291846][ C0] tun_chr_write_iter+0xdc/0x200 [ 140.293494][ C0] vfs_write+0x6ac/0x1050 [ 140.294933][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 140.296749][ C0] ? __pfx_vfs_write+0x10/0x10 [ 140.298238][ C0] ? find_held_lock+0x2b/0x80 [ 140.299706][ C0] ksys_write+0x12a/0x250 [ 140.301095][ C0] ? __pfx_ksys_write+0x10/0x10 [ 140.302668][ C0] ? kcov_ioctl+0x17a/0x750 [ 140.304109][ C0] do_syscall_64+0x115/0x870 [ 140.305786][ C0] ? clear_bhb_loop+0x40/0x90 [ 140.307354][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.309409][ C0] RIP: 0033:0x7f243f19de99 [ 140.311166][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.317989][ C0] RSP: 002b:00007f243fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.321040][ C0] RAX: ffffffffffffffda RBX: 00007f243f426090 RCX: 00007f243f19de99 [ 140.323541][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 140.326019][ C0] RBP: 00007f243f233eaf R08: 0000000000000000 R09: 0000000000000000 [ 140.328462][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.330924][ C0] R13: 00007f243f426128 R14: 00007f243f426090 R15: 00007fff0e95f248 [ 140.333377][ C0] [ 140.335072][ C0] Kernel Offset: disabled [ 140.336423][ C0] Rebooting in 86400 seconds..