last executing test programs: 7.776305255s ago: executing program 2 (id=2047): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="71059400020082090a0282a85cbe0eb28683c57a95a0b206affd8c627f605d1cdffe06854aae4c140b6bc6e6a4590499620a6c4a241f30b1f040b4507b5451d07d6fc73886f7115e55487353daebfa180bfd2ec800b34ab37e1d9608377f57c17e4000d45ac2d18b523e5ef2ed4fee5efb5da6941a718c5dd9784d0fc9559a8f71cd9e321aa6edba807d551e8813d0cb1cab11391fa813653aed19b26d6d4beb1ab0f492cc7b84f2d4b0"], 0x97) 6.912357515s ago: executing program 2 (id=2050): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000680)={0x2, 0x100, 0x8, 0xfffff000, 0x8, 0x9}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r7], 0x0) syz_usb_connect$midi(0x3, 0x31, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x20, 0xf7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x51, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x9, 0x5, 0x9, {0x4}}}]}}}}}]}}, 0x0) 6.86483039s ago: executing program 1 (id=2051): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 5.831772591s ago: executing program 1 (id=2053): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1) 5.41399112s ago: executing program 4 (id=2057): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x202041, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, 0x0, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000009000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100000009000100da797a30000000000900030073797a32000000001c000000060a01030000"], 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000000)={0x20000, 0xd9f21292f74e6ca8, 0x8}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 5.345616123s ago: executing program 3 (id=2058): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80ff8000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000100000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) 5.345421904s ago: executing program 3 (id=2059): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x5f23, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x95, 0x0, 0x0, 0x9, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x71]}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.304142251s ago: executing program 3 (id=2060): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="71059400020082090a0282a85cbe0eb28683c57a95a0b206affd8c627f605d1cdffe06854aae4c140b6bc6e6a4590499620a6c4a241f30b1f040b4507b5451d07d6fc73886f7115e55487353daebfa180bfd2ec800b34ab37e1d9608377f57c17e4000d45ac2d18b523e5ef2ed4fee5efb5da6941a718c5dd9784d0fc9559a8f71cd9e321aa6edba807d551e8813d0cb1cab11391fa813653aed19b26d6d4beb1ab0f492cc7b84f2d4b0"], 0x97) 5.227172092s ago: executing program 3 (id=2061): r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysinfo(&(0x7f0000000080)=""/98) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x47a0c0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x8, 0x2, 0xb}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) 3.986182162s ago: executing program 3 (id=2062): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000180)={0x7fff, 0x200, 0x7, 0x3, 0x5, 0x8, 0x8}, 0xc) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x0, 0x2, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x76cc5ae9}, @padn, @padn]}]}}}}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001780)={0x1, 0x0, [{0x4ab4b231533d69dd, 0xc4, &(0x7f00000014c0)=""/196}]}) r5 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008479f72c842c4631962000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) 3.906669095s ago: executing program 0 (id=2063): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x2a0, 0x98}, {0x28}}}}, 0x488) 3.539880075s ago: executing program 2 (id=2064): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x1d) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x240cd041}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'geneve0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r10, 0xaeb, 0x1) getdents64(r10, 0x0, 0x4f) socket$igmp(0x2, 0x3, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 3.481132381s ago: executing program 1 (id=2065): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) listen(r0, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe80000000000000000000fffffff5aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 2.912628721s ago: executing program 3 (id=2066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000001c0), 0xffffffffffffff0a) r2 = socket(0x2, 0x80805, 0x0) close(r2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x5}, 0x10, &(0x7f0000000040)=[{&(0x7f00000002c0)="ea", 0x1}], 0x1}}], 0x2, 0x48000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3, 0x10}, 0xc) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3aa39dbe", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="1e000f006512080211000001080211000000ffffffffffff3c04007baf110000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x3c, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, &(0x7f00000000c0)=0x18) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 2.862217705s ago: executing program 0 (id=2067): socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0) creat(0x0, 0xa5) creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x4, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x7, 0x5631, 0x7, 0x5, 0xfffffffffffffff9, 0x5, 0x100000001, 0x8, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x3, 0x766, 0xa, 0xc0000003, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0xfff, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x7, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x1000000000007, 0x7, 0x2, 0x6, 0x81, 0xa, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x8000000000007f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0x831, 0x1, 0x9e, 0x5, 0x3, 0x0, 0x3, 0x5, 0xc, 0x200000000006, 0x6281, 0x10, 0x7f, 0x9, 0x3, 0x3, 0x7]}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33fdff00", [0x3, 0x6]}}) open_tree(0xffffffffffffffff, 0x0, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendfile(r4, r3, 0x0, 0x10000200000200) socket$inet(0x2, 0x1, 0x100) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.801959765s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x20000000}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb0000000000000000020001000000070000001110000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100"], 0x88}}, 0x0) 2.251030653s ago: executing program 4 (id=2069): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) close_range(r0, r0, 0x2) 1.506395688s ago: executing program 4 (id=2070): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x2000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c000155fed4e9e67b30f4000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0xb0f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f0000000200)={'dummy0\x00', @random}) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) (rerun: 32) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d01, &(0x7f0000000100)) (async) syz_usb_connect$uac2(0x3, 0xa3, &(0x7f0000000680)=ANY=[@ANYBLOB="1201100300000040392ad23f400001020301090291000301080081080b010201062009090400000001012000092401b0569fa09cb1e911d0f02101b1870600002100090c24030503030106010400040c240304ff01ff02ff8100b209040100000102200009040101010102201109050109fec501070e0825018303400500090402000001022000090402010101022000102401020a0301000000020700000003090582092000085b80082501000c080000"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r7 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) io_uring_setup(0x7ea4, &(0x7f0000000080)={0x0, 0x0, 0x20000}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000440)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdbA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="71059400020082090a0282a85cbe0eb28683c57a95a0b206affd8c627f605d1cdffe06854aae4c140b6bc6e6a4590499620a6c4a241f30b1f040b4507b5451d07d6fc73886f7115e55487353daebfa180bfd2ec800b34ab37e1d9608377f57c17e4000d45ac2d18b523e5ef2ed4fee5efb5da6941a718c5dd9784d0fc9559a8f71cd9e321aa6edba807d551e8813d0cb1cab11391fa813653aed19b26d6d4beb1ab0f492cc7b84f2d4b0"], 0x97) 1.425515485s ago: executing program 2 (id=2072): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a00000000000080ff00000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) 1.298202823s ago: executing program 0 (id=2073): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.293351859s ago: executing program 2 (id=2074): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fb0100000000000002ffffff7f000000280000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387d9a57034b6eb3d5a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/102, 0x66}], 0x4, &(0x7f0000000400)=""/143, 0x8f}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xd) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x30000011}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1a) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 1.234138251s ago: executing program 1 (id=2075): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) syz_emit_ethernet(0x3e, &(0x7f00000013c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e00c1f11deeb016db6201ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYBLOB="0559801a543a573805be497f9d27fde94b295b5314136d22dddba703bbb36615ae88c144f0d5103bc1beed23a10ecd65ed4a31c9eb370e2995ab03258ac6da9002db4be0e591767256f9326ecd4b3b3bab44a4a6db56a91dc1bb4c4076319d8b51fbae7c36bad0149a", @ANYRES8=r0, @ANYRES64, @ANYRES32=r3], 0xffc9) 1.089738824s ago: executing program 0 (id=2076): setreuid(0xffffffffffffffff, 0xee01) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000200)={r1, &(0x7f00000000c0)='\x00', 0x101000, &(0x7f0000000100)={@align=0x5, {0x8, 0xf, 0x0, 0xffffffffffffffca}}, 0x9, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x8001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x2b, 0x5, 0x8, 0x8001, 0x2, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000b, 0x30, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000002400)) r7 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r7, 0x0, 0x10020) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r8, 0x80045643, 0x6818a27e0f9149b7) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x4001af84, &(0x7f0000000000)) 392.995102ms ago: executing program 4 (id=2077): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000009000000000000000200000d020000000600000002ef00000100000002000000070000000000000403000000070000000000000700000000005f302e5f30615f"], 0x0, 0x55, 0x0, 0x1}, 0x28) 364.97974ms ago: executing program 4 (id=2078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) get_robust_list(r1, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f0000000080)}, 0x0, &(0x7f0000000380)}, &(0x7f0000000480)=0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) (async) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xbbf6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$sock(r4, &(0x7f0000000900)={&(0x7f00000006c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000740)="62a0c346f0fb9ab886c7b68f2fc877c53de56ba5713ab735a1d9a02e0051fc735a7ff20cc6d51af6f2da89c3f5207950e801379e7113fe74e0f278655a9c452f8873e0ce2525beb1714dbfca1639e7e7cab1f8966a505c90814f4540f2a47eb737270c423757bc15efb7bc0045863584e737d1f156ab6e915b9a6143afeb8e3a896c6fc3b385c4f37b90e5ab8bb58aa2d7fe93b0c1ccb2f4907a670a185c718ecac0395dc0bc2bbc2f3918b0a1f6ebf03295dc4de9589e0fe3f6f400ba7f27f34777f7021af4c072231826c9129b3a5b1bcff39e74835866", 0xd8}, {&(0x7f0000000640)="5f3e7c7a1929c31e9e46ee91bd06", 0xe}], 0x3, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x5cb}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x48}, 0x40041) (async) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000038c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x64}}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000540), 0x0, &(0x7f0000000940)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private=0xa010102}}}], 0x98}, 0x20000000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 216.378699ms ago: executing program 1 (id=2079): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000001010000ff7f00004c000000e0000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000cf7d90ac0e88369df6842f2e2fc71c9d6ab688ba7070f58b866aa82913c7927744b400000000008000"/62], 0x50) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r1, 0x40204706, &(0x7f0000000040)={0x5, 0x0, 0x6, 0x3f, 0x1a, "3eccd25569e20900"}) 101.732521ms ago: executing program 2 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2b1c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000100000001"], 0xffe) 61.755141ms ago: executing program 0 (id=2081): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4007) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/83, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000d40)=""/14, 0xe}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x2, &(0x7f0000004880)=""/4096, 0x1000}, 0xd06}, {{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000006140)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/185, 0xb9}, 0x200}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000a80)=""/231, 0xe7}, 0x535c}, {{&(0x7f0000000bc0)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @bcast, @rose, @rose]}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)}, 0xa}], 0x5, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=2082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0e00000004000000f1040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r3, 0xfffffffffffffea3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x9, 0x3, 0xbe, 0x0, 0x3, 0x5, 0x1, 0xc2, 0x3, 0xa, 0x4, 0x9, 0x0, 0x2, 0x6, 0x2, 0xf, 0x6, 0x4, '\x00', 0x3, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000010c0)={0x5740, 0x5, 0x64224bbb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000001100)={r7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000140)={'\x00', 0x3ff, 0x0, 0xffff}) sched_setscheduler(r8, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x8, 0x7, 0x9, 0x810, r3, 0x7fff, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r11, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r12], 0x84}}, 0x20008040) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) kernel console output (not intermixed with test programs): or's value: 9 [ 641.117107][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.232727][ T5914] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 641.244960][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 641.257125][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.229989][ T29] audit: type=1400 audit(642.198:794): avc: denied { getopt } for pid=10920 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 642.232117][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.261931][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.262055][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.406930][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.416158][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.427230][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.434356][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.449034][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.478868][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.611004][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.622604][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.641199][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 643.136501][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 643.150048][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 643.160267][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 643.168979][ T9] usb 4-1: Product: syz [ 643.174665][ T9] usb 4-1: Manufacturer: syz [ 643.180759][ T9] usb 4-1: SerialNumber: syz [ 643.197743][ T9] usb 4-1: config 0 descriptor?? [ 643.210907][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 643.400644][ T9] usb 2-1: USB disconnect, device number 18 [ 643.427224][ T792] usb 4-1: USB disconnect, device number 25 [ 643.451405][ T792] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 643.475327][T10952] set match dimension is over the limit! [ 643.657037][T10961] overlayfs: failed to resolve './file1': -2 [ 644.322313][T10981] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1317'. [ 644.390670][T10985] SET target dimension over the limit! [ 644.426779][ T792] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 644.602469][ T792] usb 4-1: device descriptor read/64, error -71 [ 644.849944][T11003] binder: 10995:11003 ioctl 4008586f 200000000080 returned -22 [ 645.214697][ T792] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 645.402635][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 645.482452][ T792] usb 4-1: device descriptor read/64, error -71 [ 645.588801][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 645.607739][ T792] usb usb4-port1: attempt power cycle [ 645.620378][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.636229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 645.652446][ T9] usb 2-1: SerialNumber: syz [ 645.962232][ T792] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 646.271709][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 646.312603][ T792] usb 4-1: device descriptor read/8, error -71 [ 646.320394][ T9] usb 2-1: USB disconnect, device number 19 [ 646.458776][T11022] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 646.482878][T11022] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.484547][T11022] bond6: (slave geneve3): making interface the new active one [ 647.498481][T11022] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 647.616491][T11029] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 647.631450][T11031] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 647.696381][T11031] 8021q: adding VLAN 0 to HW filter on device bond8 [ 647.798888][T11037] bond8: (slave geneve5): making interface the new active one [ 647.808211][T11037] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 648.103273][ T29] audit: type=1400 audit(648.028:795): avc: denied { write } for pid=11038 comm="syz.0.1337" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 648.215784][ T29] audit: type=1400 audit(648.058:796): avc: denied { ioctl } for pid=11038 comm="syz.0.1337" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 648.218297][T11046] netlink: 'syz.2.1338': attribute type 1 has an invalid length. [ 648.270496][T11046] bond9: entered promiscuous mode [ 648.276046][T11046] 8021q: adding VLAN 0 to HW filter on device bond9 [ 648.315309][T11046] vlan7: entered allmulticast mode [ 648.322958][T11046] bond9: entered allmulticast mode [ 648.373154][T11046] bond9: (slave bridge4): making interface the new active one [ 648.387094][T11046] bridge4: entered promiscuous mode [ 648.424295][T11046] bridge4: entered allmulticast mode [ 648.434619][T11046] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 648.607149][T11064] fuse: Unknown parameter 'f*eru[d' [ 648.780638][T11065] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 649.749737][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 649.918494][T11069] bond7: (slave bridge7): Enslaving as a backup interface with an up link [ 649.989654][T11065] bond7: (slave bridge8): Enslaving as a backup interface with a down link [ 650.069083][T11065] bond7: (slave bridge9): Enslaving as a backup interface with a down link [ 650.133282][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 650.151380][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.164618][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 650.173950][ T24] usb 3-1: SerialNumber: syz [ 650.891832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 651.191834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 651.428364][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 651.461693][ T24] usb 3-1: USB disconnect, device number 26 [ 652.589236][T11095] x_tables: ip_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 652.597700][T11095] x_tables: ip_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 653.140157][T11106] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 653.315219][T11108] bond7: (slave bridge9): Enslaving as a backup interface with an up link [ 653.378009][T11106] bond7: (slave bridge10): Enslaving as a backup interface with a down link [ 653.425047][T11106] bond7: (slave bridge11): Enslaving as a backup interface with a down link [ 653.696344][ T29] audit: type=1400 audit(653.597:797): avc: denied { setopt } for pid=11115 comm="syz.2.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 654.173068][T11103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.248952][ T792] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 654.380097][T11130] netlink: 'syz.0.1365': attribute type 1 has an invalid length. [ 654.467588][T11130] bond8: entered promiscuous mode [ 654.475797][T11130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.827658][ T792] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 654.836097][ T792] usb 3-1: config 0 has no interface number 0 [ 654.846685][ T792] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 654.865650][ T792] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 654.876057][ T792] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 654.888831][T11130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.889374][ T792] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 654.896586][T11130] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 654.917193][T11130] bond8: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 654.939069][T11130] bond8: (slave wireguard1): making interface the new active one [ 654.947333][T11130] wireguard1: entered promiscuous mode [ 654.955141][T11130] bond8: (slave wireguard1): Enslaving as an active interface with an up link [ 655.059988][ T792] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 655.074763][ T792] usb 3-1: Product: syz [ 655.082323][ T792] usb 3-1: Manufacturer: syz [ 655.092400][ T792] usb 3-1: SerialNumber: syz [ 655.111450][ T792] usb 3-1: config 0 descriptor?? [ 655.121633][ T792] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 655.140277][ T792] xpad 3-1:0.237: probe with driver xpad failed with error -90 [ 655.215810][ T29] audit: type=1400 audit(655.019:798): avc: denied { connect } for pid=11143 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 655.386651][ T24] usb 3-1: USB disconnect, device number 27 [ 655.450350][T11161] netlink: 'syz.4.1373': attribute type 10 has an invalid length. [ 655.479917][T11161] bridge0: port 3(dummy0) entered disabled state [ 655.486504][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.490346][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 655.517761][T11161] bridge0: port 3(dummy0) entered blocking state [ 655.524268][T11161] bridge0: port 3(dummy0) entered forwarding state [ 655.531244][T11161] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.538419][T11161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.563779][T11161] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 655.577748][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 655.587133][T11167] dummy0: left allmulticast mode [ 655.593370][T11167] dummy0: left promiscuous mode [ 655.600163][T11167] bridge0: port 3(dummy0) entered disabled state [ 655.622432][T11167] bridge_slave_1: left allmulticast mode [ 655.629713][T11167] bridge_slave_1: left promiscuous mode [ 655.636895][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 655.646928][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.657490][T11167] bridge_slave_0: left allmulticast mode [ 655.663487][T11167] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.683213][T11167] bond0: (slave bridge0): Releasing backup interface [ 655.725005][ T29] audit: type=1400 audit(655.496:799): avc: denied { setopt } for pid=11172 comm="syz.1.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 655.853272][ T792] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 656.097990][ T792] usb 4-1: device descriptor read/64, error -71 [ 656.344716][T11190] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 656.599995][T11190] bond8: (slave bridge10): Enslaving as a backup interface with an up link [ 656.643401][T11190] bond8: (slave bridge11): Enslaving as a backup interface with a down link [ 656.815142][T11193] bond8: (slave bridge12): Enslaving as a backup interface with a down link [ 656.862392][ T792] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 656.908178][T11194] SET target dimension over the limit! [ 657.038006][ T792] usb 4-1: device descriptor read/64, error -71 [ 657.128514][T11203] 9pnet_fd: Insufficient options for proto=fd [ 657.351859][ T792] usb usb4-port1: attempt power cycle [ 657.718726][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 657.843146][ T792] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 658.107800][ T792] usb 4-1: device descriptor read/8, error -71 [ 658.222120][T11223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1393'. [ 658.694398][ T792] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 659.590547][ T792] usb 4-1: device descriptor read/8, error -71 [ 659.625223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 659.744511][T11245] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 659.751051][T11245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 659.758999][T11245] vhci_hcd vhci_hcd.0: Device attached [ 659.812560][ T792] usb usb4-port1: unable to enumerate USB device [ 659.842580][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'. [ 660.039578][T11246] vhci_hcd: connection closed [ 660.058409][ T5963] vhci_hcd vhci_hcd.2: stop threads [ 660.102203][ T5914] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 660.185489][ T5963] vhci_hcd vhci_hcd.2: release socket [ 660.211915][ T5963] vhci_hcd vhci_hcd.2: disconnect device [ 660.393183][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 661.317249][T11242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.349631][T11268] mkiss: ax0: crc mode is auto. [ 661.555665][ T29] audit: type=1400 audit(660.943:800): avc: denied { watch } for pid=11280 comm="syz.1.1400" path="/260" dev="tmpfs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 661.846700][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 662.006994][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 662.013637][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.026111][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 662.118936][ T24] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 662.133470][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.141607][ T24] usb 3-1: Product: syz [ 662.145899][ T24] usb 3-1: Manufacturer: syz [ 662.150514][ T24] usb 3-1: SerialNumber: syz [ 662.158112][ T24] usb 3-1: config 0 descriptor?? [ 662.342003][T11301] 9p: Bad value for 'rfdno' [ 662.349766][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.152352][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.227266][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.774540][ T29] audit: type=1400 audit(663.020:801): avc: denied { lock } for pid=11313 comm="syz.1.1417" path="socket:[27406]" dev="sockfs" ino=27406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 663.781951][T11311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.857740][ T24] usb 3-1: USB disconnect, device number 28 [ 663.935277][T11311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.006693][ T5982] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 664.049885][T11311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.181986][ T5982] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 664.190629][ T5982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.207867][ T5982] usb 4-1: config 0 has no interface number 0 [ 664.226981][ T5982] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 664.227787][T11311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.240436][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.272051][ T5982] usb 4-1: Product: syz [ 664.283467][ T5982] usb 4-1: Manufacturer: syz [ 664.288115][ T5982] usb 4-1: SerialNumber: syz [ 664.303176][ T5982] usb 4-1: config 0 descriptor?? [ 664.323713][ T5982] hub 4-1:0.31: bad descriptor, ignoring hub [ 664.331815][ T5982] hub 4-1:0.31: probe with driver hub failed with error -5 [ 664.349275][ T5982] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 664.357965][ T5982] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 664.367362][ T5982] uvcvideo 4-1:0.31: Failed to create links for entity 32774 [ 664.376887][ T5982] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 664.433241][ T86] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.543622][T11334] tmpfs: Unknown parameter 'grpauota_inode_hardl' [ 664.550690][ T1153] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.742830][ T1153] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.038164][ T8641] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.203035][ T792] usb 4-1: USB disconnect, device number 34 [ 665.613363][T11348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 665.619889][T11348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.628027][T11348] vhci_hcd vhci_hcd.0: Device attached [ 665.704778][ T5914] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 665.747745][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1426'. [ 665.934191][ T5900] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 666.242563][T11349] vhci_hcd: connection reset by peer [ 666.348416][ T8639] vhci_hcd vhci_hcd.0: stop threads [ 666.410203][ T8639] vhci_hcd vhci_hcd.0: release socket [ 666.430220][ T8639] vhci_hcd vhci_hcd.0: disconnect device [ 666.567990][T11368] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 666.882210][T11370] bond10: (slave bridge5): Enslaving as a backup interface with an up link [ 666.939370][T11371] bond10: (slave bridge6): Enslaving as a backup interface with a down link [ 667.869685][T11386] befs: (nbd2): No write support. Marking filesystem read-only [ 667.902693][T11390] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1435'. [ 668.144269][T11399] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 668.240180][T11404] binder: BINDER_SET_CONTEXT_MGR already set [ 668.240316][T11399] 8021q: adding VLAN 0 to HW filter on device bond9 [ 668.246200][T11404] binder: 11400:11404 ioctl 4018620d 200000004a80 returned -16 [ 668.285188][T11406] bond9: (slave geneve4): making interface the new active one [ 668.335320][T11406] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 668.482773][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 668.826602][T11402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.006370][ T5982] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 669.268028][ T5982] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 669.565302][ T5982] usb 2-1: config 8 has no interface number 0 [ 669.582322][ T5982] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 669.604776][ T5982] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 669.614830][ T5982] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x87 has invalid maxpacket 0 [ 669.635886][ T5982] usb 2-1: config 8 interface 177 has no altsetting 0 [ 669.651692][ T5982] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 669.675300][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.696759][T11418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 670.612558][ T5893] tipc: Subscription rejected, illegal request [ 670.772820][ T5982] usb 2-1: string descriptor 0 read error: -71 [ 670.784361][ T5982] ir_toy 2-1:8.177: required endpoints not found [ 670.792544][T11446] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1449'. [ 670.802461][ T5982] usb 2-1: USB disconnect, device number 20 [ 670.810866][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 672.139386][T11461] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 672.148316][ T5900] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 672.161234][T11461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.507221][T11477] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 672.702037][T11480] fuse: Bad value for 'fd' [ 673.259527][T11477] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 673.429464][T11494] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 674.117903][T11494] bond9: entered promiscuous mode [ 674.134894][T11494] 8021q: adding VLAN 0 to HW filter on device bond9 [ 674.565263][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 674.686122][ T24] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 674.840867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 674.985756][T11527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 675.107437][ T24] usb 4-1: device descriptor read/64, error -71 [ 675.127929][T11531] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 675.386152][ T24] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 676.372600][ T24] usb 4-1: device descriptor read/64, error -71 [ 676.486818][ T24] usb usb4-port1: attempt power cycle [ 676.663304][ T29] audit: type=1400 audit(675.083:802): avc: denied { connect } for pid=11551 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 676.683687][T11553] syz.2.1470: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.714114][T11553] CPU: 1 UID: 0 PID: 11553 Comm: syz.2.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.714150][T11553] Tainted: [L]=SOFTLOCKUP [ 676.714158][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 676.714171][T11553] Call Trace: [ 676.714178][T11553] [ 676.714186][T11553] dump_stack_lvl+0x100/0x190 [ 676.714240][T11553] warn_alloc.cold+0x95/0x1c1 [ 676.714277][T11553] ? __pfx_warn_alloc+0x10/0x10 [ 676.714319][T11553] ? kasan_save_stack+0x3f/0x50 [ 676.714349][T11553] ? kasan_save_stack+0x30/0x50 [ 676.714375][T11553] ? kasan_save_track+0x14/0x30 [ 676.714406][T11553] ? xskq_create+0xfb/0x1d0 [ 676.714432][T11553] __vmalloc_node_range_noprof+0x1252/0x1530 [ 676.714463][T11553] ? xskq_create+0xfb/0x1d0 [ 676.714495][T11553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.714530][T11553] ? xskq_create+0xfb/0x1d0 [ 676.714552][T11553] vmalloc_user_noprof+0x9e/0xe0 [ 676.714576][T11553] ? xskq_create+0xfb/0x1d0 [ 676.714599][T11553] xskq_create+0xfb/0x1d0 [ 676.714625][T11553] xsk_setsockopt+0x743/0xab0 [ 676.714652][T11553] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.714674][T11553] ? find_held_lock+0x2b/0x80 [ 676.714699][T11553] ? __fget_files+0x215/0x3d0 [ 676.714724][T11553] ? selinux_socket_setsockopt+0x6a/0x80 [ 676.714753][T11553] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.714777][T11553] do_sock_setsockopt+0xf3/0x1d0 [ 676.714812][T11553] __sys_setsockopt+0x195/0x220 [ 676.714844][T11553] __x64_sys_setsockopt+0xbd/0x160 [ 676.714869][T11553] ? do_syscall_64+0x95/0xf80 [ 676.714898][T11553] ? lockdep_hardirqs_on+0x78/0x100 [ 676.714926][T11553] do_syscall_64+0x106/0xf80 [ 676.714954][T11553] ? clear_bhb_loop+0x40/0x90 [ 676.714978][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.714997][T11553] RIP: 0033:0x7fd64579c819 [ 676.715015][T11553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.715033][T11553] RSP: 002b:00007fd64661c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.715054][T11553] RAX: ffffffffffffffda RBX: 00007fd645a15fa0 RCX: 00007fd64579c819 [ 676.715066][T11553] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 676.715076][T11553] RBP: 00007fd645832c91 R08: 0000000000000004 R09: 0000000000000000 [ 676.715086][T11553] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.715097][T11553] R13: 00007fd645a16038 R14: 00007fd645a15fa0 R15: 00007ffdd52318c8 [ 676.715123][T11553] [ 676.715130][T11553] Mem-Info: [ 676.972625][ T29] audit: type=1400 audit(675.111:803): avc: denied { ioctl } for pid=11550 comm="syz.2.1470" path="socket:[28863]" dev="sockfs" ino=28863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 676.999544][T11553] active_anon:37112 inactive_anon:0 isolated_anon:0 [ 676.999544][T11553] active_file:21495 inactive_file:40808 isolated_file:0 [ 676.999544][T11553] unevictable:768 dirty:434 writeback:0 [ 676.999544][T11553] slab_reclaimable:12656 slab_unreclaimable:133169 [ 676.999544][T11553] mapped:33866 shmem:25464 pagetables:1402 [ 676.999544][T11553] sec_pagetables:0 bounce:0 [ 676.999544][T11553] kernel_misc_reclaimable:0 [ 676.999544][T11553] free:1235889 free_pcp:10203 free_cma:0 [ 676.999640][T11553] Node 0 active_anon:148448kB inactive_anon:0kB active_file:85980kB inactive_file:163032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135464kB dirty:1736kB writeback:0kB shmem:100320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:13832kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.999688][T11553] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.999731][T11553] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.999785][T11553] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 676.999823][T11553] Node 0 DMA32 free:990380kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148448kB inactive_anon:0kB active_file:85980kB inactive_file:163032kB unevictable:1536kB writepending:1736kB zspages:0kB present:3129332kB managed:2537068kB mlocked:0kB bounce:0kB free_pcp:35208kB local_pcp:22840kB free_cma:0kB [ 676.999877][T11553] lowmem_reserve[]: 0 0 1 1 1 [ 676.999913][T11553] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1044kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 676.999964][T11553] lowmem_reserve[]: 0 0 0 0 0 [ 676.999999][T11553] Node 1 Normal free:3937816kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5600kB local_pcp:5600kB free_cma:0kB [ 677.000049][T11553] lowmem_reserve[]: 0 0 0 0 0 [ 677.000085][T11553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 677.000207][T11553] Node 0 DMA32: 2306*4kB (UM) 2253*8kB (U) 1018*16kB (UME) 389*32kB (UME) 235*64kB (UM) 202*128kB (UME) 88*256kB (UM) 43*512kB (UME) 19*1024kB (UM) 9*2048kB (UME) 198*4096kB (UM) = 990320kB [ 677.000369][T11553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.000466][T11553] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 2*16kB (M) 2*32kB (UM) 3*64kB (UM) 2*128kB (M) 4*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 960*4096kB (UM) = 3937868kB [ 677.000623][T11553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.000638][T11553] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.000653][T11553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.000668][T11553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.000682][T11553] 87763 total pagecache pages [ 677.000690][T11553] 0 pages in swap cache [ 677.000697][T11553] Free swap = 124996kB [ 677.000704][T11553] Total swap = 124996kB [ 677.000712][T11553] 2097051 pages RAM [ 677.000719][T11553] 0 pages HighMem/MovableOnly [ 677.000725][T11553] 430908 pages reserved [ 677.000733][T11553] 0 pages cma reserved [ 677.001409][ T29] audit: type=1400 audit(675.111:804): avc: denied { bind } for pid=11550 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 677.001443][ T29] audit: type=1400 audit(675.111:805): avc: denied { getopt } for pid=11550 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 677.001473][ T29] audit: type=1400 audit(675.111:806): avc: denied { getopt } for pid=11550 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 677.001504][ T29] audit: type=1400 audit(675.139:807): avc: denied { listen } for pid=11551 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 677.079916][ T24] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 677.110326][ T24] usb 4-1: device descriptor read/8, error -71 [ 677.373527][ T24] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 677.973288][ T24] usb 4-1: device not accepting address 38, error -71 [ 677.981496][ T24] usb usb4-port1: unable to enumerate USB device [ 679.067791][T11595] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 680.456596][T11595] bond10: (slave bridge13): Enslaving as a backup interface with an up link [ 682.236009][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 682.244796][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.911888][T11639] 9p: Bad value for 'rfdno' [ 683.937688][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.068728][T11642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.115412][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.319925][T11644] SET target dimension over the limit! [ 684.429587][ T24] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 684.608297][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 684.619450][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 684.807453][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.839747][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.901417][T11655] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 685.398796][ T24] usb 3-1: Product: 《 [ 685.415550][ T24] usb 3-1: Manufacturer: 縄㭃ᬤ헗絰됹椕ᱸʶꙑ蜿㍕ꆹ眷㼷遂⿇໷얞觷饇ફ흘ɣᾖ죝銩Ꙇ뺸ꄇ䡟⽟蔌抈僼窲㥤੡푳꜋犣藡幸蹨쟟慅膻ྒ릫殃᨜숡怤▿鬻僯슔蟣⬴㴔붿沬癰趄舼ὸ掠랥ﯰ欌ự쨷뱗ꔳ甜挑潍✠훆굛迎䧿事믊侯乆逼攲㐆㾢걵廷䨟र㵅榜濝錠땴ꪘ [ 685.452729][ T24] usb 3-1: SerialNumber: ࠧ [ 685.485332][T11662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 685.491887][T11662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 685.509957][T11656] bond9: (slave bridge7): Enslaving as a backup interface with an up link [ 685.541906][T11639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.921079][T11662] vhci_hcd vhci_hcd.0: Device attached [ 686.178888][ T5982] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 686.330706][T11674] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 686.357622][T11664] vhci_hcd: connection reset by peer [ 686.367067][ T86] vhci_hcd vhci_hcd.1: stop threads [ 686.380161][ T86] vhci_hcd vhci_hcd.1: release socket [ 686.428599][ T86] vhci_hcd vhci_hcd.1: disconnect device [ 686.587302][ T5930] kernel read not supported for file /dsp1 (pid: 5930 comm: kworker/1:4) [ 687.028279][ T24] cdc_ncm 3-1:1.0: bind() failure [ 687.081819][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 687.099862][ T24] cdc_ncm 3-1:1.1: bind() failure [ 687.141115][ T24] usb 3-1: USB disconnect, device number 29 [ 687.607418][T11691] loop6: detected capacity change from 0 to 7 [ 687.620092][ C1] blk_print_req_error: 11 callbacks suppressed [ 687.620115][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.635903][ C1] buffer_io_error: 11 callbacks suppressed [ 687.635918][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.657944][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.667602][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.684822][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.694462][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.715318][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.724948][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.759991][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.769616][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.793285][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.802934][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.831619][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.841279][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.849344][T11691] ldm_validate_partition_table(): Disk read failed. [ 687.872895][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.882544][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.904317][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.913948][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.939131][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.948773][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.958182][T11691] Dev loop6: unable to read RDB block 0 [ 687.972598][T11691] loop6: unable to read partition table [ 687.980802][T11691] loop6: partition table beyond EOD, truncated [ 687.987267][T11691] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 688.430106][T11700] SET target dimension over the limit! [ 688.551368][T11706] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 688.724522][T11709] bond9: (slave bridge12): Enslaving as a backup interface with an up link [ 689.125535][T11715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 689.132086][T11715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 689.140067][T11715] vhci_hcd vhci_hcd.0: Device attached [ 689.227974][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1509'. [ 689.960146][T11716] vhci_hcd: connection closed [ 689.970400][ T8643] vhci_hcd vhci_hcd.1: stop threads [ 690.103396][ T8643] vhci_hcd vhci_hcd.1: release socket [ 690.167839][ T8643] vhci_hcd vhci_hcd.1: disconnect device [ 690.602131][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 690.650985][T11731] netlink: 'syz.0.1513': attribute type 2 has an invalid length. [ 690.905937][T11733] "syz.4.1514" (11733) uses obsolete ecb(arc4) skcipher [ 691.501729][T11759] netlink: 'syz.2.1519': attribute type 9 has an invalid length. [ 691.509491][T11759] netlink: 'syz.2.1519': attribute type 11 has an invalid length. [ 691.517389][T11759] netlink: 'syz.2.1519': attribute type 12 has an invalid length. [ 691.525287][T11759] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1519'. [ 691.747081][T11757] SET target dimension over the limit! [ 691.753274][ T29] audit: type=1400 audit(688.979:808): avc: denied { write } for pid=11753 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 691.928732][ T5982] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 692.373699][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 692.686617][ T5900] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 692.727225][T11781] loop6: detected capacity change from 0 to 7 [ 692.759556][T11781] ldm_validate_partition_table(): Disk read failed. [ 692.777875][T11781] Dev loop6: unable to read RDB block 0 [ 692.808699][T11781] loop6: unable to read partition table [ 692.814946][T11781] loop6: partition table beyond EOD, truncated [ 692.821285][T11781] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 693.140947][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 693.200949][T11784] netlink: 'syz.3.1528': attribute type 2 has an invalid length. [ 693.877523][ T5900] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 693.898033][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 693.918615][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 693.964686][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 694.077930][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.087044][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.211733][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 694.224709][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.234435][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.245338][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 694.263441][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.288382][T11789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.302214][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.332276][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 694.361495][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.382794][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.427168][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 694.527591][T11805] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1534'. [ 695.576222][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.595288][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.616653][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.624188][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.631374][T11814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1536'. [ 695.661653][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.687562][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.695677][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.710612][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.722922][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.752053][ T5900] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 695.766070][ T5900] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 695.775568][ T5900] usb 2-1: Product: syz [ 695.786375][ T5900] usb 2-1: Manufacturer: syz [ 695.791071][ T5900] usb 2-1: SerialNumber: syz [ 695.800720][T11819] serio: Serial port ptm0 [ 695.814914][ T5900] usb 2-1: config 0 descriptor?? [ 695.831649][ T5900] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 696.163663][ T5930] usb 2-1: USB disconnect, device number 21 [ 696.640190][ T5930] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 697.649617][T11858] SET target dimension over the limit! [ 697.781307][T11874] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1558'. [ 697.886316][T11883] Bluetooth: MGMT ver 1.23 [ 698.813752][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 698.899438][ T29] audit: type=1400 audit(695.895:809): avc: denied { setopt } for pid=11909 comm="syz.3.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 698.956506][T11912] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 698.973876][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 698.983197][T11915] netlink: 'syz.4.1572': attribute type 2 has an invalid length. [ 698.995335][T11912] bond10: entered promiscuous mode [ 699.000961][T11912] 8021q: adding VLAN 0 to HW filter on device bond10 [ 699.022309][T11912] vlan4: entered allmulticast mode [ 699.036252][T11912] bond10: entered allmulticast mode [ 699.045397][ T5930] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 699.065812][T11912] bond10: (slave bridge8): making interface the new active one [ 699.081524][T11912] bridge8: entered promiscuous mode [ 699.108503][T11912] bridge8: entered allmulticast mode [ 699.119341][T11912] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 699.303156][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 699.309693][ T5930] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 699.323132][ T5930] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 699.335786][ T5930] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.347279][ T5930] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 700.423606][ T5930] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 700.510161][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.534232][ T5930] usb 3-1: Product: syz [ 700.550373][ T5930] usb 3-1: Manufacturer: syz [ 700.556379][ T29] audit: type=1400 audit(697.448:810): avc: denied { map } for pid=11932 comm="syz.3.1577" path="socket:[29580]" dev="sockfs" ino=29580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 700.580694][ T29] audit: type=1400 audit(697.448:811): avc: denied { read } for pid=11932 comm="syz.3.1577" path="socket:[29580]" dev="sockfs" ino=29580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 700.584411][ T5930] usb 3-1: SerialNumber: syz [ 700.623869][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 700.634388][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input20 [ 700.673315][T11938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1579'. [ 700.768056][T11942] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 700.777603][ T29] audit: type=1400 audit(697.654:812): avc: denied { read } for pid=11941 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 700.861688][ T5930] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 700.870180][ T5930] (id 0x00) [ 700.936238][ T5930] rc_core: IR keymap rc-imon-pad not found [ 700.948662][ T5930] Registered IR keymap rc-empty [ 700.958123][ T5930] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 700.991602][ T5930] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 701.080094][ T5930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 701.252567][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 701.266418][ T5930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input21 [ 701.277828][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1584'. [ 701.295352][ T5930] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:30> initialized [ 701.934926][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.978076][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.150538][T11970] loop6: detected capacity change from 0 to 7 [ 702.164837][ C1] blk_print_req_error: 32 callbacks suppressed [ 702.164855][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.180661][ C1] buffer_io_error: 32 callbacks suppressed [ 702.180675][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.201885][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.211529][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.248791][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.258432][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.282087][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.291734][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.301733][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.311371][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.320993][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.330617][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.340605][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.350350][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.362551][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.372162][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.380161][T11970] ldm_validate_partition_table(): Disk read failed. [ 702.387781][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.397389][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.406283][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.415883][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.425210][T11970] Dev loop6: unable to read RDB block 0 [ 702.432586][T11970] loop6: unable to read partition table [ 702.439106][T11970] loop6: partition table beyond EOD, truncated [ 702.445488][T11970] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 703.182539][T11979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1593'. [ 703.546221][T11963] imon:send_packet: task interrupted [ 703.715423][T11963] imon:send_packet: packet tx failed (-512) [ 703.892432][T11963] imon:vfd_write: send packet #1 failed [ 703.988972][ T9] usb 3-1: USB disconnect, device number 30 [ 704.185462][ T29] audit: type=1326 audit(700.798:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64579c819 code=0x0 [ 704.716703][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 705.075268][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 705.173777][T12011] loop2: detected capacity change from 0 to 7 [ 705.182241][T12011] Dev loop2: unable to read RDB block 7 [ 705.188013][T12011] loop2: unable to read partition table [ 705.196378][T12011] loop2: partition table beyond EOD, truncated [ 705.203372][T12011] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 705.223865][ T5180] Dev loop2: unable to read RDB block 7 [ 705.229639][ T5180] loop2: unable to read partition table [ 705.235999][ T5180] loop2: partition table beyond EOD, truncated [ 705.349256][T12016] tipc: Started in network mode [ 705.355118][T12016] tipc: Node identity ac14140f, cluster identity 4711 [ 705.364301][T12016] tipc: Enabled bearer , priority 10 [ 706.218145][T12035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'. [ 706.271770][ T29] audit: type=1400 audit(702.782:814): avc: denied { map } for pid=12036 comm="syz.1.1613" path="socket:[30381]" dev="sockfs" ino=30381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 706.475573][T12042] loop2: detected capacity change from 0 to 7 [ 706.483733][T12042] Dev loop2: unable to read RDB block 7 [ 706.489372][T12042] loop2: unable to read partition table [ 706.495547][T12042] loop2: partition table beyond EOD, truncated [ 706.501764][T12042] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 706.646302][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 706.676536][ T5900] tipc: Node number set to 2886997007 [ 706.848609][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 707.137998][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.163417][ T9] usb 2-1: config 0 descriptor?? [ 707.445684][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.508821][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.529081][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.654864][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.716516][ T9] usb 2-1: string descriptor 0 read error: -71 [ 707.728733][ T9] ldusb 2-1:0.0: Interrupt in endpoint not found [ 707.744574][ T9] usb 2-1: USB disconnect, device number 22 [ 707.851346][T12064] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 708.414570][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1624'. [ 709.089839][T12093] loop6: detected capacity change from 0 to 7 [ 709.099089][ C1] blk_print_req_error: 11 callbacks suppressed [ 709.099107][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.114937][ C1] buffer_io_error: 11 callbacks suppressed [ 709.114953][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.128882][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.138472][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.157884][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.167520][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.179287][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.188942][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.210111][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.219755][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.228498][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.238192][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.246663][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.256344][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.288351][T12093] ldm_validate_partition_table(): Disk read failed. [ 709.296838][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.306553][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.316607][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.326236][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.346375][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.356210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 709.369929][T12093] Dev loop6: unable to read RDB block 0 [ 709.383509][T12093] loop6: unable to read partition table [ 709.390793][T12093] loop6: partition table beyond EOD, truncated [ 709.397401][T12093] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 709.560631][ T5930] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 709.667119][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 709.726252][T12098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 709.732799][T12098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 709.740918][T12098] vhci_hcd vhci_hcd.0: Device attached [ 710.062589][ T9] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 710.121453][T12099] vhci_hcd: connection closed [ 710.124606][ T8652] vhci_hcd vhci_hcd.3: stop threads [ 710.254160][ T8652] vhci_hcd vhci_hcd.3: release socket [ 710.315454][ T8652] vhci_hcd vhci_hcd.3: disconnect device [ 710.511491][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 710.604116][ T5930] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 711.461729][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.489018][ T5930] usb 3-1: config 0 descriptor?? [ 711.510447][T12085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 711.673847][T12117] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 712.230377][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 712.237026][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 712.246848][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1637'. [ 712.253079][ T5930] usb 3-1: USB disconnect, device number 31 [ 712.364998][T12130] netlink: 'syz.2.1640': attribute type 1 has an invalid length. [ 712.447753][T12125] SELinux: failed to load policy [ 712.460604][ T29] audit: type=1400 audit(708.565:815): avc: denied { load_policy } for pid=12124 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 712.496352][T12130] bond11: entered promiscuous mode [ 712.541769][T12130] 8021q: adding VLAN 0 to HW filter on device bond11 [ 712.880765][T12134] vlan8: entered allmulticast mode [ 712.906526][T12134] bond11: entered allmulticast mode [ 712.950580][T12139] bond11: (slave bridge7): making interface the new active one [ 712.962091][T12139] bridge7: entered promiscuous mode [ 712.967536][T12139] bridge7: entered allmulticast mode [ 712.978821][T12139] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 715.077202][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 715.105768][T12172] affs: No valid root block on device nullb0 [ 715.488677][T12191] SET target dimension over the limit! [ 716.083227][T12195] bond11: entered allmulticast mode [ 716.559294][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 717.389094][T12224] geneve5: entered allmulticast mode [ 717.396865][ T5952] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 717.406641][ T5952] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 717.431605][ T5952] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 717.451768][ T5952] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 717.457323][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.493387][ T29] audit: type=1400 audit(713.282:816): avc: denied { ioctl } for pid=12227 comm="syz.0.1671" path="socket:[30628]" dev="sockfs" ino=30628 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 717.947520][T12232] binder: 12227:12232 ioctl c0306201 0 returned -14 [ 718.070313][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.198977][T12246] geneve6: entered promiscuous mode [ 718.386773][ T5952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.464354][T12265] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 719.483847][ T8641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.525964][ T8641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.585854][T12265] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 719.644884][T12265] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 719.754381][ T29] audit: type=1400 audit(715.397:817): avc: denied { write } for pid=12264 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 719.826308][T12274] bond12: (slave gretap1): making interface the new active one [ 719.835331][T12274] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 720.410898][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.465827][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 720.491033][T12283] macvlan2: entered promiscuous mode [ 720.501355][T12291] netlink: 'syz.4.1688': attribute type 2 has an invalid length. [ 720.531253][T12283] macvlan2: entered allmulticast mode [ 720.559637][T12283] bond12: entered promiscuous mode [ 720.577195][T12283] gretap1: entered promiscuous mode [ 720.588878][T12283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.599422][T12283] bond12: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 720.623874][T12283] bond12: left promiscuous mode [ 720.630045][T12283] gretap1: left promiscuous mode [ 720.638973][ T29] audit: type=1400 audit(716.239:818): avc: denied { accept } for pid=12264 comm="syz.1.1681" lport=34083 faddr=::ffff:172.30.0.2 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 720.692403][ T29] audit: type=1400 audit(716.267:819): avc: denied { setopt } for pid=12264 comm="syz.1.1681" lport=34083 faddr=::ffff:172.30.0.2 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 721.297577][ T29] audit: type=1800 audit(716.857:820): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1696" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 721.349205][T12317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=12317 comm=syz.4.1698 [ 722.802367][T12356] 9p: Bad value for 'rfdno' [ 722.846803][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.961405][T12357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.983005][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.389584][T12359] fuse: Unknown parameter 'C' [ 723.663400][ T5930] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 723.900580][ T29] audit: type=1400 audit(719.280:821): avc: denied { append } for pid=12366 comm="syz.1.1714" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 724.019699][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 724.030809][ T5930] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 724.043903][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.053926][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.062564][ T5930] usb 3-1: Product: 《 [ 724.067260][ T5930] usb 3-1: Manufacturer: 縄㭃ᬤ헗絰됹椕ᱸʶꙑ蜿㍕ꆹ眷㼷遂⿇໷얞觷饇ફ흘ɣᾖ죝銩Ꙇ뺸ꄇ䡟⽟蔌抈僼窲㥤੡푳꜋犣藡幸蹨쟟慅膻ྒ릫殃᨜숡怤▿鬻僯슔蟣⬴㴔붿沬癰趄舼ὸ掠랥ﯰ欌ự쨷뱗ꔳ甜挑潍✠훆굛迎䧿事믊侯乆逼攲㐆㾢걵廷䨟र㵅榜濝錠땴ꪘ [ 724.178867][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.298042][ T5930] usb 3-1: SerialNumber: ࠧ [ 724.419702][T12356] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 724.444596][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 724.542727][T12373] PKCS8: Unsupported PKCS#8 version [ 724.607062][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 724.615967][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.625577][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.636740][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.644517][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.654715][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.665771][ T29] audit: type=1400 audit(719.992:822): avc: denied { connect } for pid=12379 comm="syz.1.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 724.691312][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.703026][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.712268][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.723690][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.738707][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.749488][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.760793][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.768915][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.778650][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.790336][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.798624][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.807764][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.822280][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.830555][T12385] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 724.842496][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.853738][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.859470][T12385] 8021q: adding VLAN 0 to HW filter on device bond13 [ 724.881911][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.889715][T12388] loop9: detected capacity change from 0 to 7 [ 724.890564][T12385] bond13: (slave geneve6): making interface the new active one [ 724.898279][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.905609][T12385] bond13: (slave geneve6): Enslaving as an active interface with an up link [ 724.915195][ C0] blk_print_req_error: 11 callbacks suppressed [ 724.915209][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.936881][ C0] buffer_io_error: 11 callbacks suppressed [ 724.936896][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 724.958794][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.968455][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 724.976732][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.986332][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 724.995446][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.005072][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.018703][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.028349][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.037769][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.047381][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.055551][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.065138][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.073210][ T6697] ldm_validate_partition_table(): Disk read failed. [ 725.083607][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.093266][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.101434][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.101487][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.111059][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.119213][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.139485][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.147794][ T6697] Dev loop9: unable to read RDB block 0 [ 725.175796][ T6697] loop9: unable to read partition table [ 725.184497][ T6697] loop9: partition table beyond EOD, truncated [ 725.185451][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.391224][T12388] ldm_validate_partition_table(): Disk read failed. [ 725.408621][T12388] Dev loop9: unable to read RDB block 0 [ 725.418939][T12388] loop9: unable to read partition table [ 725.427670][T12388] loop9: partition table beyond EOD, truncated [ 725.434270][T12388] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 725.507299][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 725.516728][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 725.600886][ T9] usb 4-1: Product: syz [ 725.627946][ T9] usb 4-1: Manufacturer: syz [ 725.640439][ T9] usb 4-1: SerialNumber: syz [ 725.675553][ T9] usb 4-1: config 0 descriptor?? [ 725.765167][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 725.807696][ T5930] cdc_ncm 3-1:1.0: bind() failure [ 725.817500][ T5930] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 725.933537][ T5930] cdc_ncm 3-1:1.1: bind() failure [ 725.999562][ T9] usb 4-1: USB disconnect, device number 39 [ 726.002528][ T5930] usb 3-1: USB disconnect, device number 32 [ 726.031026][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 726.084951][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 726.106004][T12405] netlink: 'syz.0.1725': attribute type 12 has an invalid length. [ 726.121489][T12405] netlink: 'syz.0.1725': attribute type 29 has an invalid length. [ 726.136315][T12405] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1725'. [ 726.153306][T12405] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1725'. [ 726.370590][T12413] fuse: Unknown parameter 'C' [ 726.813729][T12405] bond0: (slave bond_slave_0): Releasing backup interface [ 727.380615][ T29] audit: type=1400 audit(722.537:823): avc: denied { ioctl } for pid=12429 comm="syz.4.1734" path="socket:[32081]" dev="sockfs" ino=32081 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 727.668139][ T29] audit: type=1400 audit(722.818:824): avc: denied { lock } for pid=12441 comm="syz.0.1738" path="/newroot/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 728.123697][T12459] fuse: Unknown parameter 'C' [ 728.464845][T12442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.488348][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 728.692899][ T29] audit: type=1400 audit(723.772:825): avc: denied { mount } for pid=12470 comm="syz.3.1746" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 728.718107][T12471] syz_tun: entered allmulticast mode [ 728.997888][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 730.180567][T12483] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1750'. [ 730.266766][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 730.275929][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.480650][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 730.493613][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 730.502099][ T9] usb 4-1: Manufacturer: syz [ 730.510581][ T9] usb 4-1: config 0 descriptor?? [ 730.622429][ T9] rc_core: IR keymap rc-hauppauge not found [ 730.632420][ T9] Registered IR keymap rc-empty [ 730.644631][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 730.667631][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 730.751025][T12471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.796753][T12471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.822006][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 730.834325][T12500] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1753'. [ 730.890188][T12471] syz_tun (unregistering): left allmulticast mode [ 731.037070][ T5930] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 731.054727][ T5982] usb 4-1: USB disconnect, device number 40 [ 731.145704][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 731.200821][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.212301][ T5930] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 731.225765][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.235578][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.245314][ T5930] usb 3-1: Product: syz [ 731.249722][ T5930] usb 3-1: Manufacturer: syz [ 731.255133][ T5930] usb 3-1: SerialNumber: syz [ 731.269618][ T5930] cdc_mbim 3-1:1.0: skipping garbage [ 731.307536][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 731.327350][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024 [ 731.343468][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 731.357916][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 731.368082][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.377951][ T9] usb 2-1: config 0 descriptor?? [ 731.384730][T12495] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 731.489551][T12493] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 731.861852][ T9] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 732.150035][T12493] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 732.188302][T12519] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 732.249973][ T5930] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 732.420618][ T5930] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 732.940873][ T29] audit: type=1400 audit(726.842:826): avc: denied { remount } for pid=12516 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 732.981292][ T5930] wwan wwan0: port wwan0mbim0 attached [ 733.085936][ T29] audit: type=1400 audit(727.787:827): avc: denied { write } for pid=12516 comm="syz.0.1759" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 733.131358][ T5930] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, be:f5:cb:55:b3:86 [ 733.154192][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 733.183163][ T5982] usb 2-1: USB disconnect, device number 23 [ 733.185947][T12527] netlink: 'syz.4.1760': attribute type 2 has an invalid length. [ 733.199188][ T5930] usb 3-1: USB disconnect, device number 33 [ 733.239963][ T5930] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 733.340514][ T5930] wwan wwan0: port wwan0mbim0 disconnected [ 733.372284][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 733.393686][ T29] audit: type=1400 audit(728.170:828): avc: denied { create } for pid=12532 comm="syz.0.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 733.457962][ T29] audit: type=1400 audit(728.170:829): avc: denied { ioctl } for pid=12532 comm="syz.0.1764" path="socket:[32224]" dev="sockfs" ino=32224 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 733.485736][T12538] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 733.497324][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.498138][T12538] SELinux: failed to load policy [ 734.243659][T12550] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 734.543990][ T29] audit: type=1400 audit(729.247:830): avc: denied { listen } for pid=12551 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 734.555642][ T5982] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 734.815147][T12552] bond11: (slave bridge15): Enslaving as a backup interface with an up link [ 735.036078][ T5982] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 735.044643][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 735.059131][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1771'. [ 736.189719][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.210975][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 736.381559][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.390575][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.401679][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 736.427283][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.466168][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.871063][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 736.890679][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.913127][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.942965][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 736.962276][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 736.977927][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 736.990718][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 737.007253][ T29] audit: type=1400 audit(731.558:831): avc: denied { ioctl } for pid=12581 comm="syz.3.1776" path="socket:[32399]" dev="sockfs" ino=32399 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 737.010039][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 737.058429][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 737.069841][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 737.081774][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 737.096097][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 737.165836][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 737.205588][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 737.226060][ T5982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 737.237582][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 737.260086][ T5982] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 737.269367][ T5982] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 737.277716][ T5982] usb 2-1: Product: syz [ 737.281966][ T5982] usb 2-1: Manufacturer: syz [ 737.286561][ T5982] usb 2-1: SerialNumber: syz [ 737.296775][ T5982] usb 2-1: config 0 descriptor?? [ 737.466724][ T5982] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 737.564056][T12599] 9p: Bad value for 'rfdno' [ 737.614905][T12600] kAFS: Can only specify source 'none' with -o dyn [ 737.666532][T12601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.796147][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.842409][T12601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.908418][ T29] audit: type=1326 audit(732.391:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.0.1780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463659c819 code=0x0 [ 737.911456][ T5982] usb 2-1: USB disconnect, device number 24 [ 737.956501][T12605] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 737.973939][ T5982] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 738.239522][T12620] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 738.787482][T12621] bond12: (slave bridge8): Enslaving as a backup interface with an up link [ 739.186967][T12636] fuse: Unknown parameter 'C' [ 739.972437][ T5982] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 740.455553][ T5982] usb 3-1: unable to get BOS descriptor or descriptor too short [ 740.470552][ T5982] usb 3-1: not running at top speed; connect to a high speed hub [ 740.485602][ T5982] usb 3-1: config 172 has an invalid interface number: 25 but max is 0 [ 740.571443][T11354] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 740.600729][ T5982] usb 3-1: config 172 has no interface number 0 [ 740.607341][ T5982] usb 3-1: config 172 interface 25 has no altsetting 0 [ 740.668312][ T5982] usb 3-1: New USB device found, idVendor=03f0, idProduct=4439, bcdDevice=3c.ff [ 740.689676][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.701232][ T5982] usb 3-1: Product: syz [ 740.705436][ T5982] usb 3-1: Manufacturer: syz [ 740.719838][ T5982] usb 3-1: SerialNumber: syz [ 740.764602][T11354] usb 4-1: Using ep0 maxpacket: 16 [ 740.782435][T11354] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 740.811688][T11354] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.837685][T11354] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.862868][T11354] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 740.923717][T11354] usb 4-1: config 0 interface 0 has no altsetting 0 [ 740.956683][T11354] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 740.975975][T11354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.980267][T12637] tipc: Trying to set illegal importance in message [ 740.996051][T11354] usb 4-1: Product: syz [ 741.006457][T11354] usb 4-1: Manufacturer: syz [ 741.013275][T11354] usb 4-1: SerialNumber: syz [ 741.023852][T11354] usb 4-1: config 0 descriptor?? [ 741.030619][T12645] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 741.033053][T12660] libceph: resolve '400' (ret=-3): failed [ 741.074129][T12664] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1797'. [ 741.144421][T12664] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1797'. [ 741.256969][T12645] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 741.269785][T11354] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 741.297594][T11354] usb 4-1: USB disconnect, device number 41 [ 741.415016][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 741.462893][T12674] netlink: 'syz.3.1799': attribute type 1 has an invalid length. [ 741.629432][T12676] bond12: (slave bridge11): Enslaving as a backup interface with an up link [ 742.098884][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 742.164288][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 742.176375][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 742.189800][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 742.199274][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.207380][ T9] usb 2-1: Product: syz [ 742.211651][ T9] usb 2-1: Manufacturer: syz [ 742.216298][ T9] usb 2-1: SerialNumber: syz [ 742.403533][ T9] usb 2-1: config 0 descriptor?? [ 742.745631][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 742.767129][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 742.803783][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 742.833085][T12683] netlink: 'syz.3.1801': attribute type 2 has an invalid length. [ 742.842093][ T5982] pl2303 3-1:172.25: required endpoints missing [ 742.852439][ T5982] usb 3-1: USB disconnect, device number 34 [ 742.876038][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 742.878454][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 742.896292][T12686] openvswitch: netlink: Key type 153 is out of range max 32 [ 742.908594][T12685] openvswitch: netlink: Key type 153 is out of range max 32 [ 743.146922][ T29] audit: type=1400 audit(737.304:833): avc: denied { map } for pid=12697 comm="syz.3.1806" path="/proc/1094/net/pfkey" dev="proc" ino=4026533433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 743.387486][T12704] 9p: Bad value for 'rfdno' [ 743.649534][ T5982] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 743.771657][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 743.798882][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 743.822470][ T9] em28xx 2-1:0.0: Config register raw data: 0x41 [ 743.847008][ T29] audit: type=1400 audit(737.959:834): avc: denied { setopt } for pid=12706 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 743.855184][ T5982] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 743.882726][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.894445][ T5982] usb 4-1: Product: syz [ 743.898804][ T5982] usb 4-1: Manufacturer: syz [ 743.904150][ T5982] usb 4-1: SerialNumber: syz [ 743.983957][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 744.011679][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 744.014340][ T5982] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 744.033118][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 744.049744][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 744.211500][ T5930] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 744.735149][ T9] usb 4-1: USB disconnect, device number 42 [ 745.467790][ T5930] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 745.614997][ T5930] ath9k_htc: Failed to initialize the device [ 745.640717][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 745.694519][T12727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.748408][T12739] loop2: detected capacity change from 0 to 7 [ 745.755684][T12739] Dev loop2: unable to read RDB block 7 [ 745.761501][T12739] loop2: unable to read partition table [ 745.770541][T12739] loop2: partition table beyond EOD, truncated [ 745.778104][T12739] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 745.842763][T11354] usb 2-1: USB disconnect, device number 25 [ 745.855222][T11354] em28xx 2-1:0.0: Disconnecting em28xx [ 745.876065][T11354] em28xx 2-1:0.0: Freeing device [ 746.108391][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 746.289661][T11354] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 746.654688][T12705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.664756][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 746.667373][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.667421][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.667448][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.668348][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.668387][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.668412][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.669298][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.756850][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.768008][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.776848][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.786682][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.798026][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.806206][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.816147][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.827381][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.852827][T11354] usb 2-1: Using ep0 maxpacket: 32 [ 746.860093][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.870048][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.870169][T11354] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 746.892280][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.899060][T11354] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.905681][T11354] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 746.915032][T11354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.019857][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 747.029579][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 747.472305][T11354] usb 2-1: config 0 descriptor?? [ 747.479188][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.486904][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 747.496248][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 747.510696][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.522734][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 747.534223][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 747.543020][ T9] usb 4-1: Product: syz [ 747.547506][ T9] usb 4-1: Manufacturer: syz [ 747.556129][ T9] usb 4-1: SerialNumber: syz [ 747.774027][ T9] usb 4-1: config 0 descriptor?? [ 747.807515][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 747.863236][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.870209][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.005070][T11354] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 748.067070][ T9] usb 4-1: USB disconnect, device number 43 [ 748.082831][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 748.345285][T12772] loop2: detected capacity change from 0 to 7 [ 748.362362][T12772] Dev loop2: unable to read RDB block 7 [ 748.375525][T12772] loop2: unable to read partition table [ 748.392150][T12772] loop2: partition table beyond EOD, truncated [ 748.419776][T12772] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 748.484389][T11354] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -71 [ 748.518442][T11354] usb 2-1: USB disconnect, device number 26 [ 748.711437][ T29] audit: type=1400 audit(742.507:835): avc: denied { mount } for pid=12781 comm="syz.0.1832" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 748.870683][T12787] __nla_validate_parse: 3 callbacks suppressed [ 748.870712][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 748.912279][T12789] SET target dimension over the limit! [ 749.181859][T12797] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 749.979812][T12797] bond14: entered promiscuous mode [ 750.005716][T12797] 8021q: adding VLAN 0 to HW filter on device bond14 [ 750.138483][T12807] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 750.145041][T12807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 750.152845][T12807] vhci_hcd vhci_hcd.0: Device attached [ 750.337427][T12812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1840'. [ 750.412661][ T5930] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 750.842081][T12802] vlan6: entered allmulticast mode [ 750.847234][T12802] bond14: entered allmulticast mode [ 750.995408][T12808] vhci_hcd: connection reset by peer [ 751.689151][ T1153] vhci_hcd vhci_hcd.3: stop threads [ 751.694894][ T1153] vhci_hcd vhci_hcd.3: release socket [ 751.701680][ T1153] vhci_hcd vhci_hcd.3: disconnect device [ 751.744070][T12806] bond14: (slave bridge14): making interface the new active one [ 751.752225][T12806] bridge14: entered promiscuous mode [ 751.759052][T12806] bridge14: entered allmulticast mode [ 751.832068][T12806] bond14: (slave bridge14): Enslaving as an active interface with an up link [ 752.656859][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.774670][T12843] 8021q: VLANs not supported on ip6tnl0 [ 752.845853][T12845] SET target dimension over the limit! [ 753.084114][ T5982] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 753.265853][ T5982] usb 4-1: Using ep0 maxpacket: 32 [ 753.278576][ T5982] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 753.290652][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.313386][ T5982] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 754.067597][ T5982] gspca_nw80x: reg_r err -110 [ 754.261128][ T5982] nw80x 4-1:3.0: probe with driver nw80x failed with error -110 [ 754.390378][T11354] usb 4-1: USB disconnect, device number 44 [ 754.414799][T12864] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1853'. [ 754.608826][T12866] tmpfs: Unknown parameter 'usrquota' [ 754.998542][T12879] 9p: Bad value for 'rfdno' [ 755.041982][T12879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.157571][T12880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.178805][T12879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.121306][ T29] audit: type=1400 audit(749.432:836): avc: denied { create } for pid=12886 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 756.153101][ T29] audit: type=1400 audit(749.432:837): avc: denied { setopt } for pid=12886 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 756.172940][ T29] audit: type=1400 audit(749.432:838): avc: denied { ioctl } for pid=12886 comm="syz.2.1858" path="socket:[33484]" dev="sockfs" ino=33484 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 756.222860][T12902] vlan7: entered promiscuous mode [ 756.228536][T12902] syz_tun: entered promiscuous mode [ 756.330802][ T5930] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 757.387485][ T29] audit: type=1400 audit(750.620:839): avc: denied { append } for pid=12910 comm="syz.2.1864" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 759.623817][T12932] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 759.755763][T12936] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 760.276062][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 760.457489][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 760.464001][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 760.474465][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.492411][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 760.518776][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 760.528282][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 760.538516][T12940] netlink: 'syz.1.1870': attribute type 11 has an invalid length. [ 760.622108][T12940] netlink: 'syz.1.1870': attribute type 13 has an invalid length. [ 761.110373][ T24] gspca_nw80x: reg_r err -71 [ 761.115024][ T24] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 761.132227][ T24] usb 4-1: USB disconnect, device number 45 [ 762.411999][T12964] 9p: Bad value for 'rfdno' [ 762.434771][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.917191][T12965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.934904][T12962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.310743][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 763.319263][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 763.485883][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'. [ 763.527312][T12984] loop2: detected capacity change from 0 to 7 [ 763.570096][T12984] Dev loop2: unable to read RDB block 7 [ 763.635667][T12984] loop2: unable to read partition table [ 763.647719][T12981] netlink: 'syz.4.1883': attribute type 11 has an invalid length. [ 763.682404][T12984] loop2: partition table beyond EOD, truncated [ 763.747049][T12984] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 763.768974][T12981] netlink: 'syz.4.1883': attribute type 13 has an invalid length. [ 763.815551][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 763.826614][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 763.840520][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.849742][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.857865][ T24] usb 4-1: Product: 《 [ 763.862180][ T24] usb 4-1: Manufacturer: 縄㭃ᬤ헗絰됹椕ᱸʶꙑ蜿㍕ꆹ眷㼷遂⿇໷얞觷饇ફ흘ɣᾖ죝銩Ꙇ뺸ꄇ䡟⽟蔌抈僼窲㥤੡푳꜋犣藡幸蹨쟟慅膻ྒ릫殃᨜숡怤▿鬻僯슔蟣⬴㴔붿沬癰趄舼ὸ掠랥ﯰ欌ự쨷뱗ꔳ甜挑潍✠훆굛迎䧿事믊侯乆逼攲㐆㾢걵廷䨟र㵅榜濝錠땴ꪘ [ 763.911019][ T24] usb 4-1: SerialNumber: ࠧ [ 763.933969][T12962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 765.503749][T13011] o2cb: This node has not been configured. [ 765.509847][T13011] o2cb: Cluster check failed. Fix errors before retrying. [ 765.517259][T13011] (syz.0.1887,13011,1):user_dlm_register:674 ERROR: status = -22 [ 765.525096][T13011] (syz.0.1887,13011,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 765.543694][T13011] o2cb: This node has not been configured. [ 765.549652][T13011] o2cb: Cluster check failed. Fix errors before retrying. [ 765.557007][T13011] (syz.0.1887,13011,1):user_dlm_register:674 ERROR: status = -22 [ 765.564800][T13011] (syz.0.1887,13011,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 765.611302][ T24] cdc_ncm 4-1:1.0: bind() failure [ 765.616652][ T29] audit: type=1400 audit(758.219:840): avc: denied { add_name } for pid=12995 comm="syz.0.1887" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.221820][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 766.242963][ T24] cdc_ncm 4-1:1.1: bind() failure [ 766.260011][ T29] audit: type=1400 audit(758.228:841): avc: denied { associate } for pid=12995 comm="syz.0.1887" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 766.291583][ T24] usb 4-1: USB disconnect, device number 46 [ 766.363587][T13028] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1894'. [ 766.378574][T13028] usb usb9: usbfs: process 13028 (syz.2.1894) did not claim interface 0 before use [ 766.684941][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 766.965309][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 767.364188][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 767.395338][ T24] usb 4-1: config 0 has no interface number 0 [ 767.413015][ T24] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 767.430632][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 767.458120][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 767.473788][ T24] usb 4-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 767.487287][T13050] netlink: 'syz.4.1901': attribute type 11 has an invalid length. [ 767.516998][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 767.520604][T13050] netlink: 'syz.4.1901': attribute type 13 has an invalid length. [ 767.550347][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 767.579747][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.600858][ T24] usb 4-1: Product: syz [ 767.609514][ T24] usb 4-1: Manufacturer: syz [ 767.618623][ T24] usb 4-1: SerialNumber: syz [ 767.718114][ T24] usb 4-1: config 0 descriptor?? [ 767.725042][T13027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 768.139122][ T29] audit: type=1400 audit(760.680:842): avc: denied { write } for pid=13025 comm="syz.3.1895" path="socket:[34261]" dev="sockfs" ino=34261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 768.170896][T13063] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1904'. [ 768.690333][ T29] audit: type=1400 audit(761.204:843): avc: denied { append } for pid=13070 comm="syz.1.1907" name="pfkey" dev="proc" ino=4026533508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 770.129970][ T24] ipheth 4-1:0.196: Unable to find endpoints [ 770.141128][T13092] overlayfs: failed to resolve './file2': -2 [ 770.170224][ T24] usb 4-1: USB disconnect, device number 47 [ 770.183312][ T29] audit: type=1326 audit(762.599:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 770.226395][ T29] audit: type=1326 audit(762.599:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 770.303858][ T29] audit: type=1326 audit(762.608:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 770.384683][ T29] audit: type=1326 audit(762.608:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 770.423419][ T29] audit: type=1326 audit(762.608:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 770.547811][ T29] audit: type=1326 audit(762.608:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 770.888064][T13101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 770.963778][T13108] overlay: Bad value for 'metacopy' [ 771.186831][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 771.192602][ T29] audit: type=1326 audit(763.534:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 771.228499][ T29] audit: type=1326 audit(763.534:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0918b9c819 code=0x7ffc0000 [ 771.320353][T13115] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1920'. [ 771.394591][ T29] audit: type=1400 audit(763.731:876): avc: denied { shutdown } for pid=13114 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 771.563858][T13123] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 772.185799][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 773.185664][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 773.215947][T13133] netlink: 'syz.2.1925': attribute type 11 has an invalid length. [ 773.259996][T13133] netlink: 'syz.2.1925': attribute type 13 has an invalid length. [ 773.425092][ T29] audit: type=1400 audit(765.631:877): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 773.754850][T13147] xt_CT: No such helper "snmp_trap" [ 774.067261][T13158] mmap: syz.4.1932 (13158): VmData 37593088 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 774.693937][T13174] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 775.964810][T13189] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 776.170618][T13186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.181600][T13186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.317210][T13189] bond15: entered promiscuous mode [ 776.322765][T13189] 8021q: adding VLAN 0 to HW filter on device bond15 [ 776.336161][T13191] vlan8: entered allmulticast mode [ 776.341783][T13191] bond15: entered allmulticast mode [ 776.356014][T13192] bond15: (slave bridge15): making interface the new active one [ 776.364061][T13192] bridge15: entered promiscuous mode [ 776.369537][T13192] bridge15: entered allmulticast mode [ 776.375780][T13192] bond15: (slave bridge15): Enslaving as an active interface with an up link [ 776.518494][T13186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.595576][T13186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.826390][T13186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.859187][T13186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.000360][T13186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.042807][T13186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.148325][T13205] batadv_slave_1: entered promiscuous mode [ 777.197890][T13205] batadv_slave_1: left promiscuous mode [ 777.349350][ T5929] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.476323][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 777.485350][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1944'. [ 777.504498][T13201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 777.534039][ T29] audit: type=1400 audit(769.467:878): avc: denied { map } for pid=13199 comm="syz.3.1944" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 777.557943][ T5929] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.575241][ T29] audit: type=1400 audit(769.467:879): avc: denied { execute } for pid=13199 comm="syz.3.1944" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 777.951151][ T5929] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.972027][ T5929] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.052439][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 778.061835][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 778.071097][T13212] netlink: 'syz.1.1947': attribute type 11 has an invalid length. [ 778.094351][ T5929] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.102818][ T5929] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.113990][T13212] netlink: 'syz.1.1947': attribute type 13 has an invalid length. [ 778.260158][ T5929] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.706490][ T5929] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.557941][T13232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1953'. [ 781.490127][T13263] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 781.528718][T13263] 8021q: adding VLAN 0 to HW filter on device bond13 [ 781.629197][T13263] bond13: (slave geneve5): making interface the new active one [ 781.723639][T13263] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 782.214376][ T29] audit: type=1400 audit(773.791:880): avc: denied { map } for pid=13269 comm="syz.2.1961" path="socket:[35330]" dev="sockfs" ino=35330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 783.253383][T13288] bridge0: port 1(syz_tun) entered blocking state [ 783.260252][T13288] bridge0: port 1(syz_tun) entered disabled state [ 783.268578][T13288] syz_tun: entered allmulticast mode [ 783.282494][T13288] syz_tun: entered promiscuous mode [ 783.289469][T13288] bridge0: port 1(syz_tun) entered blocking state [ 783.295986][T13288] bridge0: port 1(syz_tun) entered forwarding state [ 783.356765][T13288] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 784.672305][T13311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 785.737860][ T29] audit: type=1400 audit(777.150:881): avc: denied { getopt } for pid=13306 comm="syz.1.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 786.078177][T13326] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 786.127558][T13326] bond13: entered promiscuous mode [ 786.161763][T13326] 8021q: adding VLAN 0 to HW filter on device bond13 [ 786.317348][T13328] vlan9: entered allmulticast mode [ 786.339115][T13328] bond13: entered allmulticast mode [ 786.353513][T13331] pimreg: entered allmulticast mode [ 786.421990][T13326] bond13: (slave bridge12): making interface the new active one [ 786.459940][T13326] bridge12: entered promiscuous mode [ 786.479116][T13326] bridge12: entered allmulticast mode [ 786.502422][T13326] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 787.157254][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 787.185053][T13348] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 789.730233][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1993'. [ 789.794495][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 790.038792][T13395] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 790.151170][T13395] 8021q: adding VLAN 0 to HW filter on device bond14 [ 790.261049][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 790.365066][T13401] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 790.425627][T13400] bond14: (slave geneve6): making interface the new active one [ 790.452987][T13400] bond14: (slave geneve6): Enslaving as an active interface with an up link [ 793.599080][ T29] audit: type=1400 audit(784.496:882): avc: denied { connect } for pid=13432 comm="syz.2.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 793.646777][ T29] audit: type=1400 audit(784.496:883): avc: denied { bind } for pid=13432 comm="syz.2.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 793.726848][T13447] SET target dimension over the limit! [ 793.826960][T13449] loop5: detected capacity change from 0 to 4096 [ 794.190042][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 794.206773][T13468] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 794.453923][ T29] audit: type=1400 audit(785.273:884): avc: denied { ioctl } for pid=13474 comm="syz.1.2020" path="socket:[36127]" dev="sockfs" ino=36127 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 794.523601][ T29] audit: type=1400 audit(785.273:885): avc: denied { write } for pid=13474 comm="syz.1.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 794.670786][ T24] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 794.749134][ T5982] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 794.892808][ T24] usb 3-1: device descriptor read/64, error -71 [ 795.220555][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 795.232285][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 795.243609][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 795.255608][ T5982] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 795.266204][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.274788][ T5982] usb 2-1: Product: syz [ 795.279038][ T5982] usb 2-1: Manufacturer: syz [ 795.284996][ T5982] usb 2-1: SerialNumber: syz [ 795.295345][ T5982] usb 2-1: config 0 descriptor?? [ 795.304803][ T24] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 795.366480][T13489] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 795.389311][T13489] 8021q: adding VLAN 0 to HW filter on device bond12 [ 795.409600][T13489] bond12: (slave geneve4): making interface the new active one [ 795.418747][T13489] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 795.445265][ T24] usb 3-1: device descriptor read/64, error -71 [ 795.552451][ T5982] powermate: unknown product id 0240 [ 795.559194][ T5982] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 795.568035][ T5982] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 795.576732][ T24] usb usb3-port1: attempt power cycle [ 795.588613][ T5982] usb 2-1: USB disconnect, device number 27 [ 795.889358][T13513] loop2: detected capacity change from 0 to 7 [ 795.899585][T13513] Dev loop2: unable to read RDB block 7 [ 795.907920][T13513] loop2: unable to read partition table [ 795.914113][T13513] loop2: partition table beyond EOD, truncated [ 795.920291][T13513] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 795.956528][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 796.001116][ T24] usb 3-1: device descriptor read/8, error -71 [ 796.159600][T13496] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 796.266668][ T24] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 796.323364][ T24] usb 3-1: device descriptor read/8, error -71 [ 796.416882][T13496] usb 4-1: Invalid ep0 maxpacket: 16 [ 796.451957][ T24] usb usb3-port1: unable to enumerate USB device [ 796.598558][T13496] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 796.758093][T13496] usb 4-1: Invalid ep0 maxpacket: 16 [ 796.763629][T13496] usb usb4-port1: attempt power cycle [ 797.002693][ T29] audit: type=1400 audit(787.697:886): avc: denied { create } for pid=13524 comm="syz.1.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 797.030307][ T29] audit: type=1400 audit(787.725:887): avc: denied { setopt } for pid=13524 comm="syz.1.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 797.132556][T13496] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 797.176195][T13496] usb 4-1: Invalid ep0 maxpacket: 16 [ 797.356484][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 797.364233][T13496] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 797.401005][T13496] usb 4-1: Invalid ep0 maxpacket: 16 [ 797.408467][T13496] usb usb4-port1: unable to enumerate USB device [ 797.584443][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 797.633723][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.678913][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.740634][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.777182][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.796574][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.811848][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.822100][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.831452][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.850669][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.858372][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.867734][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.878764][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.887588][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.897527][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.908492][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.916018][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.924983][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.935898][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.948104][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.963843][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.975900][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.991463][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.999431][T13537] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 798.036916][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 798.598106][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 798.606895][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 798.616179][ T24] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 798.624590][ T24] usb 2-1: Product: syz [ 798.628915][ T24] usb 2-1: Manufacturer: syz [ 798.633519][ T24] usb 2-1: SerialNumber: syz [ 798.641169][ T24] usb 2-1: config 0 descriptor?? [ 798.651327][ T24] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 798.882271][ T24] usb 2-1: USB disconnect, device number 28 [ 798.894788][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 799.940585][T13581] 9p: Bad value for 'rfdno' [ 800.103466][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 800.112409][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 800.893526][T11354] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 801.064489][T11354] usb 3-1: Using ep0 maxpacket: 16 [ 801.072099][T11354] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 801.092783][T11354] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 801.102478][T11354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.127211][T11354] usb 3-1: Product: syz [ 801.131732][T11354] usb 3-1: Manufacturer: syz [ 801.136442][T11354] usb 3-1: SerialNumber: syz [ 801.151190][T13582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 803.192579][T11354] usb 3-1: selecting invalid altsetting 1 [ 803.808045][T11354] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 803.849664][T11354] usb 3-1: USB disconnect, device number 39 [ 803.948865][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.039600][T13637] loop6: detected capacity change from 0 to 7 [ 804.049349][ C0] blk_print_req_error: 25 callbacks suppressed [ 804.049369][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.065235][ C0] buffer_io_error: 25 callbacks suppressed [ 804.065254][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.101234][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.110871][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.166744][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.176437][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.190281][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.199885][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.209406][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.218990][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.237325][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.246947][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.255579][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.265161][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.273082][T13637] ldm_validate_partition_table(): Disk read failed. [ 804.287051][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.296734][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.318929][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.328627][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.340085][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.349752][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 804.372148][T13637] Dev loop6: unable to read RDB block 0 [ 804.403623][T13637] loop6: unable to read partition table [ 804.410403][T13637] loop6: partition table beyond EOD, truncated [ 804.416786][T13637] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 804.441295][T11354] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 805.288232][ T29] audit: type=1400 audit(795.426:888): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 805.296141][T11354] usb 4-1: device descriptor read/64, error -71 [ 805.511592][ T29] audit: type=1400 audit(795.660:889): avc: denied { read } for pid=13659 comm="syz.2.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 805.670185][T11354] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 806.086939][T11354] usb 4-1: device descriptor read/64, error -71 [ 806.204658][T11354] usb usb4-port1: attempt power cycle [ 806.567800][T11354] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 806.603897][ T29] audit: type=1400 audit(796.671:890): avc: denied { create } for pid=13677 comm="syz.1.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 806.615472][T11354] usb 4-1: device descriptor read/8, error -71 [ 806.989718][T11354] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 807.380587][ T6119] ------------[ cut here ]------------ [ 807.386510][ T6119] time_after(jiffies, timeout) [ 807.386525][ T6119] WARNING: io_uring/io_uring.c:2342 at io_ring_exit_work+0x42d/0xd15, CPU#0: kworker/u8:9/6119 [ 807.401871][ T6119] Modules linked in: [ 807.406162][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.417288][ T6119] Tainted: [L]=SOFTLOCKUP [ 807.421624][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.431765][ T6119] Workqueue: iou_exit io_ring_exit_work [ 807.437457][ T6119] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 807.443846][ T6119] Code: 8e e8 07 25 40 01 48 8b 05 60 b1 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 8e 91 d3 00 4d 85 ed 79 12 e8 a4 96 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 92 96 d3 00 48 8b 74 24 38 [ 807.463590][ T6119] RSP: 0018:ffffc9000586fab0 EFLAGS: 00010293 [ 807.469715][ T6119] RAX: 0000000000000000 RBX: ffff88804eda2778 RCX: ffffffff81356132 [ 807.477730][ T6119] RDX: ffff888027e6a4c0 RSI: ffffffff8135613c RDI: ffff888027e6a4c0 [ 807.485728][ T6119] RBP: ffffc9000586fc38 R08: 0000000000000007 R09: 0000000000000000 [ 807.493959][ T6119] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88804eda2000 [ 807.502075][ T6119] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 807.510086][ T6119] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 807.519106][ T6119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.525703][ T6119] CR2: 00005555589ed4e8 CR3: 000000008525b000 CR4: 00000000003526f0 [ 807.533728][ T6119] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 807.541732][ T6119] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 807.549713][ T6119] Call Trace: [ 807.553045][ T6119] [ 807.555992][ T6119] ? __pfx_io_ring_exit_work+0x10/0x10 [ 807.561504][ T6119] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 807.567363][ T6119] ? debug_object_deactivate+0x2e4/0x3b0 [ 807.573130][ T6119] ? rcu_is_watching+0x12/0xc0 [ 807.577938][ T6119] process_one_work+0xa23/0x19a0 [ 807.582967][ T6119] ? __pfx_process_one_work+0x10/0x10 [ 807.588377][ T6119] ? __pfx_io_ring_exit_work+0x10/0x10 [ 807.593918][ T6119] worker_thread+0x5ef/0xe50 [ 807.598535][ T6119] ? kthread+0x13a/0x450 [ 807.602785][ T6119] ? __pfx_worker_thread+0x10/0x10 [ 807.607973][ T6119] kthread+0x370/0x450 [ 807.612056][ T6119] ? __pfx_kthread+0x10/0x10 [ 807.616912][ T6119] ret_from_fork+0x754/0xd80 [ 807.621519][ T6119] ? __pfx_ret_from_fork+0x10/0x10 [ 807.626683][ T6119] ? __switch_to+0x7b4/0x1120 [ 807.631376][ T6119] ? __pfx_kthread+0x10/0x10 [ 807.635980][ T6119] ret_from_fork_asm+0x1a/0x30 [ 807.640804][ T6119] [ 807.643844][ T6119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 807.651119][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.662137][ T6119] Tainted: [L]=SOFTLOCKUP [ 807.666452][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.676498][ T6119] Workqueue: iou_exit io_ring_exit_work [ 807.682056][ T6119] Call Trace: [ 807.685331][ T6119] [ 807.688254][ T6119] dump_stack_lvl+0x100/0x190 [ 807.692937][ T6119] vpanic+0x552/0x970 [ 807.696918][ T6119] ? __pfx_vpanic+0x10/0x10 [ 807.701427][ T6119] panic+0xd1/0xe0 [ 807.705143][ T6119] ? __pfx_panic+0x10/0x10 [ 807.709570][ T6119] ? check_panic_on_warn+0x1f/0x90 [ 807.714677][ T6119] check_panic_on_warn.cold+0x19/0x34 [ 807.720084][ T6119] ? io_ring_exit_work+0x42d/0xd15 [ 807.725200][ T6119] __warn.cold+0x191/0x348 [ 807.729615][ T6119] __report_bug+0x296/0x3d0 [ 807.734122][ T6119] ? io_ring_exit_work+0x42d/0xd15 [ 807.739238][ T6119] ? __pfx___report_bug+0x10/0x10 [ 807.744266][ T6119] ? irqentry_exit+0x180/0x670 [ 807.749033][ T6119] ? lockdep_hardirqs_on+0x78/0x100 [ 807.754247][ T6119] ? irqentry_exit+0x180/0x670 [ 807.759019][ T6119] ? io_ring_exit_work+0x42d/0xd15 [ 807.764127][ T6119] ? io_ring_exit_work+0x42d/0xd15 [ 807.769229][ T6119] report_bug+0xb2/0x220 [ 807.773464][ T6119] ? io_ring_exit_work+0x42d/0xd15 [ 807.778564][ T6119] handle_bug+0x16a/0x2a0 [ 807.782891][ T6119] exc_invalid_op+0x17/0x50 [ 807.787379][ T6119] asm_exc_invalid_op+0x1a/0x20 [ 807.792212][ T6119] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 807.797920][ T6119] Code: 8e e8 07 25 40 01 48 8b 05 60 b1 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 8e 91 d3 00 4d 85 ed 79 12 e8 a4 96 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 92 96 d3 00 48 8b 74 24 38 [ 807.817516][ T6119] RSP: 0018:ffffc9000586fab0 EFLAGS: 00010293 [ 807.823570][ T6119] RAX: 0000000000000000 RBX: ffff88804eda2778 RCX: ffffffff81356132 [ 807.831527][ T6119] RDX: ffff888027e6a4c0 RSI: ffffffff8135613c RDI: ffff888027e6a4c0 [ 807.839481][ T6119] RBP: ffffc9000586fc38 R08: 0000000000000007 R09: 0000000000000000 [ 807.847438][ T6119] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88804eda2000 [ 807.855393][ T6119] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 807.863356][ T6119] ? io_ring_exit_work+0x422/0xd15 [ 807.868461][ T6119] ? io_ring_exit_work+0x42c/0xd15 [ 807.873568][ T6119] ? __pfx_io_ring_exit_work+0x10/0x10 [ 807.879045][ T6119] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 807.884843][ T6119] ? debug_object_deactivate+0x2e4/0x3b0 [ 807.890473][ T6119] ? rcu_is_watching+0x12/0xc0 [ 807.895226][ T6119] process_one_work+0xa23/0x19a0 [ 807.900160][ T6119] ? __pfx_process_one_work+0x10/0x10 [ 807.905523][ T6119] ? __pfx_io_ring_exit_work+0x10/0x10 [ 807.910973][ T6119] worker_thread+0x5ef/0xe50 [ 807.915577][ T6119] ? kthread+0x13a/0x450 [ 807.919805][ T6119] ? __pfx_worker_thread+0x10/0x10 [ 807.924897][ T6119] kthread+0x370/0x450 [ 807.928947][ T6119] ? __pfx_kthread+0x10/0x10 [ 807.933534][ T6119] ret_from_fork+0x754/0xd80 [ 807.938132][ T6119] ? __pfx_ret_from_fork+0x10/0x10 [ 807.943246][ T6119] ? __switch_to+0x7b4/0x1120 [ 807.947921][ T6119] ? __pfx_kthread+0x10/0x10 [ 807.952497][ T6119] ret_from_fork_asm+0x1a/0x30 [ 807.957260][ T6119] [ 807.960563][ T6119] Kernel Offset: disabled [ 807.964866][ T6119] Rebooting in 86400 seconds..