last executing test programs: 3.07055058s ago: executing program 1 (id=698): openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc0082, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000840)=[{{&(0x7f0000000400)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x400c8c5) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0xfa}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x7fffffff}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r4, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000080)={{0x1, 0x300, 0x18, r4}, './file0\x00'}) 3.070018977s ago: executing program 1 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c736d61636b66737472616e736d7574653d232d2c6f626a5f757365723d3950323030302e4c2c646f6e00d9f96d118267c127f62917cc99f377f9ed"]) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 2.051704483s ago: executing program 1 (id=710): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x101b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x45, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xca1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0x1, 0x7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0x2f, 0x9, 0x40, 0x3}, 0x140, &(0x7f0000000180)={0x5, 0xf, 0x140, 0x4, [@generic={0xd0, 0x10, 0x8, "583ae00bd207d4237462409465025c028c9f1a95ae0c626cacc26cb367959c1569dadd9a0c1c9d61f8fe44198740fd91adb1c04fcc3e2fbd5496d213a04dc324d105d4d254e96d91abe3fa957fdae7ee9cc5301812fa9e4b94100e74ccddfc39fa9139cbf16b8ca2eaa40a81a628d358e378cde86147e89edef78014b2d72000ed9e70bc38b054c7713d6d4f776621dcd5fd06e37bb237479f4de39d9f19186ed6a7655ee0adeb1a5424f02b82a8ee03e9a887d8d9e16d339f13b0d445bca3113014f25519047a0a564b198ee8"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "231a91f09bfbe9bda85a27ee83df17a4"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x5, 0x4}, @generic={0x50, 0x10, 0x1, "f1f93960db5cd9e74b86d999c5e7f380be7c047e7b43eff5c6482523df3ca562096e406485b221874c07ed736b66f54a473e6738492f7a8d5c04ce2ed26647b42646505bf4f32e7cbafe14a681"}]}, 0x1, [{0xd8, &(0x7f00000002c0)=@string={0xd8, 0x3, "cd5bfc5f5e30b1b2a9360afdb231b12d38975367daca0476d2d165745fb78277e73e78de0d5e485754caa0470a4473caff57f1e039500e3cad7f5c68d8b49efbe8bd1530f9b122e5c4f65930a193b80f97ff3983c3cf0239016a3cbccd6119c6efe76f5b39015dc98154b3f0669ac38fb9ffa740223c393e8ea4b821509bb6e150dbded145eda5b7115f0c5dbc21b7fa10758abab536656788c7df2c6f1676213fe69f3d7fb689115961302c0d5df1da3f2b150783c363c15b73810d6e2c891ffe9a1fb511b6b33e72335b918589741e1cab9a110e7f"}}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(hmac(sha256),cts(cbc(aes)))\x00'}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x20, 0x8, 0xbe, {0xbe, 0x11, "d8256bc63c2c17a3dd7c62606ad916adcc936dcb73c7348e81f953cb1563c4133a58febbfdac8c65a2f0d05f9ff295b40eabc3aa1747e0bd8fa44315d48e319913e83a3f52f9c49f154836772327e58954e67851075911b1fabdab88b24cf15b00d150613daa0888687a69f82a8f31fcccb2921f60baa6b3ade3934a92389be0363a64cef59953855391d11366baa7869dda372bbe4efc0b7757dd9ec037ee115e8f9256910cd36636184c1b3f95650cd8ed350964a09d69315714d7"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000540)={0x0, 0xf, 0xc6, {0x5, 0xf, 0xc6, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x6, 0x0, 0x7, 0x5a}, @generic={0xaf, 0x10, 0x3, "6bce9f9ebffc0a22c3c54ec19738ae9c360cf83dc6a5db743f1b7a04cf5da2a0e3b5647ad0772e8e1b15d5aaf38dd15cb8e9efddc8c326e7a16765c16eef5c562cb360ea9eac003ff23bbb2891e31e33bf54663bbad8ede7680d21b521221556649d21961e0d7f4e2f8a99372cd75f77b104802bb4b8274cbf062e9f620deeb1da046d4b050181eff11c9b77d5e365d9c728dc41da33d7b0455012e7de4a004a6e1496ae6db19bafc3867810"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x0, 0x1}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x3, 0x8, "617a2902", "9d1daf34"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0xfe, 0xb0, 0x4, 0x4, 0x1000}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x9fd3f08f0cfc8e2b, 0x0, 0x3b, "36597456af1f0868dfe57c48d20dc268516c725fc68d8507e455929b43b5fcdf1f9a3f76d332a75a9c7806afe91ea2d8df7c4cb0383c443355cdf0"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x120}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "3ac0"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xb5}, &(0x7f0000000980)={0x40, 0x13, 0x6}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "3ec9"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x6}}) 1.897663055s ago: executing program 0 (id=715): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r1, 0x100}], 0x1, &(0x7f0000000100), 0x0, 0x0) 1.803166599s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x69e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0x109}) 1.671163722s ago: executing program 0 (id=721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6010001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x200440d0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e", 0x57, 0x0) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.664576197s ago: executing program 2 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) sendto$inet6(r6, &(0x7f0000000180)="53b313be0df1afd89ad3d99ab4179cf858637d6e0120465c0fc6983eaac9ab91fa5f535e36f038f78eaa8611f97d86351d26eb58c5a69e411308ebe430d996074473c231b0ec7030cee8e5e4d3f0f17e8099e99cb566603e0bbc86b9633b1959f4b26b23a55d50c29519eddc44d1be66d1ba959e9c861b5a4b9c8e9c86e3266c9a870900ed85498a7d2c9351de8fa9fa0f59a45a8e00d5711639659deb89f83822acf117c7f88c9e3c8b529ffd9c9f83961a8c72430bf2b0291322006270b1", 0xbf, 0x40, &(0x7f0000000280)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x377b, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x31) r8 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x2c, @broadcast, 0x4e24, 0x4, 'lblcr\x00', 0x0, 0x0, 0x7e}, 0x2c) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r5, 0x47) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000001, 0x46032, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x491}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) close_range(r0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') 1.430013837s ago: executing program 1 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="22000100bd9cec73c38d", @ANYRES32=r0, @ANYBLOB="010000000008000000000000008cdc8f2c75b2004093da00"/34], 0x38}}, 0x40080) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x10040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, &(0x7f00000001c0)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000200)={r5, 0x0, 0x0, 0x1, &(0x7f0000000180)=[{0xd, 0x60b4, 0x400, 0xd530}]}) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f0000000200)='./mnt/file0\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000300)='\xd5\x16\xe7\xd5\x8f=none\x00u\xda\b\\\x0f\xb5\x13\xf4\xfb\xf2\xed\xca)\xc5\x8b\"\xab\x11/\xd7\xd8\x801\xe5\xba\x91\v\xb6\xfd\xd4R\a\xc7?\xb3Ns\x94\x8fk\x8do\xb7kC\x98#\xd8\xe4\xac\xf9|j.7\xfe\x9b\x10g\xf9\xf4\xc6\x95\xd7\xc5[\xa0K\xe7\x96Q\xdcU\xe5\xce\xaeG\x11\x9eVM\xf0\xfe\x18P\xed\x8fG\x02}\x82\x93.\xa3\xb7\a;s\xfd\x8f\xb89\xf6Vh\xb0Z\xa8\xb6\x18\x1a\xfa\x17V\x1b\xcc\xe5\x1fu\xe5,B\\\xa6\xd6\xed\xfc\x872vU\xafU\x0e\x0e+\xe8\x81\xf5J\x1aZ\xa1\xa8X\t\x1f\xfa8\x9d3x0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8003}}, 0xabb6, 0x867, 0x40a4f, 0xc2, 0x2a, 0x0, 0xa9}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000001040), &(0x7f0000001080)=0x4) (async) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000001040), &(0x7f0000001080)=0x4) syz_emit_ethernet(0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000ffffffffffff8100300088470000eeb271b30010b059184ef86fd3184aa2c134cb9839d4dc71e31c4d401ada6a13ba0c0e4ef8f759a3d63c3b91726d6b717a56ceb5da6c5587596252f04b293b87b8e457545d98a24bf254e6615a0e6fc8055bfdb07d0af750093c0ff2bbb16756cfc23e68bfb5cf010f7e932af5566248d85288ef72e611f3565878d4210464795430a664f8e7c5b1a34757b5f09eb77d58dc00bd6c50"], 0x0) 1.351470807s ago: executing program 1 (id=726): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/bus/platform/drivers/rtsx_usb_ms/bind\x00', 0x0, 0x0) write(r0, &(0x7f0000000800)='pcspkr', 0x6) syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x101800) syz_usb_connect(0x3, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e34ed8"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) write$nci(r0, &(0x7f0000000080)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x8, {0x0, 0xe055, 0x2, 0x772, 0x0, 0x6, 0xe, 0x81, 0x62, "45b2d51242b2ef5e6792fae76021ef44fa4da1404a005777b6b2c36e133cfa152ecd113675f4451bea7e296025405fd7948433fad31313c51510b8290440ce51da1bda233ad53dd02295813b491c487740b36394e103bb37c71b59c22dc3b45465be"}}, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) openat(r0, &(0x7f0000000000)='./sys_mnt/bus/platform/drivers/rtsx_usb_ms/bind\x00', 0x54ddbe87f821c3c6, 0x3370e6723a909afe) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.231108193s ago: executing program 2 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000140)={0xac8, 0x3, 0x2, 0x1f2c}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x2000, 0x15) write(r5, &(0x7f0000000300)='1199 0', 0x6) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@nullb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0x4c}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1830500fffffcdbdf250500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff0f000055000000"], 0x28}}, 0x4c044) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000080), &(0x7f00000000c0)=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r11, &(0x7f0000000480)="ef1e6b", &(0x7f0000000e00)=""/224}, 0x20) 1.227372586s ago: executing program 2 (id=728): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x10000) (async) shutdown(r0, 0x0) (async, rerun: 32) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 32) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)="0044ce9074", 0x5, 0x800c815, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.13136245s ago: executing program 2 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{0x302, 0x0, 0x5}, {0x174}, {0x99f, 0x0, 0x2}, {0x257, 0x0, 0x9}]}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x4, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000262512130029bd7000fedbdf250a0000000000000004000b0008000500", @ANYRES32=r6, @ANYBLOB="08000a0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x404c080}, 0x200088c2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000dc0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003b000100000000332acfa3f8fbf89822ffdbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r9, 0x2}}, 0x48) 931.435218ms ago: executing program 2 (id=731): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[], 0x78) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {0x0, 0x410c}}}, 0x65}, 0x1, 0x0, 0x0, 0x400c095}, 0x8010) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000001) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) 400.509069ms ago: executing program 0 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000240)={0xa4, 0x0, 0x1}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./sec\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r11, 0x1, 0x13838}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf5a, 0x11b}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 320.098577ms ago: executing program 3 (id=741): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 319.793623ms ago: executing program 3 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = msgget(0x0, 0x231) msgsnd(r2, &(0x7f0000000000)={0x3}, 0x8, 0x800) msgrcv(r2, &(0x7f0000000040)={0x0, ""/20}, 0x1c, 0x3, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000001c0)={0x8, 0x400}) 210.429805ms ago: executing program 0 (id=743): syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05b1ff035660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "000001000000000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{0x0, 0x0, 0x9}, {0xff, 0x6, 0x10}, {0x0, 0x81, 0x3, '\x00', 0x3}, {0x4}, {0x0, 0xdc}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x4}, {0x0, 0x8, 0x0, '\x00', 0x9}, {0x0, 0x1, 0x7}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x89, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x40, '\x00', 0xff}, {0x70, 0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4, 0x0, 0x0, '\x00', 0xfc}, {0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0xbb}, {0x20}, {0xb}, {0x4, 0x4, 0x0, '\x00', 0x16}]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mount(&(0x7f0000000180)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x4008, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0), 0x48) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) 208.877546ms ago: executing program 3 (id=744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0, 0x7}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 131.701656ms ago: executing program 3 (id=745): syz_emit_vhci(&(0x7f0000001400)=ANY=[@ANYBLOB="040e0c010320"], 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40000}, 0x10}, 0x94) 131.285177ms ago: executing program 3 (id=746): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/comedi4\x00', 0x100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) pread64(r1, 0x0, 0x0, 0x9) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x4, @pix_mp={0x0, 0x3, 0x3147504d, 0x1, 0x2, [{0x4, 0xd39}, {0x1, 0x4}, {0x8, 0x5}, {}, {0x1f, 0x6}, {0x5}, {0x94fe, 0x9}, {0xfffffff8, 0x5}], 0x0, 0x1, 0x0, 0x0, 0x5}}) 862.352µs ago: executing program 1 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r2 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000020000000100080022bf00000000", @ANYRES32=0x1, @ANYBLOB="0200000000005b3ffe8d7445c66f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02002000010000000040"], 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)) 423.625µs ago: executing program 0 (id=748): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x2002f4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) read$FUSE(r0, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r1, 0x0) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x470a00, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)="660bce6291", 0x5) close(r3) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) close(r4) nanosleep(&(0x7f00000004c0)={0x0, 0x1dcd6500}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1, 0x0) write(r6, &(0x7f0000000000)='2', 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffd, 0x56, 0x10, @buffer={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000600)="71df6920f37f4748393115a389652c241d6a8e03b1764587ccd9af5ebde007861617394e2c75a4e9deea03d243a0dcc955b9b9b64cecb6c1489401fdabd1c0a44d7ab2a2d0bfc5b81bc0cc16ab", &(0x7f0000000680), 0x4e20, 0x10022, 0x0, &(0x7f00000006c0)}) close(r5) 0s ago: executing program 3 (id=749): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) (async) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async, rerun: 64) write(r0, &(0x7f0000000040)="a9", 0x1) kernel console output (not intermixed with test programs): 55.645654][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.670993][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.673564][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.695186][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.698261][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.717932][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.741382][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.763934][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.766421][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.778036][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.789943][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.792309][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.830416][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.844442][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.846810][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.863908][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.867015][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.889956][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.935632][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.948153][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.950502][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.968325][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.971623][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.142304][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.177237][ T5738] veth0_vlan: entered promiscuous mode [ 56.184491][ T5738] veth1_vlan: entered promiscuous mode [ 56.207782][ T5738] veth0_macvtap: entered promiscuous mode [ 56.213695][ T5738] veth1_macvtap: entered promiscuous mode [ 56.218789][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.227916][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.235279][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.251513][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.300656][ T5739] veth0_vlan: entered promiscuous mode [ 56.321527][ T5739] veth1_vlan: entered promiscuous mode [ 56.333992][ T5729] veth0_vlan: entered promiscuous mode [ 56.343480][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.370637][ T5729] veth1_vlan: entered promiscuous mode [ 56.378383][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.382338][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.417026][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.420577][ T5739] veth0_macvtap: entered promiscuous mode [ 56.420590][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.432380][ T5739] veth1_macvtap: entered promiscuous mode [ 56.434804][ T42] audit: type=1400 audit(1787097840.779:166): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.448277][ T5729] veth0_macvtap: entered promiscuous mode [ 56.458726][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.464032][ T5729] veth1_macvtap: entered promiscuous mode [ 56.465484][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.478111][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.498043][ T5731] veth0_vlan: entered promiscuous mode [ 56.512812][ T5731] veth1_vlan: entered promiscuous mode [ 56.517845][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.524362][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.541711][ T5542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.580498][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.584251][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.592847][ T5731] veth0_macvtap: entered promiscuous mode [ 56.597401][ T5835] IPVS: starting estimator thread 0... [ 56.613242][ T5731] veth1_macvtap: entered promiscuous mode [ 56.621681][ T5542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.628778][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.633330][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.651756][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.652989][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.655275][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.665618][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.691568][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.694717][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.694950][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.701467][ T5882] IPVS: using max 45 ests per chain, 108000 per kthread [ 56.704915][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.713410][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.748202][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.753620][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.760947][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.763805][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.769577][ T5880] Zero length message leads to an empty skb [ 56.787050][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.790381][ T5887] bridge0: port 3(vlan2) entered blocking state [ 56.790476][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.794980][ T5887] bridge0: port 3(vlan2) entered disabled state [ 56.797158][ T5887] vlan2: entered allmulticast mode [ 56.798894][ T5887] geneve0: entered allmulticast mode [ 56.801601][ T5887] vlan2: entered promiscuous mode [ 56.803222][ T5887] geneve0: entered promiscuous mode [ 56.811130][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.833295][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.836571][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.839430][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.839953][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 56.851951][ T5889] openvswitch: netlink: IP tunnel dst address not specified [ 56.867646][ T5896] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure [ 56.901254][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.904974][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.908350][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912022][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.914807][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.948723][ T5906] tmpfs: Bad value for 'mpol' [ 56.958509][ T5901] EXT4-fs (nbd3): unable to read superblock [ 56.990738][ T5901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.494243][ T5921] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.511040][ T5742] Bluetooth: hci0: command tx timeout [ 57.511067][ T5732] Bluetooth: hci3: command tx timeout [ 57.514337][ T64] Bluetooth: hci1: command tx timeout [ 57.602914][ T5742] Bluetooth: hci2: command tx timeout [ 57.653388][ T5901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.036698][ T5808] IPVS: starting estimator thread 0... [ 58.052703][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 58.063434][ T5928] bridge1: entered promiscuous mode [ 58.065222][ T5928] bridge1: entered allmulticast mode [ 58.141243][ T5926] IPVS: using max 46 ests per chain, 110400 per kthread [ 58.177850][ T5937] openvswitch: netlink: IP tunnel dst address not specified [ 58.244824][ T5943] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 58.249777][ T5942] se_dev->se_dev_ptr already set for storage object [ 58.256100][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 58.259413][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 58.261171][ T5943] netlink: 14 bytes leftover after parsing attributes in process `syz.1.27'. [ 58.262596][ T5942] netlink: 14 bytes leftover after parsing attributes in process `syz.1.27'. [ 58.268155][ T5901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.317073][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21'. [ 58.353990][ T42] kauditd_printk_skb: 124 callbacks suppressed [ 58.354004][ T42] audit: type=1400 audit(1787097842.699:291): avc: denied { read } for pid=5954 comm="syz.2.31" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.365590][ T42] audit: type=1400 audit(1787097842.699:292): avc: denied { open } for pid=5954 comm="syz.2.31" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.374880][ T42] audit: type=1400 audit(1787097842.699:293): avc: denied { ioctl } for pid=5954 comm="syz.2.31" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.389293][ T42] audit: type=1400 audit(1787097842.729:294): avc: denied { read write } for pid=5950 comm="syz.1.21" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.398195][ T42] audit: type=1400 audit(1787097842.729:295): avc: denied { open } for pid=5950 comm="syz.1.21" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.408181][ T42] audit: type=1400 audit(1787097842.739:296): avc: denied { read } for pid=5950 comm="syz.1.21" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.417671][ T42] audit: type=1400 audit(1787097842.739:297): avc: denied { open } for pid=5950 comm="syz.1.21" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.429366][ T42] audit: type=1400 audit(1787097842.769:298): avc: denied { create } for pid=5956 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.439496][ T42] audit: type=1400 audit(1787097842.779:299): avc: denied { ioctl } for pid=5956 comm="syz.2.25" path="socket:[8875]" dev="sockfs" ino=8875 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.441572][ T5957] syzkaller1: entered promiscuous mode [ 58.449734][ T5957] syzkaller1: entered allmulticast mode [ 58.459883][ T42] audit: type=1400 audit(1787097842.789:300): avc: denied { ioctl } for pid=5956 comm="syz.2.25" path="socket:[8879]" dev="sockfs" ino=8879 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.465467][ T5957] Bluetooth: MGMT ver 1.23 [ 58.501054][ T5959] bridge0: port 3(vlan2) entered blocking state [ 58.503960][ T5959] bridge0: port 3(vlan2) entered disabled state [ 58.506829][ T5959] vlan2: entered allmulticast mode [ 58.508992][ T5959] geneve0: entered allmulticast mode [ 58.513153][ T5959] vlan2: entered promiscuous mode [ 58.515217][ T5959] geneve0: entered promiscuous mode [ 58.533323][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 58.895143][ T5901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.170926][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.174249][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.181070][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.184401][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.213102][ T1461] IPVS: starting estimator thread 0... [ 59.300886][ T5967] IPVS: using max 27 ests per chain, 64800 per kthread [ 59.448882][ T5971] openvswitch: netlink: IP tunnel dst address not specified [ 59.522847][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.527951][ T5980] netlink: 3 bytes leftover after parsing attributes in process `syz.2.33'. [ 59.591394][ T5742] Bluetooth: hci0: command tx timeout [ 59.593491][ T64] Bluetooth: hci1: command tx timeout [ 59.593518][ T64] Bluetooth: hci3: command tx timeout [ 59.611032][ T5985] tc_dump_action: action bad kind [ 59.671472][ T5742] Bluetooth: hci2: command tx timeout [ 60.081511][ T6001] block nbd0: server does not support multiple connections per device. [ 60.086073][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 60.088085][ T6001] block nbd0: shutting down sockets [ 60.090831][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 60.093994][ T5731] failed to unregister tcp with rpcbind [ 60.096115][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 60.099335][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 60.102409][ T5731] failed to unregister tcp with rpcbind [ 60.133556][ T6008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=94 sclass=netlink_tcpdiag_socket pid=6008 comm=syz.2.45 [ 60.205436][ T6013] bridge0: port 3(vlan2) entered blocking state [ 60.207615][ T6013] bridge0: port 3(vlan2) entered disabled state [ 60.209728][ T6013] vlan2: entered allmulticast mode [ 60.211617][ T6013] geneve0: entered allmulticast mode [ 60.214305][ T6013] vlan2: entered promiscuous mode [ 60.214565][ T6016] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.215932][ T6013] geneve0: entered promiscuous mode [ 60.219471][ T6016] UDF-fs: Scanning with blocksize 2048 failed [ 60.224816][ T6016] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.228522][ T6016] UDF-fs: Scanning with blocksize 4096 failed [ 60.238723][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 60.238801][ T6017] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.240198][ T6018] Can't find a SQUASHFS superblock on nullb0 [ 60.241373][ T6018] xt_cgroup: invalid path, errno=-2 [ 60.250906][ T6017] UDF-fs: Scanning with blocksize 2048 failed [ 60.256294][ T6017] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.259486][ T6017] UDF-fs: Scanning with blocksize 4096 failed [ 60.289090][ T6016] netlink: 'syz.1.54': attribute type 7 has an invalid length. [ 60.291934][ T6016] netlink: 'syz.1.54': attribute type 13 has an invalid length. [ 60.587240][ T6026] ima: policy update failed [ 60.676788][ T6033] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 61.116045][ T6044] vxcan0: tx address claim with dlc 0 [ 61.123279][ T6044] device-mapper: ioctl: Unable to rename non-existent device, to uuid  [ 61.127452][ T5742] Bluetooth: hci1: unexpected subevent 0x1a length: 24 > 6 [ 61.277122][ T6046] loop5: detected capacity change from 0 to 7 [ 61.285555][ T6046] Dev loop5: unable to read RDB block 7 [ 61.288591][ T6046] loop5: AHDI p1 [ 61.290376][ T6046] loop5: partition table partially beyond EOD, truncated [ 61.392318][ T6053] lo speed is unknown, defaulting to 1000 [ 61.395048][ T6053] lo speed is unknown, defaulting to 1000 [ 61.399843][ T6053] lo speed is unknown, defaulting to 1000 [ 61.403656][ T6053] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 61.410469][ T6053] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 61.417567][ T6053] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 61.426349][ T6053] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.436528][ T6053] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 61.463067][ T6053] lo speed is unknown, defaulting to 1000 [ 61.467129][ T6053] lo speed is unknown, defaulting to 1000 [ 61.471726][ T6053] lo speed is unknown, defaulting to 1000 [ 61.474520][ T6053] lo speed is unknown, defaulting to 1000 [ 61.597510][ T6065] xt_hashlimit: size too large, truncated to 1048576 [ 61.643881][ T6068] ip_tables: iptables: counters copy to user failed while replacing table [ 61.670941][ T5732] Bluetooth: hci1: command tx timeout [ 61.671535][ T5742] Bluetooth: hci3: command tx timeout [ 61.681890][ T5742] Bluetooth: hci0: command tx timeout [ 61.696286][ T6072] fuse: Unknown parameter 'f' [ 61.751174][ T5742] Bluetooth: hci2: command tx timeout [ 61.835428][ T6086] ptrace attach of "/syz-executor exec"[5739] was attempted by " (v\x0a"[6086] [ 61.914053][ T6091] pim6reg9: entered allmulticast mode [ 61.965498][ T6096] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 61.970358][ T6096] overlayfs: missing 'lowerdir' [ 62.229164][ T6123] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 62.249459][ T6129] ehci-platform pcspkr: error -ENXIO: IRQ index 0 not found [ 62.313314][ T6138] overlay: Unknown parameter 'subj_role' [ 62.322452][ T6138] ip_tables: iptables: counters copy to user failed while replacing table [ 62.591786][ T6155] fuse: Bad value for 'group_id' [ 62.594130][ T6155] fuse: Bad value for 'group_id' [ 63.487429][ T6169] __nla_validate_parse: 3 callbacks suppressed [ 63.487451][ T6169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 63.494814][ T6169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 63.639898][ T42] kauditd_printk_skb: 118 callbacks suppressed [ 63.639919][ T42] audit: type=1400 audit(1787097847.979:419): avc: denied { write } for pid=6175 comm="syz.2.95" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.651781][ T5877] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 63.657722][ T42] audit: type=1400 audit(1787097847.979:420): avc: denied { mounton } for pid=6175 comm="syz.2.95" path="/34" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.684782][ T42] audit: type=1400 audit(1787097848.029:421): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.790845][ T5877] usb 8-1: device descriptor read/64, error -71 [ 64.023056][ T42] audit: type=1400 audit(1787097848.369:422): avc: denied { map } for pid=6197 comm="syz.2.102" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.034748][ T42] audit: type=1400 audit(1787097848.369:423): avc: denied { execute } for pid=6197 comm="syz.2.102" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.040968][ T5877] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 64.078543][ T6200] tipc: Started in network mode [ 64.081175][ T6200] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 64.089926][ T6200] tipc: Enabled bearer , priority 10 [ 64.156338][ T42] audit: type=1400 audit(1787097848.499:424): avc: denied { ioctl } for pid=6203 comm="syz.2.104" path="socket:[11587]" dev="sockfs" ino=11587 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.181429][ T5877] usb 8-1: device descriptor read/64, error -71 [ 64.283134][ T42] audit: type=1400 audit(1787097848.629:425): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.291229][ T5877] usb usb8-port1: attempt power cycle [ 64.340308][ T42] audit: type=1400 audit(1787097848.679:426): avc: denied { mount } for pid=6210 comm="syz.0.107" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 64.380857][ T5821] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.387690][ T42] audit: type=1400 audit(1787097848.729:427): avc: denied { setopt } for pid=6215 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.631138][ T5732] Bluetooth: hci4: command 0x1003 tx timeout [ 64.635401][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.640915][ T5877] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 64.671821][ T5877] usb 8-1: device descriptor read/8, error -71 [ 64.920890][ T5877] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 64.961652][ T5877] usb 8-1: device descriptor read/8, error -71 [ 65.073537][ T5877] usb usb8-port1: unable to enumerate USB device [ 65.092395][ T50] tipc: Node number set to 4269801492 [ 65.224478][ T42] audit: type=1400 audit(1787097849.569:428): avc: denied { read } for pid=6230 comm="syz.1.111" path="socket:[12368]" dev="sockfs" ino=12368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.604232][ T6247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.608569][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.151256][ T5724] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 66.176244][ T6256] batman_adv: batadv0: Adding interface: veth0 [ 66.178329][ T6256] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.186469][ T6256] batman_adv: batadv0: Interface activated: veth0 [ 66.189880][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.200849][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.206054][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.208720][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.213685][ T6257] batman_adv: batadv0: Interface deactivated: veth0 [ 66.215830][ T6257] batman_adv: batadv0: Removing interface: veth0 [ 66.281030][ T5724] usb 6-1: device descriptor read/64, error -71 [ 66.412530][ T6260] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.438711][ T6262] SELinux: policydb version 0 does not match my version range 15-35 [ 66.443660][ T6262] SELinux: failed to load policy [ 66.521398][ T5724] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 66.650872][ T5724] usb 6-1: device descriptor read/64, error -71 [ 66.751677][ T6274] netlink: 'syz.3.125': attribute type 322 has an invalid length. [ 66.761125][ T6274] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 66.761172][ T5724] usb usb6-port1: attempt power cycle [ 66.795154][ T6274] bond1: entered promiscuous mode [ 66.800141][ T6274] bond1 (unregistering): Released all slaves [ 67.111113][ T5724] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 67.131289][ T5724] usb 6-1: device descriptor read/8, error -71 [ 67.212778][ T6289] CIFS: bad ip= option (127.0K8G) [ 67.215247][ T6289] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.225793][ T6289] CIFS: Unable to determine destination address [ 67.232197][ T6291] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 67.301871][ T6291] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 67.372759][ T5724] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 67.395682][ T5724] usb 6-1: device descriptor read/8, error -71 [ 67.502445][ T5724] usb usb6-port1: unable to enumerate USB device [ 67.784639][ T6316] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 67.794972][ T6316] i2c i2c-0: new_device: Extra parameters [ 67.993776][ T6325] jffs2: notice: (6325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.323526][ T6339] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 68.350929][ T5821] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.491218][ T5821] usb 7-1: device descriptor read/64, error -71 [ 68.668236][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 68.668254][ T42] audit: type=1400 audit(1787097853.009:490): avc: denied { write } for pid=6376 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.714335][ T6378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3023349604 (48373593664 ns) > initial count (30102987312 ns). Using initial count to start timer. [ 68.761661][ T5821] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.900956][ T5821] usb 7-1: device descriptor read/64, error -71 [ 69.012675][ T5821] usb usb7-port1: attempt power cycle [ 69.039859][ T42] audit: type=1400 audit(1787097853.379:491): avc: denied { read } for pid=6396 comm="syz.3.155" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.041469][ T6397] binder: 6396:6397 ioctl 4018620d 0 returned -22 [ 69.048714][ T42] audit: type=1400 audit(1787097853.379:492): avc: denied { open } for pid=6396 comm="syz.3.155" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.055541][ T6397] binder: 6396:6397 ioctl c0306201 200000000240 returned -11 [ 69.060226][ T42] audit: type=1400 audit(1787097853.389:493): avc: denied { ioctl } for pid=6396 comm="syz.3.155" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.360380][ T42] audit: type=1400 audit(1787097853.699:494): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.379229][ T5821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.383079][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 69.385909][ T6405] netlink: 'syz.3.157': attribute type 5 has an invalid length. [ 69.389045][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 69.403688][ T5821] usb 7-1: device descriptor read/8, error -71 [ 69.421134][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.425033][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.428672][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.436454][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.507023][ T6409] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 69.511693][ T6409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.158'. [ 69.520448][ T42] audit: type=1400 audit(1787097853.859:495): avc: denied { ioctl } for pid=6410 comm="syz.0.159" path="socket:[11973]" dev="sockfs" ino=11973 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.530058][ T42] audit: type=1400 audit(1787097853.869:496): avc: denied { setopt } for pid=6410 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.537359][ T42] audit: type=1400 audit(1787097853.869:497): avc: denied { getopt } for pid=6410 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.557754][ T6413] nvme_fabrics: unknown parameter or missing value 'trEI1 qUksK' in ctrl creation request [ 69.571466][ T42] audit: type=1400 audit(1787097853.909:498): avc: denied { allowed } for pid=6408 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.651032][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.671620][ T5821] usb 7-1: device descriptor read/8, error -71 [ 69.781037][ T5821] usb usb7-port1: unable to enumerate USB device [ 69.944297][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 69.985395][ T6432] kAFS: unable to lookup cell '(,cL' [ 70.226963][ T42] audit: type=1400 audit(1787097854.569:499): avc: denied { execute } for pid=6442 comm="syz.1.167" name="file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.631439][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 70.655523][ T6463] bridge1: port 1(dummy0) entered blocking state [ 70.657821][ T6463] bridge1: port 1(dummy0) entered disabled state [ 70.660093][ T6463] dummy0: entered allmulticast mode [ 70.664098][ T6463] dummy0: entered promiscuous mode [ 70.673417][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 70.737663][ T6473] netlink: 'syz.3.173': attribute type 10 has an invalid length. [ 70.741124][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.173'. [ 70.747920][ T6473] bridge1: port 1(dummy0) entered blocking state [ 70.750256][ T6473] bridge1: port 1(dummy0) entered forwarding state [ 70.760568][ T6473] dummy0: left allmulticast mode [ 70.763550][ T6473] bridge1: port 1(dummy0) entered disabled state [ 70.833978][ T6478] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 71.061343][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.180'. [ 71.124912][ T6494] jffs2: notice: (6494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 71.137051][ T6494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.183'. [ 71.311496][ T6507] Cannot find add_set index 2 as target [ 71.366786][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370279][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.506125][ T6514] overlay: filesystem on ./file0 not supported as upperdir [ 71.761056][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 71.922398][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 71.929059][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 71.934052][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.937097][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 71.940464][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 71.945697][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.948398][ T9] usb 8-1: Product: syz [ 71.949826][ T9] usb 8-1: Manufacturer: syz [ 71.951404][ T9] usb 8-1: SerialNumber: syz [ 71.957290][ T9] usb 8-1: config 0 descriptor?? [ 72.007749][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 72.169545][ T9] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 72.185464][ T6535] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 72.370887][ T9] usb 8-1: USB disconnect, device number 6 [ 72.475508][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 72.600943][ T5724] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 72.649694][ T6569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.747328][ T6577] printk: legacy console [ttyGS0] disabled [ 72.750830][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 72.751654][ T5724] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 72.759974][ T5724] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.768647][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.788238][ T5724] as10x_usb: device has been detected [ 72.793424][ T5724] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 72.812491][ T5724] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 72.838929][ T5724] as10x_usb: error during firmware upload part1 [ 72.842574][ T5724] Registered device Abilis Systems DVB-Titan [ 72.900859][ T9] usb 8-1: device descriptor read/64, error -71 [ 73.170892][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 73.296438][ T6588] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 73.309498][ T6588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.327237][ T6588] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 73.334544][ T6588] IPv6: NLM_F_REPLACE set, but no existing node found! [ 73.585360][ T6600] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 74.096836][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 74.096856][ T42] audit: type=1400 audit(1787097858.439:540): avc: denied { cmd } for pid=6614 comm="syz.0.214" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 74.152068][ T42] audit: type=1400 audit(1787097858.489:541): avc: denied { unlink } for pid=6618 comm="syz.0.215" name="#1" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.174892][ T42] audit: type=1400 audit(1787097858.519:542): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.218386][ T42] audit: type=1400 audit(1787097858.559:543): avc: denied { ioctl } for pid=6622 comm="syz.0.217" path="socket:[12988]" dev="sockfs" ino=12988 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.467226][ T42] audit: type=1400 audit(1787097858.809:544): avc: denied { write } for pid=6637 comm="syz.1.220" name="/" dev="9p" ino=77617159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.476409][ T42] audit: type=1400 audit(1787097858.809:545): avc: denied { add_name } for pid=6637 comm="syz.1.220" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.490516][ T42] audit: type=1400 audit(1787097858.809:546): avc: denied { associate } for pid=6637 comm="syz.1.220" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.500644][ T42] audit: type=1400 audit(1787097858.819:547): avc: denied { read append open } for pid=6637 comm="syz.1.220" path="/62/file0/cpuset.effective_cpus" dev="9p" ino=77617191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.508800][ T42] audit: type=1400 audit(1787097858.819:548): avc: denied { lock } for pid=6637 comm="syz.1.220" path="/62/file0/cpuset.effective_cpus" dev="9p" ino=77617191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.516619][ T42] audit: type=1400 audit(1787097858.829:549): avc: denied { write } for pid=6637 comm="syz.1.220" name="/" dev="9p" ino=77617159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.556633][ T6643] __nla_validate_parse: 3 callbacks suppressed [ 74.556650][ T6643] netlink: 7 bytes leftover after parsing attributes in process `syz.0.221'. [ 74.609806][ T6645] netlink: 'syz.0.223': attribute type 4 has an invalid length. [ 74.706316][ T6647] netlink: Conntrack attr has 8 unknown bytes [ 74.707320][ T6648] netlink: Conntrack attr has 8 unknown bytes [ 74.709072][ T6647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.711331][ T6648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.781466][ T5877] usb 7-1: USB disconnect, device number 7 [ 75.814976][ T5877] Unregistered device Abilis Systems DVB-Titan [ 75.817157][ T5877] as10x_usb: device has been disconnected [ 75.935663][ T6686] devpts: Bad value for 'gid' [ 75.937017][ T6683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 75.937680][ T6686] devpts: Bad value for 'gid' [ 75.959960][ T6683] kvm: pic: non byte read [ 75.964392][ T6683] kvm: pic: level sensitive irq not supported [ 75.965477][ T6683] kvm: pic: non byte read [ 75.970613][ T6683] kvm: pic: level sensitive irq not supported [ 75.970978][ T6683] kvm: pic: non byte read [ 75.976626][ T6683] kvm: pic: level sensitive irq not supported [ 75.977125][ T6683] kvm: pic: non byte read [ 76.142627][ T6695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.146756][ T6695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.156460][ T6695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.162512][ T6695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.164596][ T6695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.169954][ T6695] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.174852][ T6695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.176905][ T6695] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.179684][ T6695] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.183948][ T6695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.187004][ T6695] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.191215][ T6695] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.297965][ T6705] syz.2.239 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.804943][ T6656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.896536][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.901875][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.908500][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.913337][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.924373][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.933030][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.938373][ T6714] overlay: filesystem on ./bus not supported as upperdir [ 77.942195][ T6713] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.947397][ T6713] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.957451][ T6713] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.962278][ T6714] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.965678][ T6713] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.969093][ T6714] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.977124][ T6713] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.980433][ T6714] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.984676][ T6713] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 77.989350][ T6714] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 78.002003][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 78.032269][ T6731] capability: warning: `syz.1.247' uses 32-bit capabilities (legacy support in use) [ 78.038933][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 78.040045][ T6731] tipc: Can't bind to reserved service type 2 [ 78.042667][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 78.148750][ T6743] openvswitch: netlink: Flow actions attr not present in new flow. [ 78.150851][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.155192][ T6743] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.232267][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.233119][ T5732] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.233196][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.253972][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.296823][ T6755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.299051][ T6754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.257'. [ 78.361698][ T6768] syz.1.259 uses obsolete (PF_INET,SOCK_PACKET) [ 78.394429][ T6769] socket: no more sockets [ 78.415254][ T6777] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.522143][ T6787] netlink: 276 bytes leftover after parsing attributes in process `syz.1.265'. [ 78.567138][ T6793] binder: Unknown parameter 'stAts' [ 78.629775][ T6793] binder: 6790:6793 ioctl c008551a 200000000080 returned -22 [ 78.639423][ T6795] nvme_fabrics: no handler found for transport hoop. [ 78.651361][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.269'. [ 78.656814][ T6795] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 78.714727][ T6799] netlink: 596 bytes leftover after parsing attributes in process `syz.1.270'. [ 78.867334][ T6806] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 78.873346][ T6806] SELinux: failed to load policy [ 78.909515][ T6814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.916668][ T6814] overlayfs: missing 'lowerdir' [ 78.970695][ T6816] netlink: 'syz.0.276': attribute type 32 has an invalid length. [ 78.987785][ T6816] bond1: Setting coupled_control to off (0) [ 78.989977][ T6816] bond1: entered promiscuous mode [ 78.997326][ T6816] virtio-fs: tag not found [ 79.090152][ T6825] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 79.266079][ T6793] syz.2.267 (6793): drop_caches: 2 [ 79.319197][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 79.319210][ T42] audit: type=1400 audit(1787097863.659:596): avc: denied { read } for pid=6837 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.404539][ T6843] overlayfs: failed to resolve './file0': -2 [ 79.413369][ T6843] ======================================================= [ 79.413369][ T6843] WARNING: The mand mount option has been deprecated and [ 79.413369][ T6843] and is ignored by this kernel. Remove the mand [ 79.413369][ T6843] option from the mount to silence this warning. [ 79.413369][ T6843] ======================================================= [ 79.413395][ T42] audit: type=1400 audit(1787097863.759:597): avc: denied { remount } for pid=6842 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.474748][ T42] audit: type=1400 audit(1787097863.819:598): avc: denied { write } for pid=6846 comm="syz.2.286" name="functions" dev="configfs" ino=8002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.483087][ T42] audit: type=1400 audit(1787097863.819:599): avc: denied { write } for pid=6846 comm="syz.2.286" name="configs" dev="configfs" ino=8003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.492451][ T42] audit: type=1400 audit(1787097863.819:600): avc: denied { write } for pid=6846 comm="syz.2.286" name="uncompressed" dev="configfs" ino=15904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.541075][ T41] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.692114][ T41] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.697211][ T42] audit: type=1400 audit(1787097864.039:601): avc: denied { read } for pid=6862 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.698191][ T41] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.708779][ T41] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 16960, setting to 64 [ 79.714589][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.719302][ T41] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.723118][ T41] usb 5-1: Product: syz [ 79.724450][ T41] usb 5-1: Manufacturer: syz [ 79.730851][ T41] usb 5-1: SerialNumber: syz [ 79.738609][ T41] usb 5-1: config 0 descriptor?? [ 79.752764][ T41] usb 5-1: selecting invalid altsetting 0 [ 79.789767][ T42] audit: type=1400 audit(1787097864.129:602): avc: denied { setopt } for pid=6869 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.853074][ T6875] netlink: 'syz.1.294': attribute type 61 has an invalid length. [ 79.857195][ T42] audit: type=1400 audit(1787097864.199:603): avc: denied { getopt } for pid=6874 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.877072][ T42] audit: type=1400 audit(1787097864.219:604): avc: denied { write } for pid=6876 comm="syz.1.295" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.969735][ T6882] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.981730][ T9] usb 5-1: USB disconnect, device number 2 [ 80.093741][ T42] audit: type=1400 audit(1787097864.439:605): avc: denied { name_bind } for pid=6883 comm="syz.2.297" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 80.231053][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.284036][ T5439] veth1_vlan: left promiscuous mode [ 80.313055][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.313302][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.316535][ T5732] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.362634][ T6951] Bluetooth: MGMT ver 1.23 [ 80.406587][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.410657][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.534042][ T5836] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.538226][ T5836] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.572853][ T5836] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.576909][ T5836] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.713887][ T6971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.758623][ T6974] Config c/1 of g1 needs at least one function. [ 80.761562][ T6974] udc dummy_udc.0: failed to start g1: -22 [ 80.764306][ T6974] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 80.775733][ T6976] fuse: Unknown parameter 'ff0x0000000000000003' [ 80.777660][ T6974] UDC core: g1: couldn't find an available UDC or it's busy [ 80.896376][ T6991] __nla_validate_parse: 1 callbacks suppressed [ 80.896394][ T6991] netlink: 128 bytes leftover after parsing attributes in process `syz.1.320'. [ 80.899843][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 80.908621][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'. [ 80.942791][ T6987] (syz.2.318,6987,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 80.945917][ T6987] (syz.2.318,6987,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 81.056603][ T7009] overlayfs: failed to resolve './file1/file0': -2 [ 81.119977][ T7013] overlayfs: failed to resolve './file0': -2 [ 81.195265][ T7018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60433 sclass=netlink_route_socket pid=7018 comm=syz.1.327 [ 81.232205][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 81.308373][ T7022] bonding: bond0 is being created... [ 81.313842][ T7022] bonding: bond0 already exists [ 81.474261][ T7024] kAFS: bad VL server IP address [ 81.537744][ T7043] lo speed is unknown, defaulting to 1000 [ 81.622950][ T7046] device-mapper: ioctl: Invalid data size in the ioctl structure: 1920233071 [ 81.631969][ T848] cfg80211: failed to load regulatory.db [ 81.741736][ T7060] pim6reg1: entered promiscuous mode [ 81.744054][ T7060] pim6reg1: entered allmulticast mode [ 82.113717][ T7080] CIFS: Attempting to mount //::1/share [ 82.119441][ T7080] CIFS: VFS: Error connecting to socket. Aborting operation. [ 82.122414][ T7080] CIFS: VFS: cifs_mount failed w/return code = -111 [ 82.310938][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.340206][ T7091] process 'syz.3.346' launched './file0' with NULL argv: empty string added [ 82.392651][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.392693][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.401043][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.557046][ T7106] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 82.561906][ T7108] 9pnet_virtio: no channels available for device syz [ 82.565087][ T7108] 9pnet_virtio: no channels available for device syz [ 82.568140][ T7108] 9pnet_virtio: no channels available for device syz [ 82.571238][ T7108] 9pnet_virtio: no channels available for device syz [ 82.574373][ T7108] 9pnet_virtio: no channels available for device syz [ 82.577479][ T7108] 9pnet_virtio: no channels available for device syz [ 82.580506][ T7108] 9pnet_virtio: no channels available for device syz [ 82.583651][ T7108] 9pnet_virtio: no channels available for device syz [ 82.590359][ T7108] 9pnet_virtio: no channels available for device syz [ 82.595568][ T7108] 9pnet_virtio: no channels available for device syz [ 82.598405][ T7108] 9pnet_virtio: no channels available for device syz [ 82.601293][ T7108] 9pnet_virtio: no channels available for device syz [ 82.603610][ T7108] 9pnet_virtio: no channels available for device syz [ 82.606036][ T7108] 9pnet_virtio: no channels available for device syz [ 82.608570][ T7108] 9pnet_virtio: no channels available for device syz [ 82.634748][ T7103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7103 comm=syz.2.350 [ 82.785873][ T7117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7117 comm=syz.0.354 [ 82.789839][ T7118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7118 comm=syz.0.354 [ 82.957707][ T7127] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.966507][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 83.011806][ T7132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.265640][ T7156] gfs2: error -5 reading superblock [ 83.324892][ T7161] netlink: 'syz.2.365': attribute type 2 has an invalid length. [ 83.327436][ T7161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 83.345954][ T7161] : entered promiscuous mode [ 83.951485][ T7194] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 83.955082][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.999906][ T7194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.032166][ T7194] bond2: (slave geneve2): making interface the new active one [ 84.039514][ T7194] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 84.069018][ T5542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.076070][ T5542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.087717][ T5542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.092754][ T5542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.171421][ T7211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.197519][ T5835] lo speed is unknown, defaulting to 1000 [ 84.246810][ T7220] devpts: Bad value for 'gid' [ 84.249380][ T7220] devpts: Bad value for 'gid' [ 84.270324][ T7218] 9p: Could not find request transport: vWrtio [ 84.270338][ T7217] 9p: Could not find request transport: vWrtio [ 84.321304][ T42] kauditd_printk_skb: 2754 callbacks suppressed [ 84.321322][ T42] audit: type=1326 audit(1787097869.656:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.332508][ T42] audit: type=1326 audit(1787097869.656:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.340341][ T42] audit: type=1326 audit(1787097869.656:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.349367][ T42] audit: type=1326 audit(1787097869.656:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.358973][ T42] audit: type=1326 audit(1787097869.656:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.369491][ T42] audit: type=1326 audit(1787097869.656:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.377156][ T42] audit: type=1326 audit(1787097869.656:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.384392][ T42] audit: type=1326 audit(1787097869.656:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.387508][ T7227] syz.0.382 (7227): /proc/7226/oom_adj is deprecated, please use /proc/7226/oom_score_adj instead. [ 84.391707][ T42] audit: type=1326 audit(1787097869.656:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.402419][ T7231] misc userio: Begin command sent, but we're already running [ 84.405733][ T42] audit: type=1326 audit(1787097869.656:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7137 comm="syz.1.360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d49b9e0d9 code=0x7fc00000 [ 84.443891][ T7235] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.446633][ T7235] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 84.449516][ T7235] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.473171][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.850927][ T848] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 84.869763][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 84.872713][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 84.902761][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 84.906035][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 85.001741][ T848] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 85.007094][ T848] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.012457][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.028093][ T848] as10x_usb: device has been detected [ 85.030458][ T848] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 85.039613][ T848] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 85.044663][ T848] as10x_usb: error during firmware upload part1 [ 85.046968][ T848] Registered device Abilis Systems DVB-Titan [ 85.118095][ T7256] overlay: Unknown parameter '{O50H' [ 85.280049][ T64] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 85.280219][ T7268] devpts: Unknown parameter 'C ' [ 85.442021][ T7288] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.477678][ T7294] netlink: 'syz.0.399': attribute type 3 has an invalid length. [ 85.480895][ T7294] netlink: 'syz.0.399': attribute type 6 has an invalid length. [ 85.527600][ T7297] befs: (loop0): No write support. Marking filesystem read-only [ 85.531424][ T7297] befs: (loop0): unable to read superblock [ 85.627533][ T7311] xt_l2tp: invalid flags combination: c [ 85.629818][ T7311] bridge0: port 4(syz_tun) entered blocking state [ 85.632484][ T7311] bridge0: port 4(syz_tun) entered disabled state [ 85.634690][ T7311] syz_tun: entered allmulticast mode [ 85.637367][ T7311] syz_tun: entered promiscuous mode [ 85.639436][ T7311] bridge0: port 4(syz_tun) entered blocking state [ 85.641562][ T7311] bridge0: port 4(syz_tun) entered forwarding state [ 85.826539][ T7328] loop5: detected capacity change from 0 to 14 [ 85.834645][ T7328] Dev loop5: unable to read RDB block 14 [ 85.836334][ T7328] loop5: unable to read partition table [ 85.836956][ T7325] netlink: 'syz.2.403': attribute type 7 has an invalid length. [ 85.838386][ T7328] loop5: partition table beyond EOD, truncated [ 85.843654][ T7328] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 85.848757][ T7325] x_tables: duplicate underflow at hook 2 [ 85.881938][ T9] usb 6-1: USB disconnect, device number 6 [ 85.917748][ T9] Unregistered device Abilis Systems DVB-Titan [ 85.928261][ T9] as10x_usb: device has been disconnected [ 86.201878][ T110] bridge0: port 4(syz_tun) entered disabled state [ 86.292841][ T7343] __nla_validate_parse: 4 callbacks suppressed [ 86.292864][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 86.605865][ T7365] xt_CT: No such helper "snmp_trap" [ 86.658103][ T7374] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 86.670292][ T7374] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.689041][ T7376] bond1: entered promiscuous mode [ 86.740186][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 86.902212][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 87.022309][ T1461] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.170957][ T1461] usb 7-1: Using ep0 maxpacket: 32 [ 87.174162][ T1461] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 87.179383][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.186940][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.191620][ T1461] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.197362][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.205967][ T1461] usb 7-1: config 0 descriptor?? [ 87.238729][ T7392] fuse: Unknown parameter '' [ 87.245258][ T7392] sctp: [Deprecated]: syz.1.422 (pid 7392) Use of int in maxseg socket option. [ 87.245258][ T7392] Use struct sctp_assoc_value instead [ 87.261924][ T7392] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 87.261924][ T7392] program syz.1.422 not setting count and/or reply_len properly [ 87.819581][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.826756][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.366004][ T7412] syzkaller1: entered promiscuous mode [ 88.367759][ T7412] syzkaller1: entered allmulticast mode [ 88.402219][ T1461] usbhid 7-1:0.0: can't add hid device: -71 [ 88.404519][ T1461] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 88.411040][ T1461] usb 7-1: USB disconnect, device number 8 [ 88.535676][ T7425] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 88.653821][ T7431] syz.3.431: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 88.664332][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.3.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.664376][ T7431] Tainted: [L]=SOFTLOCKUP [ 88.664384][ T7431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.664397][ T7431] Call Trace: [ 88.664437][ T7431] [ 88.664446][ T7431] dump_stack_lvl+0x100/0x190 [ 88.664507][ T7431] warn_alloc.cold+0x94/0xa8 [ 88.664533][ T7431] ? __pfx_warn_alloc+0x10/0x10 [ 88.664555][ T7431] ? policy_nodemask+0xed/0x4f0 [ 88.664589][ T7431] ? alloc_pages_mpol+0x25a/0x540 [ 88.664619][ T7431] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.664648][ T7431] ? find_held_lock+0x2b/0x80 [ 88.664670][ T7431] ? rcu_read_unlock+0x17/0x60 [ 88.664708][ T7431] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 88.664749][ T7431] ? kvm_dev_ioctl+0x154/0x1b50 [ 88.664777][ T7431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 88.664807][ T7431] ? __pfx_vsnprintf+0x10/0x10 [ 88.664916][ T7431] ? rcu_is_watching+0x12/0xc0 [ 88.664959][ T7431] __kvmalloc_node_noprof+0x3d3/0x970 [ 88.664988][ T7431] ? kvm_dev_ioctl+0x154/0x1b50 [ 88.665008][ T7431] ? alloc_fd+0x471/0x7a0 [ 88.665041][ T7431] ? kvm_dev_ioctl+0x154/0x1b50 [ 88.665064][ T7431] kvm_dev_ioctl+0x154/0x1b50 [ 88.665089][ T7431] ? hook_file_ioctl_common+0x140/0x440 [ 88.665137][ T7431] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 88.665164][ T7431] ? selinux_file_ioctl+0x13b/0x290 [ 88.665196][ T7431] ? selinux_file_ioctl+0xb6/0x290 [ 88.665230][ T7431] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 88.665253][ T7431] __x64_sys_ioctl+0x18e/0x210 [ 88.665293][ T7431] do_syscall_64+0x115/0x870 [ 88.665332][ T7431] ? clear_bhb_loop+0x70/0xc0 [ 88.665363][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.665384][ T7431] RIP: 0033:0x7f31eef9e0d9 [ 88.665402][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.665423][ T7431] RSP: 002b:00007f31eff3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.665454][ T7431] RAX: ffffffffffffffda RBX: 00007f31ef225fa0 RCX: 00007f31eef9e0d9 [ 88.665467][ T7431] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 88.665479][ T7431] RBP: 00007f31ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 88.665492][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.665504][ T7431] R13: 00007f31ef226038 R14: 00007f31ef225fa0 R15: 00007ffcb66c05b8 [ 88.665533][ T7431] [ 88.666885][ T7431] Mem-Info: [ 88.689341][ T7444] netlink: ct family unspecified [ 88.690231][ T7431] active_anon:17978 inactive_anon:0 isolated_anon:0 [ 88.690231][ T7431] active_file:0 inactive_file:61225 isolated_file:0 [ 88.690231][ T7431] unevictable:1000 dirty:22 writeback:0 [ 88.690231][ T7431] slab_reclaimable:8671 slab_unreclaimable:67277 [ 88.690231][ T7431] mapped:29342 shmem:6641 pagetables:8364 [ 88.690231][ T7431] sec_pagetables:296 bounce:0 [ 88.690231][ T7431] kernel_misc_reclaimable:0 [ 88.690231][ T7431] free:437983 free_pcp:12423 free_cma:0 [ 88.691704][ T7444] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.693859][ T7431] Node 0 active_anon:72656kB inactive_anon:0kB active_file:0kB inactive_file:244148kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:117580kB dirty:88kB writeback:0kB shmem:25184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:6208kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 88.693919][ T7431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:408kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:27248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 88.693974][ T7431] Node 0 DMA free:15324kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.694028][ T7431] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 88.694068][ T7431] Node 0 DMA32 free:122972kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72656kB inactive_anon:0kB active_file:0kB inactive_file:244148kB unevictable:2000kB writepending:88kB zspages:0kB present:2080628kB managed:1254792kB mlocked:0kB bounce:0kB free_pcp:36052kB local_pcp:9180kB free_cma:0kB [ 88.694122][ T7431] lowmem_reserve[]: 0 0 0 0 0 [ 88.694159][ T7431] Node 1 Normal free:1609544kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:17052kB local_pcp:3216kB free_cma:0kB [ 88.694212][ T7431] lowmem_reserve[]: 0 0 0 0 0 [ 88.694246][ T7431] Node 0 DMA: 9*4kB (U) 9*8kB (U) 9*16kB (U) 9*32kB (U) 9*64kB (U) 9*128kB (U) 7*256kB (U) 6*512kB (U) 4*1024kB (U) 2*2048kB [ 88.824878][ T7448] null_blk: disk nullb2 created [ 88.835939][ T848] psmouse serio3: Failed to reset mouse on : -5 [ 88.836005][ T7431] (U) 0*4096kB = 15324kB [ 88.836033][ T7431] Node 0 DMA32: 741*4kB (UME) 106*8kB (UME) 324*16kB (UME) 225*32kB (UME) 163*64kB (UME) 117*128kB (UME) 76*256kB (UME) 56*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 89732kB [ 88.836186][ T7431] Node 1 Normal: 321*4kB (UME) 638*8kB (UME) 633*16kB (UME) 646*32kB (UE) 626*64kB (UE) 597*128kB (UME) 563*256kB (UME) 467*512kB (UME) 304*1024kB (UME) 20*2048kB (UME) 176*4096kB (UM) = 1610052kB [ 88.836362][ T7431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.836377][ T7431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.836393][ T7431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.836408][ T7431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.836424][ T7431] 76803 total pagecache pages [ 88.836432][ T7431] 0 pages in swap cache [ 88.836438][ T7431] Free swap = 124996kB [ 88.836445][ T7431] Total swap = 124996kB [ 88.836454][ T7431] 1048443 pages RAM [ 88.836460][ T7431] 0 pages HighMem/MovableOnly [ 88.836466][ T7431] 285434 pages reserved [ 88.836473][ T7431] 0 pages cma reserved [ 88.939166][ T7453] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 88.966084][ T7457] loop3: detected capacity change from 0 to 7 [ 88.975094][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.979738][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.989334][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.993474][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.997834][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.001968][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.008796][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.011958][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.014664][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.017898][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.020509][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.023598][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.028168][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.032163][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.036135][ T7457] ldm_validate_partition_table(): Disk read failed. [ 89.038659][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.041602][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.045015][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.048229][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.051709][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.054760][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 89.057349][ T7457] Dev loop3: unable to read RDB block 0 [ 89.059424][ T7457] loop3: unable to read partition table [ 89.061695][ T7457] loop3: partition table beyond EOD, truncated [ 89.063682][ T7457] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 89.236081][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 89.245426][ T7462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.441'. [ 89.331037][ T5878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.398413][ T7478] trusted_key: syz.3.447 sent an empty control message without MSG_MORE. [ 89.405709][ T42] kauditd_printk_skb: 555 callbacks suppressed [ 89.405721][ T42] audit: type=1400 audit(1787097874.746:3925): avc: denied { create } for pid=7477 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 89.416728][ T42] audit: type=1400 audit(1787097874.766:3926): avc: denied { write } for pid=7477 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 89.421731][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 89.504218][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 89.506439][ T42] audit: type=1400 audit(1787097874.846:3927): avc: denied { write } for pid=7485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.510620][ T5878] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.528406][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.532768][ T5724] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.536074][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.539912][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 89.548644][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 89.553602][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.567405][ T5878] hub 5-1:1.0: bad descriptor, ignoring hub [ 89.572612][ T42] audit: type=1400 audit(1787097874.916:3928): avc: denied { write } for pid=7495 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.576880][ T5878] hub 5-1:1.0: probe with driver hub failed with error -5 [ 89.585400][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 89.587088][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 89.595865][ T5878] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 89.597806][ T5878] cdc_wdm 5-1:1.0: Unknown control protocol [ 89.703965][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 89.707434][ T5724] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.715187][ T5724] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 89.720233][ T5724] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.726477][ T5724] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.740136][ T5724] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.744467][ T5724] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.749992][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.770361][ T42] audit: type=1400 audit(1787097875.106:3929): avc: denied { read write } for pid=7459 comm="syz.0.442" name="cdc-wdm0" dev="devtmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 89.797001][ T42] audit: type=1400 audit(1787097875.106:3930): avc: denied { open } for pid=7459 comm="syz.0.442" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 89.806447][ T42] audit: type=1400 audit(1787097875.126:3931): avc: denied { write } for pid=7501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.868122][ T42] audit: type=1400 audit(1787097875.206:3932): avc: denied { write } for pid=7519 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.880827][ T7522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 89.885701][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 89.988506][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 90.027768][ T42] audit: type=1400 audit(1787097875.366:3933): avc: denied { execstack } for pid=7540 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.036631][ T7539] e1000e 0000:00:02.0 eth1: removed PHC [ 90.049634][ T5724] usb 6-1: GET_CAPABILITIES returned 0 [ 90.056778][ T5724] usbtmc 6-1:16.0: can't read capabilities [ 90.110105][ T42] audit: type=1400 audit(1787097875.446:3934): avc: denied { write } for pid=7543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.175801][ T7539] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 90.251586][ T7554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.460'. [ 90.448632][ T7460] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 90.542281][ T7586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7586 comm=syz.3.467 [ 90.641133][ T7460] usb 5-1: device firmware changed [ 90.651070][ T1461] usb 5-1: USB disconnect, device number 3 [ 90.653805][ T7473] cdc_wdm 5-1:1.0: Error autopm - -16 [ 90.765796][ T5877] usb 6-1: USB disconnect, device number 7 [ 90.833717][ T1461] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.835544][ T7614] macvtap0: entered allmulticast mode [ 90.839353][ T7614] veth0_macvtap: entered allmulticast mode [ 90.991056][ T1461] usb 5-1: Using ep0 maxpacket: 8 [ 90.996915][ T1461] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.002766][ T1461] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.006897][ T1461] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.010444][ T1461] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.018943][ T1461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.031620][ T1461] hub 5-1:1.0: bad descriptor, ignoring hub [ 91.034358][ T1461] hub 5-1:1.0: probe with driver hub failed with error -5 [ 91.037816][ T1461] cdc_wdm 5-1:1.0: skipping garbage [ 91.040054][ T1461] cdc_wdm 5-1:1.0: skipping garbage [ 91.045718][ T1461] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 91.141947][ T7635] hsr_slave_0: left promiscuous mode [ 91.146433][ T7635] hsr_slave_1: left promiscuous mode [ 91.348939][ T7645] __nla_validate_parse: 2 callbacks suppressed [ 91.348953][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'. [ 91.351130][ T1461] usb 5-1: USB disconnect, device number 4 [ 91.357362][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'. [ 91.535949][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 91.550414][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 91.609662][ T7657] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 91.818809][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 92.011540][ T7683] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.182812][ T7691] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 92.186154][ T7691] ref_ctr increment failed for inode: 0x31b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803e548cc0 [ 92.313951][ T7689] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 92.319476][ T7689] ref_ctr decrement failed for inode: 0x31b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803e548cc0 [ 92.323547][ T7689] uprobe: syz.1.488:7689 failed to unregister, leaking uprobe [ 92.455298][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 92.461130][ T848] misc userio: Buffer overflowed, userio client isn't keeping up [ 92.465462][ T7715] batadv0: entered promiscuous mode [ 92.469944][ T7715] macsec1: entered promiscuous mode [ 92.476046][ T7715] macsec1: entered allmulticast mode [ 92.477798][ T7715] batadv0: entered allmulticast mode [ 92.480900][ T7715] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 92.485844][ T7715] batadv0: left allmulticast mode [ 92.488488][ T7715] batadv0: left promiscuous mode [ 92.574949][ T7731] netlink: 'syz.2.499': attribute type 12 has an invalid length. [ 92.622348][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 92.629752][ T7731] tls_set_device_offload: netdev not found [ 92.958154][ T7767] omfs: Invalid superblock (0) [ 93.123971][ T7784] SELinux: ebitmap start bit (16580607) is not a multiple of the map unit size (64) [ 93.128383][ T7784] SELinux: invalid class [ 93.132798][ T7784] SELinux: failed to load policy [ 93.445822][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 93.449864][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 93.454531][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 93.464554][ T7820] netlink: 'syz.1.522': attribute type 3 has an invalid length. [ 93.605858][ T7832] syz.2.525 (7832) used greatest stack depth: 19280 bytes left [ 93.643590][ T7839] fuse: Unknown parameter 'fd-0x0000000000000005' [ 93.690700][ T7841] netlink: 'syz.1.527': attribute type 15 has an invalid length. [ 93.720544][ T7844] binder: Binderfs stats mode cannot be changed during a remount [ 93.732635][ T848] input: PS/2 Generic Mouse as /devices/serio3/input/input11 [ 93.955181][ T7855] hugetlbfs: Bad value for 'uid' [ 93.956840][ T7855] hugetlbfs: Bad value for 'uid' [ 93.961980][ T848] psmouse serio3: Failed to enable mouse on [ 93.969066][ T7863] tmpfs: Bad value for 'mpol' [ 94.016487][ T7865] ip_tables: iptables: counters copy to user failed while replacing table [ 94.039237][ T7865] MTD: Couldn't look up './dev/mtdblock0': -2 [ 94.098663][ T7871] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 94.184098][ T7883] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 94.193514][ T7883] geneve2: entered promiscuous mode [ 94.195825][ T7883] geneve2: entered allmulticast mode [ 94.302750][ T7898] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 94.341738][ T7898] bond5: (slave gretap1): making interface the new active one [ 94.345590][ T7898] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 94.352621][ T7898] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.440329][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 94.440347][ T42] audit: type=1400 audit(1787097879.776:3983): avc: denied { ioctl } for pid=7907 comm="syz.2.548" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.495333][ T7914] romfs: Unknown parameter 'a' [ 94.511115][ T7914] input: syz0 as /devices/virtual/input/input12 [ 94.533250][ T42] audit: type=1400 audit(1787097879.866:3984): avc: denied { mounton } for pid=7891 comm="syz.1.543" path="/proc/505/task" dev="proc" ino=22650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 94.545425][ T42] audit: type=1400 audit(1787097879.886:3985): avc: denied { write } for pid=7907 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.577449][ T42] audit: type=1400 audit(1787097879.916:3986): avc: denied { write } for pid=7915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.621011][ T5878] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 94.640227][ T42] audit: type=1400 audit(1787097879.976:3987): avc: denied { write } for pid=7918 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.740649][ T42] audit: type=1400 audit(1787097880.076:3988): avc: denied { write } for pid=7921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.800951][ T42] audit: type=1400 audit(1787097880.136:3989): avc: denied { write } for pid=7924 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.872955][ T7930] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 94.884778][ T42] audit: type=1400 audit(1787097880.226:3990): avc: denied { write } for pid=7928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.889940][ T7930] bond2: entered promiscuous mode [ 94.896286][ T7930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.902596][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.932211][ T7930] veth3: entered allmulticast mode [ 94.937794][ T7930] bond2: (slave veth3): making interface the new active one [ 94.940688][ T7930] veth3: entered promiscuous mode [ 94.943575][ T7930] bond2: (slave veth3): Enslaving as an active interface with an up link [ 94.947382][ T42] audit: type=1400 audit(1787097880.286:3991): avc: denied { write } for pid=7934 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.965161][ T7930] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 94.970024][ T7930] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 95.030913][ T41] usb 5-1: device descriptor read/64, error -71 [ 95.063400][ T42] audit: type=1400 audit(1787097880.406:3992): avc: denied { write } for pid=7940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.270944][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.409602][ T41] usb 5-1: device descriptor read/64, error -71 [ 95.445480][ T7962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25616 sclass=netlink_route_socket pid=7962 comm=syz.2.554 [ 95.522266][ T41] usb usb5-port1: attempt power cycle [ 95.682210][ T7969] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 95.686159][ T7969] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 95.688962][ T7969] PKCS7: Unsupported data type 106 [ 95.719310][ T7971] comedi comedi2: comedi_config --init_data is deprecated [ 95.861026][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.901567][ T41] usb 5-1: device descriptor read/8, error -71 [ 96.042189][ T7991] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 96.062137][ T7993] befs: (nbd2): unable to read superblock [ 96.140884][ T41] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.161419][ T41] usb 5-1: device descriptor read/8, error -71 [ 96.266289][ C3] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 96.269900][ C3] sr 2:0:0:0: [sr0] tag#20 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 96.274692][ T41] usb usb5-port1: unable to enumerate USB device [ 96.653453][ T8020] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 96.710946][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.711018][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.717067][ T5808] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 97.116694][ T8030] evm: overlay not supported [ 97.127753][ T8030] overlayfs: failed to verify origin (111/file1, ino=644, err=-116) [ 97.131765][ T8030] overlayfs: failed to verify origin (111/file1, ino=644, err=-116) [ 97.280952][ T8034] EXT4-fs (nbd1): unable to read superblock [ 97.948817][ T8068] __nla_validate_parse: 5 callbacks suppressed [ 97.948837][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 97.957965][ T8068] netlink: 80 bytes leftover after parsing attributes in process `syz.1.585'. [ 98.163346][ T8078] syzkaller0: entered promiscuous mode [ 98.165729][ T8078] syzkaller0: entered allmulticast mode [ 98.173624][ T8078] tipc: Started in network mode [ 98.175882][ T8078] tipc: Node identity 52a0e15c18fb, cluster identity 4711 [ 98.179600][ T8078] tipc: Enabled bearer , priority 0 [ 98.189605][ T8078] tipc: Resetting bearer [ 98.197833][ T8077] tipc: Resetting bearer [ 98.201105][ T5724] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.213238][ T8077] tipc: Disabling bearer [ 98.330938][ T5724] usb 5-1: device descriptor read/64, error -71 [ 98.335132][ T8082] netlink: 'syz.1.591': attribute type 2 has an invalid length. [ 98.338203][ T8082] netlink: 228 bytes leftover after parsing attributes in process `syz.1.591'. [ 98.463163][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 98.483829][ T8095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'. [ 98.571195][ T5724] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.672084][ T8102] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.678124][ T8102] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.685444][ T8102] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.699646][ T8102] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.700991][ T5724] usb 5-1: device descriptor read/64, error -71 [ 98.708380][ T8106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 98.724089][ T8107] program syz.1.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.758648][ T8109] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 98.791897][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.795856][ T5808] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 98.798594][ T5808] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 98.811327][ T5724] usb usb5-port1: attempt power cycle [ 99.150914][ T5724] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.174046][ T5724] usb 5-1: device descriptor read/8, error -71 [ 99.410931][ T5724] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.431784][ T5724] usb 5-1: device descriptor read/8, error -71 [ 99.525267][ T8129] UDC core: g1: couldn't find an available UDC or it's busy [ 99.530968][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 99.530978][ T42] audit: type=1400 audit(1787097884.876:4025): avc: denied { view } for pid=8128 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.538731][ T8129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.548304][ T8129] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 99.551218][ T5724] usb usb5-port1: unable to enumerate USB device [ 99.552215][ T42] audit: type=1400 audit(1787097884.896:4026): avc: denied { relabelto } for pid=8128 comm="syz.1.605" name="185" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.564688][ T42] audit: type=1400 audit(1787097884.896:4027): avc: denied { associate } for pid=8128 comm="syz.1.605" name="185" dev="tmpfs" ino=1023 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.604022][ T42] audit: type=1400 audit(1787097884.946:4028): avc: denied { getopt } for pid=8130 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.604579][ T8131] bond0: no command found in slaves file - use +ifname or -ifname [ 99.647706][ T42] audit: type=1400 audit(1787097884.986:4029): avc: denied { write } for pid=5731 comm="syz-executor" name="185" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.656944][ T42] audit: type=1400 audit(1787097884.986:4030): avc: denied { remove_name } for pid=5731 comm="syz-executor" name="mnt" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.665492][ T42] audit: type=1400 audit(1787097884.986:4031): avc: denied { write } for pid=5731 comm="syz-executor" name="185" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.672449][ T8135] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 99.674216][ T42] audit: type=1400 audit(1787097884.986:4032): avc: denied { write } for pid=5731 comm="syz-executor" name="185" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.675996][ T8135] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.684440][ T42] audit: type=1400 audit(1787097884.986:4033): avc: denied { write } for pid=5731 comm="syz-executor" name="185" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.688880][ T8135] vhci_hcd vhci_hcd.0: Device attached [ 99.694345][ T42] audit: type=1400 audit(1787097884.986:4034): avc: denied { write } for pid=5731 comm="syz-executor" name="185" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 99.900913][ T5724] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 99.961025][ T1848] usb 40-1: SetAddress Request (2) to port 0 [ 99.963943][ T1848] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 100.052258][ T5724] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 100.056097][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 100.059793][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.065088][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.067782][ T5724] usb 7-1: Product: syz [ 100.069221][ T5724] usb 7-1: Manufacturer: syz [ 100.070847][ T5724] usb 7-1: SerialNumber: syz [ 100.075810][ T5724] usb 7-1: config 0 descriptor?? [ 100.079758][ T5724] hub 7-1:0.0: bad descriptor, ignoring hub [ 100.082973][ T5724] hub 7-1:0.0: probe with driver hub failed with error -5 [ 100.089953][ T5724] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input14 [ 100.203261][ T8149] ptrace attach of "/syz-executor exec"[5729] was attempted by "/syz-executor exec"[8149] [ 100.214465][ T8136] vhci_hcd: connection reset by peer [ 100.223374][ T5836] vhci_hcd vhci_hcd.1: stop threads [ 100.226861][ T5836] vhci_hcd vhci_hcd.1: release socket [ 100.235191][ T5836] vhci_hcd vhci_hcd.1: disconnect device [ 100.304846][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.348121][ T8163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=8163 comm=syz.1.615 [ 100.552289][ T8168] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 100.574648][ T8168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.608950][ T8168] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 100.612550][ T10] usb 7-1: USB disconnect, device number 9 [ 100.745053][ T8182] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 100.748389][ T8182] dummy0: left promiscuous mode [ 100.755758][ T8182] team0: Port device dummy0 added [ 100.870918][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.870930][ T5808] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 100.875956][ T5808] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 100.988806][ T8194] openvswitch: netlink: Missing key (keys=40, expected=100) [ 101.179248][ T8203] xt_nfacct: accounting object `syz1' does not exist [ 101.203365][ T8211] netlink: 17 bytes leftover after parsing attributes in process `syz.0.625'. [ 101.207839][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 101.413235][ T8228] IPVS: persistence engine module ip_vs_pe_s not found [ 102.006920][ T8235] futex_wake_op: syz.2.632 tries to shift op by -1; fix this program [ 102.950923][ T5808] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 102.951130][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.953857][ T5808] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 103.377427][ T8242] netlink: 68 bytes leftover after parsing attributes in process `syz.0.634'. [ 103.386901][ T8242] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=8242 comm=syz.0.634 [ 103.412408][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 103.446990][ T8245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.461665][ T8251] Console: switching to colour dummy device 80x25 [ 103.464385][ T8245] bond2: entered promiscuous mode [ 103.473783][ T8249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.636'. [ 103.477382][ T8249] netlink: 92 bytes leftover after parsing attributes in process `syz.1.636'. [ 103.541845][ T8257] bond3: option xmit_hash_policy: invalid value (6) [ 103.546412][ T8257] bond3 (unregistering): Released all slaves [ 103.564394][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 103.567226][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 103.575841][ T8265] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 103.655602][ T8267] bond3 (unregistering): Released all slaves [ 103.685635][ T8257] jffs2: notice: (8257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.733635][ T8271] geneve3: entered promiscuous mode [ 103.735339][ T8271] geneve3: entered allmulticast mode [ 103.738326][ T8271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.642'. [ 103.751210][ T5836] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.754804][ T5836] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.758248][ T5836] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.761897][ T5836] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.888861][ T8288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.945839][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.648'. [ 103.954577][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 103.959246][ T8295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.648'. [ 103.983475][ T8297] macvtap1: entered allmulticast mode [ 103.985852][ T8297] bond0: entered allmulticast mode [ 103.988148][ T8297] bond_slave_0: entered allmulticast mode [ 103.990664][ T8297] bond_slave_1: entered allmulticast mode [ 103.993860][ T8297] bond_slave_0: entered promiscuous mode [ 103.997891][ T8297] bond_slave_1: entered promiscuous mode [ 104.001836][ T8297] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.007754][ T8297] bond0: left allmulticast mode [ 104.009914][ T8297] bond_slave_0: left allmulticast mode [ 104.012718][ T8297] bond_slave_1: left allmulticast mode [ 104.032374][ T5724] bond_slave_0: left promiscuous mode [ 104.036025][ T5724] bond_slave_1: left promiscuous mode [ 104.133739][ T8302] CIFS: iocharset name too long [ 104.408845][ T8341] veth1_to_bond: entered allmulticast mode [ 104.414340][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.424607][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.546056][ T8353] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 104.586043][ T8355] loop4: detected capacity change from 0 to 2640 [ 104.594512][ T7183] buffer_io_error: 10 callbacks suppressed [ 104.594524][ T7183] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.601697][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.611928][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.616692][ T8357] netlink: 'syz.3.669': attribute type 15 has an invalid length. [ 104.616767][ T7183] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.619341][ T8358] netlink: 'syz.3.669': attribute type 15 has an invalid length. [ 104.622602][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.628697][ T7183] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.629140][ T8357] netlink: 'syz.3.669': attribute type 18 has an invalid length. [ 104.635408][ T8358] netlink: 'syz.3.669': attribute type 18 has an invalid length. [ 104.635450][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.642643][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 104.642654][ T42] audit: type=1400 audit(1787097889.986:4050): avc: denied { map } for pid=8354 comm="syz.2.668" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.658077][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.663432][ T42] audit: type=1400 audit(1787097889.996:4051): avc: denied { execute } for pid=8354 comm="syz.2.668" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.670891][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.670923][ T8355] Buffer I/O error on dev loop4, logical block 0, async page read [ 104.670950][ T8355] ldm_validate_partition_table(): Disk read failed. [ 104.670987][ T8355] Dev loop4: unable to read RDB block 0 [ 104.671200][ T8355] loop4: unable to read partition table [ 104.685074][ T8355] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 104.879634][ T8368] overlayfs: missing 'lowerdir' [ 105.033249][ T1848] usb 40-1: device descriptor read/8, error -110 [ 105.138520][ T42] audit: type=1400 audit(1787097890.476:4052): avc: denied { write } for pid=8389 comm="syz.3.678" name="/" dev="9p" ino=77617159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.146141][ T42] audit: type=1400 audit(1787097890.486:4053): avc: denied { read write } for pid=8389 comm="syz.3.678" name="file0" dev="9p" ino=77617163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 105.153988][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 105.155872][ T42] audit: type=1400 audit(1787097890.486:4054): avc: denied { open } for pid=8389 comm="syz.3.678" path="/145/file0/file0" dev="9p" ino=77617163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 105.248051][ T42] audit: type=1400 audit(1787097890.586:4055): avc: denied { ioctl } for pid=8389 comm="syz.3.678" path="/145/file0/file0" dev="9p" ino=77617163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 105.274012][ T42] audit: type=1400 audit(1787097890.596:4056): avc: denied { ioctl } for pid=8389 comm="syz.3.678" path="socket:[23320]" dev="sockfs" ino=23320 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.302851][ T50] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 105.313943][ T50] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.321481][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.332851][ T8370] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.341917][ T50] opticon 5-1:1.0: opticon converter detected [ 105.382226][ T50] usb 5-1: opticon converter now attached to ttyUSB0 [ 105.422631][ T1848] usb usb40-port1: attempt power cycle [ 105.472970][ T8402] netlink: 'syz.2.682': attribute type 9 has an invalid length. [ 105.482640][ T8402] bond0: entered promiscuous mode [ 105.484295][ T8402] bond_slave_0: entered promiscuous mode [ 105.486304][ T8402] bond_slave_1: entered promiscuous mode [ 105.490992][ T8402] batadv0: entered promiscuous mode [ 105.493741][ T8402] debugfs: 'hsr0' already exists in 'hsr' [ 105.495677][ T8402] Cannot create hsr debugfs directory [ 105.500254][ T8402] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 105.505021][ T8402] bond0: left promiscuous mode [ 105.506822][ T8402] bond_slave_0: left promiscuous mode [ 105.508675][ T8402] bond_slave_1: left promiscuous mode [ 105.513872][ T8402] batadv0: left promiscuous mode [ 105.778044][ T8410] lo: entered allmulticast mode [ 105.781456][ T8410] bond0: entered allmulticast mode [ 105.783912][ T8410] dummy0: entered allmulticast mode [ 105.788021][ T8410] eql: entered allmulticast mode [ 105.790255][ T8410] ifb0: entered allmulticast mode [ 105.794334][ T8410] ifb1: entered allmulticast mode [ 105.799893][ T8410] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 105.805848][ T8410] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 105.808506][ T8410] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 105.811448][ T8410] hwsim0: entered allmulticast mode [ 105.813370][ T8410] ieee802154 phy1 wpan1: entered allmulticast mode [ 105.815855][ T8410] teql0: entered allmulticast mode [ 105.817583][ T8410] tunl0: entered allmulticast mode [ 105.819373][ T8410] gre0: entered allmulticast mode [ 105.821139][ T8410] gretap0: entered allmulticast mode [ 105.823350][ T8410] erspan0: entered allmulticast mode [ 105.825369][ T8410] ip_vti0: entered allmulticast mode [ 105.827298][ T8410] ip6_vti0: entered allmulticast mode [ 105.829238][ T8410] sit0: entered allmulticast mode [ 105.831260][ T8410] ip6tnl0: entered allmulticast mode [ 105.833287][ T8410] ip6gre0: entered allmulticast mode [ 105.835486][ T8410] lapb0: entered allmulticast mode [ 105.837891][ T8410] lapb1: entered allmulticast mode [ 105.840381][ T8410] lapb2: entered allmulticast mode [ 105.842875][ T8410] lapb3: entered allmulticast mode [ 105.845335][ T8410] lapb5: entered allmulticast mode [ 105.848829][ T8410] lapb6: entered allmulticast mode [ 105.850677][ T8410] veth1_vlan: entered allmulticast mode [ 105.853677][ T8410] lapb7: entered allmulticast mode [ 105.856146][ T8410] @: entered allmulticast mode [ 105.858693][ T8410] lapb8: entered allmulticast mode [ 105.874550][ T42] audit: type=1400 audit(1787097891.216:4057): avc: denied { write } for pid=8421 comm="syz.1.685" name="current_tracer" dev="tracefs" ino=6190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 105.883565][ T42] audit: type=1400 audit(1787097891.216:4058): avc: denied { open } for pid=8421 comm="syz.1.685" path="/196/tracefs/current_tracer" dev="tracefs" ino=6190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 105.935820][ T8424] lo speed is unknown, defaulting to 1000 [ 105.985072][ T1848] usb usb40-port1: unable to enumerate USB device [ 106.001639][ T8370] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 106.041391][ T8370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.055879][ T8370] bond3: (slave geneve3): making interface the new active one [ 106.063334][ T8370] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 106.080127][ T1848] usb 5-1: USB disconnect, device number 13 [ 106.122627][ T1848] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 106.129881][ T1848] opticon 5-1:1.0: device disconnected [ 106.510893][ T50] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.643662][ T42] audit: type=1400 audit(1787097891.986:4059): avc: denied { read } for pid=8439 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.660899][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 106.664940][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 106.668023][ T50] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 106.675598][ T50] usb 6-1: string descriptor 0 read error: -22 [ 106.678294][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.687727][ T50] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 106.691932][ T50] dw2102: su3000_power_ctrl: 1, initialized 0 [ 106.696972][ T50] dvb-usb: bulk message failed: -22 (2/0) [ 106.720241][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.724583][ T50] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 106.727911][ T50] usb 6-1: media controller created [ 106.730013][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 106.734296][ T50] dw2102: i2c transfer failed. [ 106.737088][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 106.739356][ T50] dw2102: i2c transfer failed. [ 106.741330][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 106.743516][ T50] dw2102: i2c transfer failed. [ 106.748111][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 106.751106][ T50] dw2102: i2c transfer failed. [ 106.752641][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 106.754422][ T50] dw2102: i2c transfer failed. [ 106.755889][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 106.757627][ T50] dw2102: i2c transfer failed. [ 106.759094][ T50] dvb-usb: MAC address: 02:02:02:02:02:02 [ 106.766224][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.779393][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 106.781522][ T50] dw2102: command 0x0e transfer failed. [ 106.783379][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 106.785167][ T50] dw2102: command 0x0e transfer failed. [ 106.903863][ T8442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 107.001790][ T8448] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 107.090934][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 107.093399][ T50] dw2102: command 0x0e transfer failed. [ 107.095955][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 107.098428][ T50] dw2102: command 0x0e transfer failed. [ 107.100904][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 107.103356][ T50] dw2102: command 0x51 transfer failed. [ 107.107205][ T8438] dvb-usb: bulk message failed: -22 (31/0) [ 107.113499][ T8438] dw2102: i2c transfer failed. [ 107.132071][ T50] DVB: Unable to find symbol ds3000_attach() [ 107.134140][ T50] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 107.195333][ T50] rc_core: IR keymap rc-su3000 not found [ 107.197775][ T50] Registered IR keymap rc-empty [ 107.204040][ T50] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 107.216144][ T50] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input16 [ 107.221578][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 107.223995][ T50] dw2102: su3000_power_ctrl: 0, initialized 1 [ 107.225967][ T50] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 107.231225][ T50] usb 6-1: USB disconnect, device number 9 [ 107.330316][ T50] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 107.767322][ T8463] random: crng reseeded on system resumption [ 107.894575][ T8470] mmap: syz.1.697 (8470) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.935911][ T8474] autofs4:pid:8474:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 107.940117][ T8474] autofs4:pid:8474:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 108.350033][ T8487] /dev/sg0: Can't lookup blockdev [ 108.386317][ T8489] CIFS: VFS: bad security option: krb5ibus/pci/drivers/ehci-pci/unbind [ 108.412191][ T8489] SELinux: ebitmap: truncated map [ 108.414877][ T8489] SELinux: invalid class [ 108.423154][ T8489] SELinux: failed to load policy [ 108.844902][ T8496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.962057][ T8508] netlink: 'syz.2.709': attribute type 3 has an invalid length. [ 108.965356][ T8508] netlink: 'syz.2.709': attribute type 6 has an invalid length. [ 108.967884][ T8508] __nla_validate_parse: 6 callbacks suppressed [ 108.967894][ T8508] netlink: 52 bytes leftover after parsing attributes in process `syz.2.709'. [ 109.140539][ T8523] bond3: option xmit_hash_policy: invalid value (6) [ 109.147326][ T8523] bond3 (unregistering): Released all slaves [ 109.163758][ T8527] MTRR 1 not used [ 109.167436][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 109.172233][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 109.186427][ T8529] netlink: 'syz.0.716': attribute type 16 has an invalid length. [ 109.189330][ T8529] netlink: 'syz.0.716': attribute type 17 has an invalid length. [ 109.214827][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.218513][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.270239][ T8529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.273672][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.278652][ T8529] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 109.286314][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.288659][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.292027][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.294295][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.365113][ T8543] syzkaller0: entered promiscuous mode [ 109.366873][ T8543] syzkaller0: entered allmulticast mode [ 109.467888][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.470664][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.473471][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.476257][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.478869][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.482029][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.484789][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.487334][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.489841][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.496783][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.501787][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.504533][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.507543][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.512556][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.515322][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.517959][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.520506][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.523874][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.528065][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.531206][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.533995][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.536633][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.539262][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.542671][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.548143][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.553577][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.557130][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.561230][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.565801][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.565906][ T8553] CIFS mount error: No usable UNC path provided in device string! [ 109.565906][ T8553] [ 109.572185][ T8553] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.580267][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.583717][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.590279][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.595007][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.602769][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.609167][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.613063][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.617533][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.621196][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.628977][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.635743][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.640645][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.649588][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.654026][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.657584][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.662681][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.666338][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.669889][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.674840][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.678697][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.682450][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.682649][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 109.682660][ T42] audit: type=1400 audit(1787097895.026:4063): avc: denied { write } for pid=8561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.696761][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.701557][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.704554][ T8558] Illegal XDP return value 4294967274 on prog (id 81) dev syz_tun, expect packet loss! [ 109.711320][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.714901][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.722420][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.726141][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.729793][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.731794][ T42] audit: type=1400 audit(1787097895.076:4064): avc: denied { write } for pid=8566 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.745443][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.749514][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.757551][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.766418][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.770513][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.774847][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.778652][ T8549] overlay: filesystem on ./file0 not supported as upperdir [ 109.800458][ T5439] veth0_vlan: left promiscuous mode [ 109.807855][ T50] veth0_vlan: entered promiscuous mode [ 109.903819][ T42] audit: type=1400 audit(1787097895.246:4065): avc: denied { write } for pid=8578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.920976][ T5835] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 109.961513][ T42] audit: type=1400 audit(1787097895.306:4066): avc: denied { write } for pid=8587 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.080860][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 110.083167][ T5835] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 110.087903][ T5835] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 110.090501][ T5835] usb 6-1: config 0 has no interface number 0 [ 110.092538][ T5835] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.096067][ T5835] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 110.099758][ T5835] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 216 [ 110.102990][ T5835] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.108760][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.111364][ T5835] usb 6-1: Product: syz [ 110.112989][ T5835] usb 6-1: Manufacturer: syz [ 110.114786][ T5835] usb 6-1: SerialNumber: syz [ 110.119693][ T5835] usb 6-1: config 0 descriptor?? [ 110.122016][ T8562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.126916][ T5835] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input17 [ 110.134259][ T5122] usb 6-1: BOGUS urb xfer, pipe 1 != type 3 [ 110.341113][ T5878] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 110.473315][ T50] usb 6-1: USB disconnect, device number 10 [ 110.473368][ C3] bcm5974 6-1:0.119: trackpad urb failed: -19 [ 110.490995][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 110.494044][ T5878] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.498919][ T5878] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.503110][ T5878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.507191][ T5878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.511389][ T5878] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.516611][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.656511][ T8621] sctp: [Deprecated]: syz.3.740 (pid 8621) Use of int in max_burst socket option. [ 110.656511][ T8621] Use struct sctp_assoc_value instead [ 110.718325][ T8620] netlink: 144 bytes leftover after parsing attributes in process `syz.0.739'. [ 110.739466][ T8593] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 110.746259][ T5878] usb 7-1: usb_control_msg returned -32 [ 110.748686][ T5878] usbtmc 7-1:16.0: can't read capabilities [ 111.051317][ T42] audit: type=1400 audit(1787097896.396:4067): avc: denied { write } for pid=8638 comm="syz.0.748" name="functions" dev="configfs" ino=8002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.051540][ T8639] Mass Storage Function, version: 2009/09/11 [ 111.062191][ T8639] LUN: removable file: (no medium) [ 111.071318][ T42] audit: type=1800 audit(1787097896.406:4068): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.748" name="file" dev="configfs" ino=25691 res=0 errno=0 [ 111.072158][ T8639] [ 111.080863][ T8639] ====================================================== [ 111.080875][ T8639] WARNING: possible circular locking dependency detected [ 111.080888][ T8639] syzkaller #0 Tainted: G L [ 111.080899][ T8639] ------------------------------------------------------ [ 111.080905][ T8639] syz.0.748/8639 is trying to acquire lock: [ 111.080916][ T8639] ffff88803c248460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 111.081033][ T8639] [ 111.081033][ T8639] but task is already holding lock: [ 111.081040][ T8639] ffff88805a1bc920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 111.081139][ T8639] [ 111.081139][ T8639] which lock already depends on the new lock. [ 111.081139][ T8639] [ 111.081146][ T8639] [ 111.081146][ T8639] the existing dependency chain (in reverse order) is: [ 111.081153][ T8639] [ 111.081153][ T8639] -> #4 (&common->filesem){++++}-{4:4}: [ 111.081181][ T8639] lock_acquire+0x1b9/0x370 [ 111.081205][ T8639] down_read+0x99/0x4c0 [ 111.081285][ T8639] fsg_show_file+0x20/0x180 [ 111.081312][ T8639] configfs_read_iter+0x426/0x6f0 [ 111.081344][ T8639] __kernel_read+0x397/0xad0 [ 111.081372][ T8639] integrity_kernel_read+0x7e/0xb0 [ 111.081392][ T8639] ima_calc_file_hash_tfm+0x25e/0x350 [ 111.081411][ T8639] ima_calc_file_hash+0x1e3/0x380 [ 111.081429][ T8639] ima_collect_measurement+0x94f/0xb30 [ 111.081448][ T8639] process_measurement+0xdfe/0x2350 [ 111.081464][ T8639] ima_file_check+0xc3/0x110 [ 111.081481][ T8639] security_file_post_open+0xc4/0x210 [ 111.081505][ T8639] path_openat+0x5cd/0x2440 [ 111.081522][ T8639] do_file_open+0x20e/0x430 [ 111.081541][ T8639] do_sys_openat2+0x10f/0x1e0 [ 111.081561][ T8639] __x64_sys_openat+0x12d/0x210 [ 111.081578][ T8639] do_syscall_64+0x115/0x870 [ 111.081613][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.081638][ T8639] [ 111.081638][ T8639] -> #3 (&p->frag_sem){++++}-{4:4}: [ 111.081666][ T8639] lock_acquire+0x1b9/0x370 [ 111.157319][ T8639] down_read+0x99/0x4c0 [ 111.159296][ T8639] configfs_write_iter+0x218/0x4e0 [ 111.161639][ T8639] vfs_write+0x6ac/0x1050 [ 111.163683][ T8639] ksys_write+0x12a/0x250 [ 111.165745][ T8639] do_syscall_64+0x115/0x870 [ 111.167862][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.170567][ T8639] [ 111.170567][ T8639] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 111.173671][ T8639] lock_acquire+0x1b9/0x370 [ 111.175755][ T8639] __mutex_lock+0x1a4/0x1bd0 [ 111.177883][ T8639] configfs_read_iter+0x79/0x6f0 [ 111.180124][ T8639] __kernel_read+0x397/0xad0 [ 111.182249][ T8639] integrity_kernel_read+0x7e/0xb0 [ 111.184582][ T8639] ima_calc_file_hash_tfm+0x25e/0x350 [ 111.186960][ T8639] ima_calc_file_hash+0x1e3/0x380 [ 111.189119][ T8639] ima_collect_measurement+0x94f/0xb30 [ 111.191619][ T8639] process_measurement+0xdfe/0x2350 [ 111.194024][ T8639] ima_file_check+0xc3/0x110 [ 111.196170][ T8639] security_file_post_open+0xc4/0x210 [ 111.198612][ T8639] path_openat+0x5cd/0x2440 [ 111.200699][ T8639] do_file_open+0x20e/0x430 [ 111.202749][ T8639] do_sys_openat2+0x10f/0x1e0 [ 111.204918][ T8639] __x64_sys_openat+0x12d/0x210 [ 111.207189][ T8639] do_syscall_64+0x115/0x870 [ 111.209179][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.210979][ T8645] 9p: Could not find request transport: virti`}bridge0 [ 111.211181][ T8639] [ 111.211181][ T8639] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 111.216687][ T8639] lock_acquire+0x1b9/0x370 [ 111.218516][ T8639] __mutex_lock+0x1a4/0x1bd0 [ 111.220503][ T8639] ima_path_truncate+0x10d/0x1c0 [ 111.222705][ T8639] security_path_truncate+0x17c/0x280 [ 111.225136][ T8639] vfs_truncate+0x4ab/0x720 [ 111.227117][ T8639] ksys_truncate+0xee/0x190 [ 111.229198][ T8639] __x64_sys_truncate+0x54/0x80 [ 111.231417][ T8639] do_syscall_64+0x115/0x870 [ 111.233564][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.236198][ T8639] [ 111.236198][ T8639] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 111.239282][ T8639] check_prev_add+0xeb/0xe60 [ 111.241403][ T8639] __lock_acquire+0x136c/0x1a40 [ 111.243671][ T8639] lock_acquire+0x1b9/0x370 [ 111.245777][ T8639] mnt_want_write+0x6f/0x410 [ 111.247951][ T8639] lookup_open+0x150/0x1990 [ 111.250081][ T8639] path_openat+0xa2c/0x2440 [ 111.252210][ T8639] do_file_open+0x20e/0x430 [ 111.254347][ T8639] file_open_name+0x1c3/0x3e0 [ 111.256395][ T8639] filp_open+0x2e/0x50 [ 111.258354][ T8639] fsg_lun_open+0x6b/0x7b0 [ 111.260423][ T8639] fsg_store_file+0x1e7/0x450 [ 111.262587][ T8639] configfs_write_iter+0x302/0x4e0 [ 111.264928][ T8639] vfs_write+0x6ac/0x1050 [ 111.267011][ T8639] ksys_write+0x12a/0x250 [ 111.269095][ T8639] do_syscall_64+0x115/0x870 [ 111.271267][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.273938][ T8639] [ 111.273938][ T8639] other info that might help us debug this: [ 111.273938][ T8639] [ 111.278150][ T8639] Chain exists of: [ 111.278150][ T8639] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 111.278150][ T8639] [ 111.278197][ T8639] Possible unsafe locking scenario: [ 111.278197][ T8639] [ 111.278203][ T8639] CPU0 CPU1 [ 111.278208][ T8639] ---- ---- [ 111.278214][ T8639] lock(&common->filesem); [ 111.278226][ T8639] lock(&p->frag_sem); [ 111.278240][ T8639] lock(&common->filesem); [ 111.278254][ T8639] rlock(sb_writers#6); [ 111.278271][ T8639] [ 111.278271][ T8639] *** DEADLOCK *** [ 111.278271][ T8639] [ 111.278277][ T8639] 5 locks held by syz.0.748/8639: [ 111.278288][ T8639] #0: ffff88802cc67430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 111.278339][ T8639] #1: ffff88802409a460 (sb_writers#12){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 111.278388][ T8639] #2: ffff8880296df280 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 111.278439][ T8639] #3: ffff88803e3a5670 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 111.278489][ T8639] #4: ffff88805a1bc920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 111.278542][ T8639] [ 111.278542][ T8639] stack backtrace: [ 111.278569][ T8639] CPU: 0 UID: 0 PID: 8639 Comm: syz.0.748 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.278594][ T8639] Tainted: [L]=SOFTLOCKUP [ 111.278601][ T8639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.278612][ T8639] Call Trace: [ 111.278632][ T8639] [ 111.278641][ T8639] dump_stack_lvl+0x100/0x190 [ 111.278664][ T8639] print_circular_bug.cold+0x178/0x1c7 [ 111.278694][ T8639] check_noncircular+0x146/0x160 [ 111.278719][ T8639] check_prev_add+0xeb/0xe60 [ 111.278743][ T8639] __lock_acquire+0x136c/0x1a40 [ 111.278768][ T8639] lock_acquire+0x1b9/0x370 [ 111.278789][ T8639] ? lookup_open+0x150/0x1990 [ 111.278816][ T8639] ? __pfx___might_resched+0x10/0x10 [ 111.278838][ T8639] ? find_held_lock+0x2b/0x80 [ 111.278857][ T8639] mnt_want_write+0x6f/0x410 [ 111.278875][ T8639] ? lookup_open+0x150/0x1990 [ 111.278902][ T8639] lookup_open+0x150/0x1990 [ 111.278932][ T8639] path_openat+0xa2c/0x2440 [ 111.278956][ T8639] ? __pfx_path_openat+0x10/0x10 [ 111.278977][ T8639] ? kasan_save_stack+0x30/0x50 [ 111.278998][ T8639] ? kasan_save_track+0x14/0x30 [ 111.279019][ T8639] ? __kasan_slab_alloc+0x89/0x90 [ 111.279041][ T8639] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 111.279062][ T8639] ? do_getname_kernel+0x5d/0x250 [ 111.279085][ T8639] ? filp_open+0x1d/0x50 [ 111.279105][ T8639] ? fsg_lun_open+0x6b/0x7b0 [ 111.279128][ T8639] ? fsg_store_file+0x1e7/0x450 [ 111.279155][ T8639] do_file_open+0x20e/0x430 [ 111.279183][ T8639] ? __pfx_do_file_open+0x10/0x10 [ 111.279213][ T8639] ? rcu_is_watching+0x12/0xc0 [ 111.279242][ T8639] file_open_name+0x1c3/0x3e0 [ 111.279265][ T8639] ? __pfx_file_open_name+0x10/0x10 [ 111.279288][ T8639] ? do_getname_kernel+0x5d/0x250 [ 111.279312][ T8639] ? __asan_memcpy+0x3c/0x60 [ 111.279330][ T8639] ? do_getname_kernel+0x1be/0x250 [ 111.279354][ T8639] filp_open+0x2e/0x50 [ 111.279377][ T8639] fsg_lun_open+0x6b/0x7b0 [ 111.279403][ T8639] ? __pfx_down_read+0x10/0x10 [ 111.279423][ T8639] fsg_store_file+0x1e7/0x450 [ 111.279450][ T8639] configfs_write_iter+0x302/0x4e0 [ 111.279478][ T8639] vfs_write+0x6ac/0x1050 [ 111.279495][ T8639] ? __pfx_configfs_write_iter+0x10/0x10 [ 111.279522][ T8639] ? __pfx_vfs_write+0x10/0x10 [ 111.279545][ T8639] ksys_write+0x12a/0x250 [ 111.279562][ T8639] ? __pfx_ksys_write+0x10/0x10 [ 111.279583][ T8639] do_syscall_64+0x115/0x870 [ 111.279609][ T8639] ? clear_bhb_loop+0x70/0xc0 [ 111.279628][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.279648][ T8639] RIP: 0033:0x7f116939e0d9 [ 111.279674][ T8639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.279690][ T8639] RSP: 002b:00007f116a1f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.279710][ T8639] RAX: ffffffffffffffda RBX: 00007f1169625fa0 RCX: 00007f116939e0d9 [ 111.279723][ T8639] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000003 [ 111.279734][ T8639] RBP: 00007f1169435024 R08: 0000000000000000 R09: 0000000000000000 [ 111.279746][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.279757][ T8639] R13: 00007f1169626038 R14: 00007f1169625fa0 R15: 00007ffd206228e8 [ 111.279774][ T8639] [ 111.284363][ T8639] mass_storage.0/lun.0: unable to open backing file: f b [ 111.290247][ T42] audit: type=1400 audit(1787097896.626:4069): avc: denied { write } for pid=8638 comm="syz.0.748" name="c.1" dev="configfs" ino=14207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.353924][ T8650] Mass Storage Function, version: 2009/09/11 [ 111.354464][ T42] audit: type=1400 audit(1787097896.626:4070): avc: denied { create } for pid=8638 comm="syz.0.748" name="mass_storage.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 111.356537][ T8650] LUN: removable file: (no medium) [ 111.358123][ T42] audit: type=1400 audit(1787097896.626:4071): avc: denied { write } for pid=8638 comm="syz.0.748" name="c.1" dev="configfs" ino=14207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.474618][ T42] audit: type=1800 audit(1787097896.626:4072): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.748" name="UDC" dev="configfs" ino=25694 res=0 errno=0 [ 113.095521][ T50] usb 7-1: USB disconnect, device number 10 [ 120.777034][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 120.777048][ T42] audit: type=1400 audit(1787097906.116:4075): avc: denied { write } for pid=8656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.813509][ T42] audit: type=1400 audit(1787097906.156:4076): avc: denied { write } for pid=8659 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1