last executing test programs: 4.22315281s ago: executing program 0 (id=1256): r0 = socket$netlink(0x10, 0x3, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 4.142698889s ago: executing program 0 (id=1257): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x40, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80810}, 0x4800) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060103dc4d17f525456033d8c4d62f0000102ba0baa3ff4fe8aeacf4b0b5522fe225253b519a2fd164eee95cecba9a483b92da"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000000c0000000700000000000000", @ANYRES32, @ANYBLOB="004448d66d0200000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000e00"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, 0x0, &(0x7f0000000380)=""/53}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x100) ioctl$PPPIOCATTACH(r4, 0x4004743d, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$int_in(r5, 0x5421, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x288480, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x11) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$vsock_stream(r7, 0x0, 0x0) r8 = dup2(r6, r6) socket$kcm(0x29, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14008c0000000000000000000000000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000001c0)=ANY=[]) socket$unix(0x1, 0x1, 0x0) 1.685954136s ago: executing program 3 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000400000001000000", @ANYRES32, @ANYBLOB="0000f27ffffe975665c598c42ba0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2, 0x10000}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000540), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00626f6e640000000066ac0d9948854923b0f9227e802ba60c0002800500010004000000ef63b40cc2d8bf3431a6b4d4ea5bb248f231"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.07117891s ago: executing program 0 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000440)="f6f4e9a100000000002a8ba478bbb7dbfc007024", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.070483306s ago: executing program 0 (id=1295): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x282903, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x5, r1, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x2, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000400)={0x600, 0x9, &(0x7f0000000300)=[r5, r2, r3, r5, r5, r3, r3, r9, r4], &(0x7f0000000340)=[0x7ff, 0x8, 0x9, 0x1], &(0x7f0000000380), &(0x7f00000003c0)=[0x7fffffffffffffff, 0x4], 0x0, 0x8}) r10 = syz_open_dev$dri(&(0x7f0000000440), 0x3, 0xc00) ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f00000004c0)={r6, 0xc, 0x101, 0x41, 0x3, [0x0], [0xd410, 0x0, 0x800, 0x9], [0x6, 0x2, 0x80, 0xffffffff], [0x3, 0xfff, 0x0, 0x2dd]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000540)={r11, 0x40}) r13 = eventfd2(0x24b, 0x80001) write$eventfd(r13, &(0x7f0000000580), 0x8) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000005c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r13, 0x3b83, &(0x7f0000000640)={0x28, 0x10000, r14, r15, 0x18b813, 0x80000000, 0x5, 0x353102}) r16 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x80800, 0x38) ioctl$sock_SIOCINQ(r16, 0x541b, &(0x7f00000006c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000700)={r12, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r16, 0x40a85323, &(0x7f0000000740)={{0x4, 0x45}, 'port0\x00', 0x28, 0x2006d, 0xa, 0x0, 0x0, 0xb, 0x20000000, 0x0, 0x1, 0xfa}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(r16, 0xc06864a2, &(0x7f0000000840)={&(0x7f0000000800)=[r9, r8], 0x2, r7, r1, 0x1, 0x8db3, 0x7fffffff, 0x0, {0x8000, 0x5e, 0x3ff, 0x3, 0x7ff, 0x917, 0x0, 0x4, 0xf55, 0x3, 0x1, 0x5, 0x8, 0x7, "6ce8936d5e97fd526aec40372361c09d6780dad69a75551ea045fd2ddfc19466"}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r16, 0x89f8, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x7, 0x20, 0x7, 0xd, {{0x12, 0x4, 0x2, 0x1, 0x48, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x7, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x6}, {@empty, 0x198}]}, @noop, @ssrr={0x89, 0xb, 0xf2, [@loopback, @dev={0xac, 0x14, 0x14, 0x3d}]}]}}}}}) sendmsg$nl_route(r16, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@bridge_newneigh={0x60, 0x1c, 0x20, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r18, 0x4, 0x24, 0x2}, [@NDA_NH_ID={0x8, 0xd, 0x9}, @NDA_NH_ID={0x8, 0xd, 0x5}, @NDA_PROTOCOL={0x5, 0xc, 0x1}, @NDA_CACHEINFO={0x14, 0x3, {0xca95, 0x4, 0x7f, 0x2}}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_PORT={0x6, 0x6, 0x4e21}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000ac0)={0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000b40)={0x5, 0x100000000, 0x80010000000000, 0x4, 0x4f4c, 0x0, 0x1}) r20 = openat$incfs(r19, &(0x7f0000000b80)='.pending_reads\x00', 0x40003, 0x90) epoll_ctl$EPOLL_CTL_ADD(r19, 0x1, r20, &(0x7f0000000bc0)={0x1}) ioctl$DRM_IOCTL_DMA(r17, 0xc0406429, &(0x7f0000000d00)={r11, 0x3, &(0x7f0000000c00)=[0x2, 0xfffffff8, 0x9a], &(0x7f0000000c40)=[0x0, 0x3], 0x0, 0x7, 0x2, &(0x7f0000000c80)=[0x28, 0x4, 0x7, 0xb8, 0x9, 0xffff2120, 0x6], &(0x7f0000000cc0)=[0x8001, 0x6ab22a88, 0xff, 0x7, 0x7, 0x6c022032, 0x9, 0xc8, 0x2, 0x7f]}) mkdirat(r20, &(0x7f0000000d40)='./file0\x00', 0x118) getsockopt$IP_VS_SO_GET_TIMEOUT(r20, 0x0, 0x486, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) socket$netlink(0x10, 0x3, 0x9) 1.00889265s ago: executing program 0 (id=1298): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x89f0, &(0x7f00000194c0)={0x40, 0x4, 0x10008, 0x2, 0xf, "a533b6aaf9f659ff35036bf79d8b4c22246305", 0x9, 0x9}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x2}, 0xfffffffffffffee9) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000040)=0x8000, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000040)=0x8000, 0x4) 775.482985ms ago: executing program 3 (id=1304): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x301002, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000540)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a\xf2T\xde8s]q\xc7!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbf\xc5\xfets\x9c\xf9C\xca\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f0000000140)=0xc) setpriority(0x2, 0xff, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r4, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='gfs2\x00', 0x21000d, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18, 0x8800}}], 0x1, 0x20040804) (async) accept4$unix(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="e0110000140000022abd7000fbdbdf250a0000001800928004003c8008004500ffffff7f0800b900", @ANYRES32=r3, @ANYBLOB="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"], 0x11e0}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000fb005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d000000000600000001000000000000000000000000000000000000000900000000000000010000000300"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x448c0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 653.83231ms ago: executing program 3 (id=1308): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES16=r0, @ANYRESDEC=r2, @ANYBLOB="1251f6d1cbef5d7e4853d66a1458eb8fa3ae8bc0e1e92a70ea0d8e3b6009bb56e8bf5f615c8230fa4e9a2a", @ANYRES64=r1, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES64=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250300000008000100000003"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f0000000080)}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) lseek(r7, 0x800005, 0x1) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, @val={@void, {0x8100, 0x4, 0x1, 0x6}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "a815a23da43974ff"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="39f5ff00", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250f00000005000f000600000005000f000700000005000f000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008041}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)={0x88, r10, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'task\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'task\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa981}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x178}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8c}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4002) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r11 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r11, 0x80106f53, &(0x7f00000016c0)={0x15, &(0x7f0000001600)=[{0x5, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x3, @uvalue=0x2}, {0x3, @uvalue=0xfffffffffffffffc}, {0x2, @uvalue=0x9}]}, 0x3}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 653.451795ms ago: executing program 2 (id=1309): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4a}}, './file0\x00'}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x6ea, 0x0, 0xd, 0x1, 0x7, 0x0, 0x1, 0x9c, 0xff, 0x3, 0x1, 0x17, 0x2}, {0x0, 0x7, 0xd, 0x6, 0x2, 0x6, 0x3, 0x80, 0x1, 0xfb, 0x9, 0x1, 0x6}, {0x4, 0x0, 0x4, 0x5, 0x1, 0x8, 0xae, 0x0, 0x9, 0x40, 0xb4, 0x0, 0x1b}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r4 = socket$inet_sctp(0x2, 0x1, 0x84) mknod(&(0x7f0000000200)='./file0\x00', 0x100, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10f, 0x10f, 0x4, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x3, [{0x3, 0xdabd, 0x3}, {0x5, 0x6, 0x10000}, {0x1, 0x401, 0xa}], "13f368"}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x4}, {0x2}, {0xd, 0x5}, {0xb}, {0xc, 0x1}, {0x6, 0x4}, {0x3, 0x2}, {0xc, 0x2}, {0x0, 0x2}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x4, [{0x7, 0x5, 0x6}, {0xb, 0x2, 0x8e7}, {0xb, 0x0, 0x4}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x40, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0x2, 0x1}, {0xd, 0x1}, {0x8, 0x3}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000600)=""/79, 0x12c, 0x4f, 0x1, 0xb}, 0x28) r7 = dup2(r6, r4) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000300)={0xa, 0x4e23, 0x570a81f2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000003c0)=':', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x4000050) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r8, 0x7aa, &(0x7f0000000480)={{@my=0x1, 0x5}, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000000c0)={r5}, 0x8) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000080)="1b7740b1da22f9d70b547b308d9f2ec46f7d4cdcd06443273d7abd2431a43b17e66e1e912a52745894af59fb77e22a0f67185bfe", 0x34) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000900)={{}, "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"}) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x200080f5) 564.180332ms ago: executing program 1 (id=1310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x20a80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$FUSE_POLL(r3, 0x0, 0x0) (async, rerun: 64) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000680)={0x2, 0x0, 0x98, &(0x7f00000004c0)={0x2, 0x0, 0x12}}) (async, rerun: 64) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000000000)={0x1, 0x9, 0x1, 0x0, @lba=0x80, 0x7}) (async) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000108, 0x0, 0x9}]}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="010010000000000000000400000008000700e00000020800020005000000080008000a01010006000b0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) 554.666103ms ago: executing program 2 (id=1311): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async) syz_open_dev$dvb_dvr(&(0x7f0000000280), 0x0, 0x10b401) (async) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast2}], 0x10) listen(r1, 0x100) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = dup(r1) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='@', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES64=r3, @ANYBLOB="b277700b0970daf38ba066925d6aa1d1a1df3bbf59a34f609c8c013b66cae7a8ade2d7681b10aa762f1e695b99769a42e7db3b375756fa572ad29aa292a6c067fb848276acda277bf23a42272f93e587800715f72652d9bc102bdf331dd60a62", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r2], 0x18}, 0x8050) 461.841585ms ago: executing program 2 (id=1312): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x4000, 0x2, {0x77359400}, {0x5, 0x1, 0xfb, 0x34, 0x41, 0x5, "5a0a0327"}, 0x8, 0x3, {0x0}, 0x80}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000100)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x654042, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x7) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x69872afb9afbe1fc) 383.475179ms ago: executing program 1 (id=1313): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x800) r2 = accept4$tipc(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="957c0bdcffbc8420b032f9558171d7207f2b1cd4add7b602fbcfb6984fadcfe9e5a1d2f44de7", 0x26, r2}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c00078005"], 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000400000004000000ad0000000000000085fac0d8894f3e0269906223362ce44e5f6f3743c2351e218789c64c9d68682b1edbce6ee48feecff290eafdf5e62464347e780cd9a6f8cfaccd313e3a23b7098e5ad6c62cd690d811259533cd3de2b77027c88317b5237fdf5fc2a389ac6bfc94edc726bdd2473e431eef658e9596bf4efe30b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r7) 382.774452ms ago: executing program 2 (id=1314): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x149400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)}, {&(0x7f0000000680)="2cdcec389d3ec88af43a86d90c8551f68ec10d07ef59e45e1efce67f667f2d0b2d487b992a5ef6469ddba51638c16b9dc808838cf387b468994fcf334ba352b2a525822d19043c36ece64a938a55febbfe17d8f5a6afac710fcb39d1ea6732ea6c2c54b496d9c8f81ff8e8fe613ec85596665fa709d54d11a984c5d3d21551da0cb00b982157b1c9448acbc798c0b349f13f0b78abfa75d5fa0de102cb9304b681c2eda77060651fc463d4137df38887744ea57fe1196302c6ce1295c9dc35f254aa59e28f4ec2388796616a2ad108b2c300d847c834b258fdf7fe7c2d2b3b5f335b5bfa51a6a119eb6506f5d746e07ac38820d9bdafbecaf9", 0xf9}, {&(0x7f0000000100)="0cb519979de3d9f8a5dca24ce42af434", 0x10}, {&(0x7f0000000240)="ef92124c7fd55d754116d03df75e3d536b40be036c94123a52ccb7ca37c0ec91b33eade8ed20c5432d6948efea8988f5ad64baf821daf981054c44787c81d6da50552c5e777834038aa31a7cd5cfa00f3a71f207e5dde1598be302559807d60a955292dee86a2a0da9090fe3b586b2c478fff7d1c9724a46a3a48f9ca7c14bcd59ab5d2418b13daccca148a1feec0432ca7eae5960aafacbd718c93d0f031a9cd67653ef1f00c62bd2440455e8db13a7798178f09674058b175c6889a3f6f7b735a68d01565b4c15473a0994e451be2830a2bf713b1e862dc4f1329f20e907dd9491ced2a876cda782f22df3d877631b333a37280e8e1500", 0xf8}, {&(0x7f0000000140)}, {&(0x7f0000000180)="7e6a6907d9396f9e47a416820308e993f8d60ba22008a29043914d0cc07bd8dc0d086d80cc2c189540e322a826b7c8526536d48736ba5227a697d2855ed5b3feb35200cb6d5343d5eec6f72b6f60fc67c48d80e4e2a9e7ab7ab14e4d32b0f1c96d9b05539945cad22d98a1c777915e5db333", 0x72}, {&(0x7f0000000340)="59674d214b5f509f4b98582cadd4dd6c390655e2d9246651acf04f23abb9089f45a14389955f63697687eb4b3c8f63fb4c83fcab20997745a52948a15865606a8d76f80d4b7cc9d3c663efca6d8cd7", 0x4f}], 0x7, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x88, 0x7, '\x00', [@ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x3, [0xc, 0x5, 0x8, 0x6]}}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xb0}, 0x20000000) 292.588979ms ago: executing program 2 (id=1315): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x420000, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000005c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a583e2", 0x1c, 0x2c, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@routing={0x8, 0x0, 0x0, 0xe}], {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000006c0)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a80", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x40, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @tick=0xc227, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x15, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './cgroup/../file0\x00'}, 0x6e) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) 292.339192ms ago: executing program 1 (id=1316): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000040)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, &(0x7f0000000500)) 290.47949ms ago: executing program 3 (id=1317): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0xc3072, r0, 0x17c4f000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 230.465875ms ago: executing program 3 (id=1318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r2, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x1}, {0xd000, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x3, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x4, 0x9, 0x0, 0x3, 0x80, 0x0, 0x10, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0xd, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0x2, 0xeeee8000, 0x3, 0x82, 0x9, 0x3, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60000010, 0x0, 0x0, 0x10, 0xf, 0x0, 0x900, [0x0, 0x0, 0xfffc, 0x3]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_usb_connect$uac1(0x6, 0x8f, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x2, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x449, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf9, 0xcf, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x10, 0x3, "d7", "e862f2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf4, 0x1, 0x5, {0x7, 0x25, 0x1, 0x1, 0x2, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0xcc, "b8", "28f0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0xf6, 0x5, {0x7, 0x25, 0x1, 0x81, 0x81, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x4, 0x2, 0x5, 0x20, 0x6}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x10, 0x0, 0xa, [0x0]}, @ptm_cap={0x3}, @generic={0x24, 0x10, 0x4, "45d0e4ef0069a2661077337d0cc97f3abd955d4fed8454e9c54bdc81ba7d84249f"}]}, 0x2, [{0xfc, &(0x7f00000005c0)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x439}}]}) syz_usb_control_io(r8, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x20, 0x23, 0x43, {0x43, 0x4, "4f8ce96ddd0d65917810dcb4084f4c7b55a8ae4aa08ae584a2545b0f250745dab8d2eddf4863abfbb9f2de1be97b529cbf32898ef5d6df4c7eee95ef81f905ccfb"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000740)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x4, [@generic={0xcf, 0x10, 0xb, "58bfd3ef75db91d1725e62b84062d73d68c52e2819136750d26ba497b27ab27214635bde441c583f4c6c2d7e9689f53c41964e2f1a288fffbe2a61985c99d3e47738a0b82aa80af18d3e52b40c554a98e683da845855b986c686e0bd1f561feb3fd2144bfa647ecf2f247ea2bdab7e2a5059620adc3c8e1056a5df990be22644391f1a97b4f5948d9b2dfc58255fff1b34ee259427d36d24d322b0fb10c77ab18357064c465d481ad09e82a2b46782074689328f1170df8de98b2f9e9532fb0470d79f427f6e200a8eaa3d23"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0xc, 0xfff9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xd, 0x1, 0x5b, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xa, 0x1}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x8, 0x6, "35422318", "1b371421"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xcf, 0x18, 0x4, 0x1, 0x6, 0x7f, 0xc}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x0, 0xe, 0xe7, "492a254da674c78017713a33668d8540b8083e336b8c92451ceacb149d58111ee90824b6cff65c4c4f1d9e2fbf9cace4c6ba0cd19eb85bbb759e1f8740ced66b7c03b543e63fb81ade37f000b20ca23d7e7b99a10ce5d1fc12f1498282cd1d2951b5e131edaf3d99580bef1b2186df9c2afee66542ceb66d5b9056f9c29d643228927bc3468d184a6243be9357644308ae8e50a2a3f1a5012ca6e3cdf54f38bb05772642b19147e0ca9a701f96368f1aa9c4da53a2c02e69ea6a4e6184a9760f8f7cab20839737bde69801d73740c8bbc4148ea207fa5844153de11c56822a270e8672e6056d33"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x93}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x4, 0x80}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x12}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "3df1"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000000)={0x40, 0x13, 0xffffffffffffff09}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, &(0x7f0000000c40)={0x40, 0x19, 0x2, 'D\r'}, &(0x7f0000000340)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x6d}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x5}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r10, 0xc00c6211, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r10, 0xc00c6211, &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000500"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xcc, 0x212301) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r3, 0x25, 0x6}, 0x14) r12 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r12, 0x5, &(0x7f0000000240)='GPL\x00', 0x0, r1) 229.92514ms ago: executing program 1 (id=1319): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newtaction={0x834, 0x30, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{0x820, 0x1, [@m_tunnel_key={0x178, 0x19, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x10000000, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0xd3, 0x6, "881e47a0f310e087013c12188bcbde72c3a6676c4c3dffa57ef64253ae4051e06fa4365c45d76ad3a4d4a8956c54fe4a85f5463011e25b7f907227d4ebee30178837f4f39a177a51eb396ba619e369e8b09226ea9afab5c5366340ed39ba3e1f2458a7de300ccec319c2c5f58185d4763dd33af62153a84f95b7dfa81ace7c288c1f6902a1954abab08f28c43da18262c1f26a8321d6a4d031a980845643e043e803d492bd36ebc6163e89a39346c32b5328779206e6a37ddd20ce7bc6762b40691f14c8cf0fc86f0eef9bc8fb7d33"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x194, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x35, 0x6, 0xb39, 0x1}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x20000000, 0x80}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xe, 0x2, 0x6, 0x2a55}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6, 0xf, 0x1}, 0x1}}]}, {0xe6, 0x6, "c9284ead9367a9f594d68dfbdd621da46cab79c9012b229b5c1b25db7b7467cbf8034b713ab6c9dd7cbff851094c332df84a87dd28aabd4a67601da724865f2b27c0a00b43e9e30c6965525812c358a6416402a0d0c4f2d8874858e22ebbebc20f0ce5e2012a9133ff3f59d4c78c7b02f44e57b6c7982e98ea2f382fe4ac07449ccfde5dda2eaf8e67661fb0d298bc0331f064780a1696bd819266c78b153181b0421b108d9fb477f694ed5cada68611a4876cd8b6b773f7b5c2237bb72b8a1169ef9ae7e72c1a6191b1e4cd931e701fde94aa4b0a2225e380bbfae04911950005cf"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x27c, 0xd, 0x0, 0x0, {{0x7}, {0x22c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x84, 0x6, {0x8, 'raw\x00', 0x5, 0x799a, "893729ba1cce94da7f972e5caabadb649d1747c2d8b81b9bbde7a9acbdf345514c7bdbd611e31fe4c16e2655ad6d5556ce9232d12fe9c494f2e0340b3d3d25eec42c4b5a6342bd0ca3a761880c53946bc398b4e95a0663afc2bc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe5, 0x6, {0x3, 'nat\x00', 0x81, 0x74a8, "aaa0ca69c0c4d032d74396dbbed5cf9bc4d5632905cba5ab4ed95d27c8bd828b1babeb23e666a05f98b64297773ac615f4dd2a80b0734700622177f4ebb3825530daf42a62f17bbf83d605700200025304cab67488954a5f3fb0b95c2fac7760c69e755f1e4e9b55ecb22a1749cae5606d4aaf8bd0f61b0c31d98f660d2d1b248f5739ba38a31444c03fad7717961194d92a7fb7cbadcec214c2ca1e2a5d50d826c292f7af5d89784ce2573379ae4f78e497244700f2f9578f60dc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x2b, 0x6, "3e38a83da06a7dea0b6af85fdc5080fad36ca052346276745bd31987698fa005de444f080f2a62"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x150, 0x1c, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x7f, 0x3, 0x8, 0x60000}}, @TCA_CT_LABELS={0x14, 0x7, "824d21441a9f89c2ca4e17659069f565"}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x9, 0xffffffffeffffff9, 0x6, 0xb29}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xc7, 0x6, "53e27438187435ca473947dcb1afa46ec059063bce93246f3eee772543f12ca7076aa8f15e617e40a642e2f44f9c8a4b1d3c2420b0b51cd79d0f3969d36e92d655f823a316694defa68cc4828d70ede8467c90a4d8870ee49248ceac0ed5055709e0460021e9bd1547b16c12135c328a9d0064a38fe8e2f91eee1888638050859a075f328b7b9ba2d2d407aab5b61c72ca4b86628f0a0c8649c56f4cc7f3ce17e621a6b55cad8b027fcf34a93918ba47a3f5cdac51afaf0071bca91e78e319fd4e88d5"}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_csum={0x144, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0xffffffff, 0x6, 0x1ff}, 0x70}}]}, {0xfc, 0x6, "89344e836ed830cd0994a9fb57a8928265c3ea45790791a2acb078489a13a282d5d15ac81ca262ff9c65e35d4175a507f8f43644abc6227b7c08b793124541b6732a3c97bbc7a6cc27a4dff6b4761e817d7dbc3c913d1afcef0f1f85d9a4f2c20a216ca0b0aa7ccdad7b62236312ed4ed95dad714663096f5289bb14373ab8b6f82dffc7b29e042dc9e8fa8a5076dcbfb135f38bb3da994eac18dc155e659e3e3162d62784f377b5a2fd387d437d21165647fad6858c8360c18980f9a2b7109502710d1feb4dc3ebf73c844f920850610c77453f3f52e55d677902ddc2d7d07b75cfa1e5fbd30d939027f743b04ed0e6beb8fcaaacee8711"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x834}, 0x1, 0x0, 0x0, 0xc804}, 0x8802) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00053c031500000000ff8800000001000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r8 = socket$netlink(0x10, 0x3, 0x5) r9 = socket(0x10, 0x803, 0x0) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES8=r11, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000008b000000c98996be08eb0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r13, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r14, &(0x7f00000076c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="2911bf7dddcda283f7ef2ada33aee763dd6c0de8fa8c2a516f6d162af34d15", 0x1f, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r14, 0xc00464be, &(0x7f0000000240)={r15}) 100.972849ms ago: executing program 2 (id=1320): r0 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x27e, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002e3779b106d04d908e0e80102030109026c0201540570050904d00c08972d720e09050a0020007b0480090508100002080f0707250100101f001c09e0b063293bdb249899d55cfefe111ac4f3a4c5cf685742de2b53090500041000220244090500108f000608100725018300070009050000400205038107250180050101090580104000000dfd07250180bbe49609050b02400005f102180d750d5f75cdf611680ca4abf94029fd5f11135d4e99ac07250101030000090501101002070800f823d873a8b2f8f0fe3fce4780af1556a9181ebdf3b0313091dd9b20f283b206faff3619d8d60ffbbf520fa674675d129c627243462b8edd9eab517832ea6f5c167b0eb963461d6e6698d3586c317790b2c1fcaba16cc0716e24b69de7589f7671254115fc04350cfb80924e61fd726713668db2f4855c38fe5323db"], 0x0) 0s ago: executing program 0 (id=1321): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1fffffffffffff36, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRESOCT=r0, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2a}, 0x94) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x102}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0, 0xe}], 0x3}, 0x3}], 0x2, 0x82, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x800}, 0xc880) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010006cde0c8f0dfa3f32000000000000", @ANYRES32=0x0, @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x48014}, 0x0) kernel console output (not intermixed with test programs): sb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.517544][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.571749][ T6767] NILFS (nbd1): device size too small [ 226.758882][ T6787] macsec0: entered promiscuous mode [ 226.761811][ T6787] macsec0: entered allmulticast mode [ 226.763733][ T6787] veth1_macvtap: entered allmulticast mode [ 226.829058][ T6789] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 226.850946][ T6792] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 226.858692][ T6794] x_tables: duplicate underflow at hook 1 [ 227.287187][ T6817] usbtmc 7-1:16.0: simple usb_control_msg failed -32 [ 227.306705][ T39] usb 7-1: USB disconnect, device number 2 [ 227.333413][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.403771][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.475534][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.539634][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.542625][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.547144][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.552131][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.556180][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.588257][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.631146][ T6832] bond1: Unable to set down delay as MII monitoring is disabled [ 227.637350][ T6832] bond1 (unregistering): Released all slaves [ 227.833204][ T6845] bridge_slave_0: entered promiscuous mode [ 227.835782][ T6845] bridge_slave_0: entered allmulticast mode [ 227.890686][ T6852] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 227.897871][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 227.943550][ T46] bridge_slave_1: left allmulticast mode [ 227.946128][ T46] bridge_slave_1: left promiscuous mode [ 227.957910][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.970141][ T46] bridge_slave_0: left allmulticast mode [ 227.972628][ T46] bridge_slave_0: left promiscuous mode [ 227.976085][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.180832][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.185209][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.189230][ T46] bond0 (unregistering): Released all slaves [ 228.302101][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.306707][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.310597][ T6829] bridge_slave_0: entered allmulticast mode [ 228.314863][ T6829] bridge_slave_0: entered promiscuous mode [ 228.319752][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.320748][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 228.320760][ T40] audit: type=1400 audit(228.234:351): avc: denied { sqpoll } for pid=6882 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.322894][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.327059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 228.333610][ T6829] bridge_slave_1: entered allmulticast mode [ 228.337120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 228.340991][ T6829] bridge_slave_1: entered promiscuous mode [ 228.420726][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.426336][ T40] audit: type=1400 audit(228.334:352): avc: denied { read } for pid=6882 comm="syz.2.251" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.428799][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.456318][ T40] audit: type=1400 audit(228.334:353): avc: denied { open } for pid=6882 comm="syz.2.251" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.513095][ T6829] team0: Port device team_slave_0 added [ 228.520823][ T6829] team0: Port device team_slave_1 added [ 228.570142][ T40] audit: type=1400 audit(228.484:354): avc: denied { append } for pid=6900 comm="syz.1.253" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 228.615368][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.618677][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.629034][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.643668][ T40] audit: type=1400 audit(228.554:355): avc: denied { ioctl } for pid=6905 comm="syz.1.254" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 228.662428][ T46] hsr_slave_0: left promiscuous mode [ 228.667615][ T46] hsr_slave_1: left promiscuous mode [ 228.670682][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.673883][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.688068][ T46] veth1_macvtap: left allmulticast mode [ 228.690827][ T46] veth1_macvtap: left promiscuous mode [ 228.693590][ T46] veth0_macvtap: left promiscuous mode [ 228.696110][ T46] veth1_vlan: left promiscuous mode [ 228.702084][ T46] veth0_vlan: left promiscuous mode [ 228.858341][ T40] audit: type=1400 audit(228.774:356): avc: denied { write } for pid=6908 comm="syz.1.255" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.879210][ T46] team0 (unregistering): Port device team_slave_1 removed [ 228.892972][ T46] team0 (unregistering): Port device team_slave_0 removed [ 228.912814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.916774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.921913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.984211][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.986383][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.996355][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.027478][ T6829] hsr_slave_0: entered promiscuous mode [ 229.029808][ T6829] hsr_slave_1: entered promiscuous mode [ 229.105507][ T6915] __nla_validate_parse: 7 callbacks suppressed [ 229.105525][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 229.130608][ T6915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.339056][ T40] audit: type=1400 audit(229.254:357): avc: denied { create } for pid=6933 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 229.366373][ T40] audit: type=1400 audit(229.254:358): avc: denied { ioctl } for pid=6933 comm="syz.3.261" path="socket:[12206]" dev="sockfs" ino=12206 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 229.385304][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.263'. [ 229.464197][ T40] audit: type=1400 audit(229.374:359): avc: denied { setopt } for pid=6937 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.517373][ T40] audit: type=1400 audit(229.424:360): avc: denied { read append } for pid=6949 comm="syz.2.266" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 229.577285][ T5965] Bluetooth: hci3: command tx timeout [ 229.640209][ T6961] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 229.807220][ T6829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.813046][ T6829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.819875][ T6829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.828494][ T6829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.844858][ T6978] netlink: 'syz.1.271': attribute type 39 has an invalid length. [ 229.851090][ T6978] veth0_macvtap: left promiscuous mode [ 229.974582][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.010115][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.019506][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.022448][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.047468][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.050588][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.096183][ T6829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.339133][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.397712][ T6829] veth0_vlan: entered promiscuous mode [ 230.405508][ T6829] veth1_vlan: entered promiscuous mode [ 230.463981][ T6829] veth0_macvtap: entered promiscuous mode [ 230.480586][ T6829] veth1_macvtap: entered promiscuous mode [ 230.518109][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.537132][ T7027] overlayfs: missing 'lowerdir' [ 230.544911][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.553256][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.569987][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.573817][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.578765][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.662896][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.669147][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.701746][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.704906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.730070][ T7037] netlink: 45 bytes leftover after parsing attributes in process `syz.3.281'. [ 230.821217][ T7041] bridge1: entered promiscuous mode [ 230.914455][ T7054] tipc: Started in network mode [ 230.916878][ T7054] tipc: Node identity b6104be6ef02, cluster identity 4711 [ 230.920109][ T7054] tipc: Enabled bearer , priority 0 [ 230.932709][ T7054] tipc: Disabling bearer [ 230.975876][ T7057] fuse: Unknown parameter 'Ld' [ 231.048844][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.052094][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.130691][ T7065] netlink: 'syz.3.290': attribute type 21 has an invalid length. [ 231.258981][ T7073] netlink: 96 bytes leftover after parsing attributes in process `syz.0.293'. [ 231.366945][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.394874][ T7082] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 231.398640][ T7082] netlink: 224 bytes leftover after parsing attributes in process `syz.0.295'. [ 231.427806][ T7084] overlayfs: failed to resolve 'xino=auto': -2 [ 231.666351][ T5965] Bluetooth: hci3: command tx timeout [ 231.671187][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 231.696330][ T7097] hsr_slave_1 (unregistering): left promiscuous mode [ 231.867073][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 231.890361][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 232.095609][ T7113] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 232.107378][ T7113] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 232.577369][ T7148] nfs: Unknown parameter 'nofscvideo1' [ 232.657141][ T7158] fuse: Bad value for 'fd' [ 232.717639][ T7162] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 232.720674][ T7162] overlayfs: missing 'lowerdir' [ 232.723536][ T7162] nfs4: Unknown parameter 'audit' [ 232.825652][ T7179] netlink: 'syz.1.315': attribute type 13 has an invalid length. [ 232.865083][ T7179] gretap0: refused to change device tx_queue_len [ 232.868177][ T7179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.961761][ T7187] pim6reg: entered allmulticast mode [ 232.969067][ T7187] pim6reg: left allmulticast mode [ 233.052544][ T7198] vcan0: tx address claim with different name [ 233.062935][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 233.214959][ T7205] dlm: no locking on control device [ 233.331745][ T7217] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.326'. [ 233.391886][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 233.391901][ T40] audit: type=1400 audit(233.304:387): avc: denied { mount } for pid=7223 comm="syz.3.327" name="/" dev="configfs" ino=3089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.394123][ T7224] overlayfs: failed to clone upperpath [ 233.464470][ T7234] netlink: 'syz.0.328': attribute type 4 has an invalid length. [ 233.475986][ T7228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59648 sclass=netlink_route_socket pid=7228 comm=syz.2.331 [ 233.525062][ T40] audit: type=1400 audit(233.434:388): avc: denied { mounton } for pid=7237 comm="syz.3.334" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 233.525172][ T7240] overlayfs: failed to resolve './file0': -2 [ 233.573088][ T7240] overlayfs: failed to resolve './file0': -2 [ 233.651861][ T7248] faux_driver vkms: [drm] Unknown color mode 181; guessing buffer size. [ 233.664550][ T40] audit: type=1400 audit(233.574:389): avc: denied { name_bind } for pid=7253 comm="syz.3.338" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 233.680957][ T7248] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 233.688480][ T40] audit: type=1400 audit(233.604:390): avc: denied { read } for pid=7253 comm="syz.3.338" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.689956][ T7248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.736398][ T5965] Bluetooth: hci3: command tx timeout [ 233.740374][ T7261] sctp: [Deprecated]: syz.3.340 (pid 7261) Use of int in maxseg socket option. [ 233.740374][ T7261] Use struct sctp_assoc_value instead [ 233.749065][ T40] audit: type=1400 audit(233.664:391): avc: denied { connect } for pid=7262 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.780482][ T40] audit: type=1400 audit(233.694:392): avc: denied { shutdown } for pid=7262 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.819467][ T5965] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 233.879260][ T40] audit: type=1400 audit(233.784:393): avc: denied { create } for pid=7270 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.902217][ T40] audit: type=1400 audit(233.814:394): avc: denied { write } for pid=7270 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 233.985740][ T7282] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 233.988606][ T7281] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 234.021695][ T7282] bond2: entered promiscuous mode [ 234.024150][ T7282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.032857][ T7282] bond2: entered allmulticast mode [ 234.046900][ T7282] bond2: (slave bridge2): making interface the new active one [ 234.050525][ T7282] bridge2: entered promiscuous mode [ 234.052789][ T7282] bridge2: entered allmulticast mode [ 234.055983][ T7282] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 234.174975][ T7297] syzkaller0: entered promiscuous mode [ 234.177025][ T7297] syzkaller0: entered allmulticast mode [ 234.182491][ T7299] netlink: 'syz.3.352': attribute type 23 has an invalid length. [ 234.547836][ T7328] overlayfs: failed to clone upperpath [ 234.648741][ T7321] tmpfs: Unknown parameter '00000000000000000000005' [ 234.777775][ T7340] openvswitch: netlink: IPv6 tunnel dst address is zero [ 234.812401][ T7344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.814422][ T40] audit: type=1400 audit(234.724:395): avc: denied { read } for pid=7341 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.858672][ T40] audit: type=1400 audit(234.774:396): avc: denied { connect } for pid=7341 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 234.947570][ T7359] ip6t_srh: unknown srh match flags 4000 [ 235.209410][ T7367] syzkaller0: entered promiscuous mode [ 235.211800][ T7367] syzkaller0: entered allmulticast mode [ 235.236177][ T7378] __nla_validate_parse: 4 callbacks suppressed [ 235.240070][ T7379] netlink: 5 bytes leftover after parsing attributes in process `syz.1.376'. [ 235.243727][ T7379] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 235.247491][ T7378] netlink: 5 bytes leftover after parsing attributes in process `syz.1.376'. [ 235.251188][ T7378] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 235.336845][ T7386] 8021q: VLANs not supported on sit0 [ 235.340692][ T7386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.378'. [ 235.356492][ T7386] tmpfs: Unknown parameter 'ne}vsr^' [ 235.436529][ T7390] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 235.450169][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 235.453932][ T7392] netlink: 18 bytes leftover after parsing attributes in process `syz.3.379'. [ 235.469567][ T7391] Bluetooth: MGMT ver 1.23 [ 235.471290][ T7391] Bluetooth: hci0: invalid len left 7, exp >= 173 [ 235.528332][ T7399] cgroup: name respecified [ 235.532984][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 235.535960][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 235.687721][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 235.735890][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 235.772168][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 235.775288][ T7423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38099 sclass=netlink_route_socket pid=7423 comm=syz.2.390 [ 235.809879][ T7427] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 235.823892][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.826907][ T5965] Bluetooth: hci3: command tx timeout [ 235.831082][ T7427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 235.837490][ T7427] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 235.841426][ T7427] batadv0: entered promiscuous mode [ 235.843906][ T7427] batadv0: entered allmulticast mode [ 235.849705][ T7427] bond0: (slave batadv0): Releasing backup interface [ 235.893058][ T7427] bridge0: port 3(batadv0) entered blocking state [ 235.895943][ T7427] bridge0: port 3(batadv0) entered disabled state [ 236.067954][ T7441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=7441 comm=syz.2.397 [ 236.106474][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 236.111041][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 236.157667][ T67] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.320180][ T67] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 236.323994][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.342079][ T67] usb 6-1: Product: syz [ 236.343713][ T67] usb 6-1: Manufacturer: syz [ 236.345458][ T67] usb 6-1: SerialNumber: syz [ 236.367341][ T67] usb 6-1: config 0 descriptor?? [ 236.376174][ T67] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 236.387908][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.397378][ T67] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 236.401343][ T67] usb 6-1: media controller created [ 236.418202][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.429331][ T7456] tipc: Started in network mode [ 236.431194][ T7456] tipc: Node identity , cluster identity 4711 [ 236.445664][ T67] DVB: Unable to find symbol mt352_attach() [ 236.468564][ T67] DVB: Unable to find symbol nxt6000_attach() [ 236.470616][ T67] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 236.485944][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input7 [ 236.505307][ T67] dvb-usb: schedule remote query interval to 1000 msecs. [ 236.510643][ T67] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 236.525861][ T67] dvb-usb: bulk message failed: -22 (7/0) [ 236.528235][ T67] dvb-usb: bulk message failed: -22 (7/0) [ 236.584215][ T7429] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 236.589855][ T7429] dvb-usb: bulk message failed: -22 (7/0) [ 236.801632][ T7473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=7473 comm=syz.3.407 [ 236.843717][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037487000: rx timeout, send abort [ 236.914119][ T112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.926371][ T112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.930262][ T112] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.933570][ T112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.343755][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037486800: rx timeout, send abort [ 237.346648][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037487000: abort rx timeout. Force session deactivation [ 237.355444][ T5929] usb 6-1: USB disconnect, device number 6 [ 237.472038][ T5929] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 237.603524][ T7506] random: crng reseeded on system resumption [ 237.846604][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037486800: abort rx timeout. Force session deactivation [ 237.910230][ T7521] overlayfs: upper fs does not support file handles, falling back to index=off. [ 237.915159][ T7521] veth0_to_bridge: entered promiscuous mode [ 237.918909][ T7520] veth0_to_bridge: left promiscuous mode [ 238.223330][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.231503][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.374191][ T7544] overlayfs: regular lower layers cannot follow data lower layers [ 238.489960][ T7550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.524814][ T40] kauditd_printk_skb: 4523 callbacks suppressed [ 238.524825][ T40] audit: type=1400 audit(238.434:4920): avc: denied { write } for pid=7554 comm="syz.0.427" lport=32846 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 238.528679][ T7557] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 238.538854][ T7555] erspan1: entered promiscuous mode [ 238.542585][ T40] audit: type=1400 audit(238.454:4921): avc: denied { relabelto } for pid=7556 comm="syz.2.428" name="file1" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:default_t:s0" [ 238.551584][ T40] audit: type=1400 audit(238.454:4922): avc: denied { associate } for pid=7556 comm="syz.2.428" name="file1" dev="tmpfs" ino=506 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:default_t:s0" [ 238.560441][ T7557] overlayfs: failed to resolve './file0': -2 [ 238.560621][ T7558] overlayfs: failed to resolve './file0': -2 [ 238.573764][ T7557] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 238.580489][ T40] audit: type=1400 audit(238.494:4923): avc: denied { ioctl } for pid=7556 comm="syz.2.428" path="/92/file1" dev="tmpfs" ino=506 ioctlcmd=0x54a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:default_t:s0" [ 238.616464][ T40] audit: type=1400 audit(238.514:4924): avc: denied { unlink } for pid=5956 comm="syz-executor" name="file1" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:default_t:s0" [ 238.668703][ T7576] fuse: Bad value for 'fd' [ 238.690676][ T7581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7581 comm=syz.2.434 [ 238.750778][ T40] audit: type=1326 audit(238.664:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.2.438" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bdfb9c629 code=0x0 [ 238.854185][ T7595] netlink: 'syz.2.438': attribute type 2 has an invalid length. [ 238.858466][ T7594] xt_nat: multiple ranges no longer supported [ 238.981262][ T7599] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 238.982721][ T40] audit: type=1400 audit(238.894:4926): avc: denied { create } for pid=7600 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 238.983922][ T7599] macsec1: entered allmulticast mode [ 238.998722][ T7599] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 239.019977][ T7604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.052605][ T40] audit: type=1400 audit(238.964:4927): avc: denied { bind } for pid=7609 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.063653][ T40] audit: type=1400 audit(238.964:4928): avc: denied { connect } for pid=7609 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.360984][ T40] audit: type=1400 audit(239.274:4929): avc: denied { ioctl } for pid=7643 comm="syz.3.449" path="socket:[16142]" dev="sockfs" ino=16142 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 239.720261][ T7669] binder: Bad value for 'max' [ 239.891920][ T7693] 9p: Could not find request transport: f [ 239.891920][ T7693] rfR0x0000000000000009 [ 240.219647][ T7753] loop2: detected capacity change from 0 to 7 [ 240.224668][ T7753] Dev loop2: unable to read RDB block 7 [ 240.231009][ T7753] loop2: unable to read partition table [ 240.232899][ T7753] loop2: partition table beyond EOD, truncated [ 240.242066][ T7753] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 240.289558][ T7760] dns_resolver: Unsupported content type (234) [ 240.316965][ T5334] Dev loop2: unable to read RDB block 7 [ 240.318808][ T5334] loop2: unable to read partition table [ 240.320740][ T5334] loop2: partition table beyond EOD, truncated [ 241.223602][ T7794] __nla_validate_parse: 12 callbacks suppressed [ 241.223617][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 241.231747][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 241.255428][ T7791] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 241.376531][ T7809] netlink: 196 bytes leftover after parsing attributes in process `syz.3.496'. [ 241.492455][ T7826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49960 sclass=netlink_route_socket pid=7826 comm=syz.0.501 [ 241.527308][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 241.578797][ T7833] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.606355][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 241.767294][ T29] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 241.771652][ T29] usb 6-1: config index 0 descriptor too short (expected 57115, got 27) [ 241.774326][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.777363][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.781020][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.783911][ T29] usb 6-1: config index 1 descriptor too short (expected 57115, got 27) [ 241.786787][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.789718][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.793130][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.796048][ T29] usb 6-1: config index 2 descriptor too short (expected 57115, got 27) [ 241.800615][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.804437][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.809141][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.813438][ T29] usb 6-1: config index 3 descriptor too short (expected 57115, got 27) [ 241.818630][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.818777][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 241.822227][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.830850][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.833897][ T7856] hsr_slave_0: left promiscuous mode [ 241.836262][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 241.837258][ T29] usb 6-1: config index 4 descriptor too short (expected 57115, got 27) [ 241.842647][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.846718][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.851398][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.855306][ T29] usb 6-1: config index 5 descriptor too short (expected 57115, got 27) [ 241.860802][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.862185][ T7861] sg_read: process 343 (syz.2.515) changed security contexts after opening file descriptor, this is not allowed. [ 241.864409][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.873220][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.873311][ T7858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 241.875815][ T5967] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 241.876525][ T29] usb 6-1: config index 6 descriptor too short (expected 57115, got 27) [ 241.876543][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.876581][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.876598][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.877400][ T29] usb 6-1: config index 7 descriptor too short (expected 57115, got 27) [ 241.877416][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.877441][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.877458][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.879168][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 241.909042][ T29] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 241.911676][ T29] usb 6-1: Product: syz [ 241.913008][ T29] usb 6-1: Manufacturer: syz [ 241.914551][ T29] usb 6-1: SerialNumber: syz [ 241.917405][ T29] usb 6-1: config 0 descriptor?? [ 241.927932][ T29] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 241.976294][ T5967] Bluetooth: hci3: command 0x0405 tx timeout [ 242.094625][ T7876] netlink: 'syz.0.518': attribute type 58 has an invalid length. [ 242.138925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.231630][ T7890] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 242.235493][ T7890] team0 (unregistering): Port device team_slave_0 removed [ 242.242009][ T7890] team0 (unregistering): Failed to send options change via netlink (err -105) [ 242.245124][ T7890] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 242.249245][ T7890] team0 (unregistering): Port device team_slave_1 removed [ 242.307753][ T7878] netlink: 'syz.3.519': attribute type 13 has an invalid length. [ 242.343549][ T7895] program syz.2.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.586482][ T59] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 242.658095][ T7905] loop6: detected capacity change from 0 to 524288000 [ 242.747924][ T59] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 242.751402][ T59] usb 7-1: config 0 has no interface number 0 [ 242.754069][ T59] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 242.763247][ T59] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.767995][ T59] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.774904][ T59] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 242.780022][ T59] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 242.783468][ T59] usb 7-1: Product: syz [ 242.785253][ T59] usb 7-1: SerialNumber: syz [ 242.789714][ T59] usb 7-1: config 0 descriptor?? [ 242.794523][ T59] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 242.800126][ T59] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input8 [ 243.027404][ T7895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 243.031164][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.032143][ T29] usb 7-1: USB disconnect, device number 3 [ 243.033354][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 243.068337][ T29] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 243.180922][ T7919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.531'. [ 243.183861][ T7919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.531'. [ 243.583294][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 243.583307][ T40] audit: type=1400 audit(243.494:4957): avc: denied { connect } for pid=7938 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 243.593983][ T40] audit: type=1400 audit(243.504:4958): avc: denied { read } for pid=7938 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 243.766970][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 243.771145][ T7944] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 243.806323][ T7948] dlm: no locking on control device [ 243.822171][ T7950] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 243.826132][ T7950] Cannot find set identified by id 3 to match [ 243.956695][ T40] audit: type=1400 audit(243.874:4959): avc: denied { getopt } for pid=7957 comm="syz.2.544" lport=53106 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 243.977364][ T40] audit: type=1400 audit(243.874:4960): avc: denied { getopt } for pid=7957 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.986343][ T40] audit: type=1400 audit(243.874:4961): avc: denied { ioctl } for pid=7957 comm="syz.2.544" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 244.003334][ T7965] xt_connbytes: Forcing CT accounting to be enabled [ 244.005551][ T7965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.033602][ T40] audit: type=1400 audit(243.944:4962): avc: denied { call } for pid=7970 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 244.039415][ T40] audit: type=1400 audit(243.944:4963): avc: denied { transfer } for pid=7970 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 244.146647][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 244.151483][ T6041] usb 6-1: USB disconnect, device number 7 [ 244.158649][ T6041] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 244.209038][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.226411][ T7989] bridge1: left promiscuous mode [ 244.244778][ T40] audit: type=1400 audit(244.104:4964): avc: denied { write } for pid=7984 comm="syz.2.552" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 244.254406][ T40] audit: type=1400 audit(244.104:4965): avc: denied { map } for pid=7984 comm="syz.2.552" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 244.258128][ T7990] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 244.262347][ T40] audit: type=1400 audit(244.104:4966): avc: denied { execute } for pid=7984 comm="syz.2.552" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 244.277032][ T7992] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 244.490228][ T5929] hid-generic 0005:0006:5508.0002: item fetching failed at offset 0/1 [ 244.493220][ T5929] hid-generic 0005:0006:5508.0002: probe with driver hid-generic failed with error -22 [ 244.578552][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.626728][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.666664][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.726563][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.766675][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.783032][ T8008] overlayfs: failed to set uuid (128/file0, err=-1); falling back to uuid=null. [ 244.790109][ T8008] overlayfs: failed to verify upper root origin [ 244.807112][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.866557][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.886639][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.956644][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 245.045115][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 245.056603][ T8000] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 245.063806][ T8011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8011 comm=syz.3.561 [ 245.207812][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.211491][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.214943][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.219540][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.222748][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.227822][ T29] usb 6-1: config 0 descriptor?? [ 245.406347][ T1456] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 245.558393][ T1456] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.562276][ T1456] usb 7-1: config 0 has no interfaces? [ 245.566553][ T1456] usb 7-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 245.569985][ T1456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.573149][ T1456] usb 7-1: Product: syz [ 245.574914][ T1456] usb 7-1: Manufacturer: syz [ 245.576680][ T1456] usb 7-1: SerialNumber: syz [ 245.580023][ T1456] usb 7-1: config 0 descriptor?? [ 245.687770][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.690697][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.705427][ T8035] xt_hashlimit: size too large, truncated to 1048576 [ 245.760388][ T8037] binder: 8034:8037 ioctl c0306201 2000000000c0 returned -14 [ 245.777026][ T8034] delete_channel: no stack [ 245.822841][ T8040] loop5: detected capacity change from 0 to 7 [ 245.827349][ T8040] Dev loop5: unable to read RDB block 7 [ 245.829247][ T8040] loop5: unable to read partition table [ 245.831335][ T8040] loop5: partition table beyond EOD, truncated [ 245.833394][ T8040] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 245.858692][ T1456] usb 7-1: USB disconnect, device number 4 [ 246.409793][ T8064] __nla_validate_parse: 22 callbacks suppressed [ 246.409806][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 246.588375][ T8067] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 246.593893][ T8067] Error validating options; rc = [-22] [ 246.944877][ T8084] dlm: non-version read from control device 189 [ 246.948017][ T8084] dlm: no locking on control device [ 247.476482][ T67] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 247.638739][ T67] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.642739][ T67] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.645985][ T67] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 247.649033][ T67] usb 5-1: Product: syz [ 247.650532][ T67] usb 5-1: Manufacturer: syz [ 247.652000][ T67] usb 5-1: SerialNumber: syz [ 247.655609][ T67] usb 5-1: config 0 descriptor?? [ 247.667211][ T67] usb 5-1: selecting invalid altsetting 0 [ 247.743548][ T8114] usb usb9: usbfs: process 8114 (syz.2.592) did not claim interface 5 before use [ 247.825961][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 247.828063][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 247.830005][ T29] usb 6-1: USB disconnect, device number 8 [ 247.917206][ T8126] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 247.927057][ T24] usb 5-1: USB disconnect, device number 8 [ 247.936868][ T8121] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 248.504753][ T8156] trusted_key: encrypted_key: insufficient parameters specified [ 248.713530][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 248.713547][ T40] audit: type=1400 audit(248.624:4981): avc: denied { remove_name } for pid=8180 comm="syz.2.615" name="file1" dev="9p" ino=72614183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.728206][ T8181] geneve2: entered promiscuous mode [ 248.728443][ T40] audit: type=1400 audit(248.624:4982): avc: denied { unlink } for pid=8180 comm="syz.2.615" name="file1" dev="9p" ino=72614183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.730576][ T8181] geneve2: entered allmulticast mode [ 248.731064][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.617'. [ 248.737668][ T40] audit: type=1400 audit(248.634:4983): avc: denied { add_name } for pid=8180 comm="syz.2.615" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.741764][ T8185] netlink: 'syz.0.617': attribute type 7 has an invalid length. [ 248.742209][ T40] audit: type=1400 audit(248.634:4984): avc: denied { create } for pid=8180 comm="syz.2.615" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 248.749545][ T8185] netlink: 'syz.0.617': attribute type 8 has an invalid length. [ 248.760285][ T40] audit: type=1400 audit(248.634:4985): avc: denied { associate } for pid=8180 comm="syz.2.615" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.763328][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 248.799475][ T29] IPVS: starting estimator thread 0... [ 248.811729][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.618'. [ 248.827530][ T1456] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 248.854953][ T8197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8197 comm=syz.0.619 [ 248.892227][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 248.896423][ T8194] IPVS: using max 40 ests per chain, 96000 per kthread [ 248.902341][ T8200] loop7: detected capacity change from 0 to 524255232 [ 248.986314][ T1456] usb 6-1: Using ep0 maxpacket: 16 [ 248.998155][ T1456] usb 6-1: config 0 has no interfaces? [ 249.001716][ T1456] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 249.006371][ T1456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.009089][ T1456] usb 6-1: Product: syz [ 249.010503][ T1456] usb 6-1: Manufacturer: syz [ 249.012006][ T1456] usb 6-1: SerialNumber: syz [ 249.037119][ T1456] usb 6-1: config 0 descriptor?? [ 249.046340][ T40] audit: type=1400 audit(248.954:4986): avc: denied { audit_write } for pid=8205 comm="syz.0.624" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 249.212146][ T8208] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 249.214630][ T8208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.620'. [ 249.244152][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.248989][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.255090][ T8171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.611'. [ 249.261689][ T24] usb 6-1: USB disconnect, device number 9 [ 249.283364][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 249.286450][ T8233] netlink: 'syz.0.630': attribute type 21 has an invalid length. [ 249.288885][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 249.297147][ T112] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.297223][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 249.300284][ T112] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.303152][ T8233] netlink: 'syz.0.630': attribute type 21 has an invalid length. [ 249.305801][ T112] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.305823][ T112] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.591273][ T8253] trusted_key: encrypted_key: insufficient parameters specified [ 249.685438][ T8259] fuse: Unknown parameter '' [ 249.866583][ T8273] usb usb8: usbfs: process 8273 (syz.0.639) did not claim interface 0 before use [ 250.049391][ T8268] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=528 sclass=netlink_xfrm_socket pid=8268 comm=syz.3.644 [ 250.279044][ T8300] trusted_key: encrypted_key: insufficient parameters specified [ 250.655439][ T8308] vxlan0: entered promiscuous mode [ 250.657268][ T8308] vxlan0: entered allmulticast mode [ 250.659507][ T112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.664002][ T112] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.668051][ T112] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.670931][ T112] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.404749][ T40] audit: type=1400 audit(2000000000.679:4987): avc: denied { setopt } for pid=8326 comm="syz.2.656" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.471715][ T40] audit: type=1400 audit(2000000000.749:4988): avc: denied { ioctl } for pid=8328 comm="syz.2.657" path="socket:[20904]" dev="sockfs" ino=20904 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.612482][ T8337] kernel profiling enabled (shift: 5) [ 252.852732][ T8272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.962116][ T8343] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 252.964113][ T8343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 252.967797][ T8343] vhci_hcd vhci_hcd.0: Device attached [ 252.970701][ T8350] vhci_hcd: connection closed [ 252.972439][ T61] vhci_hcd vhci_hcd.2: stop threads [ 252.978649][ T61] vhci_hcd vhci_hcd.2: release socket [ 252.983737][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 253.113954][ T8363] __nla_validate_parse: 1 callbacks suppressed [ 253.113971][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 253.121266][ T8363] openvswitch: netlink: Flow actions attr not present in new flow. [ 253.126767][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 253.130609][ T8364] openvswitch: netlink: Flow actions attr not present in new flow. [ 253.170342][ T8366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.669'. [ 253.228387][ T5965] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 253.623267][ T40] audit: type=1400 audit(2000000002.899:4989): avc: denied { create } for pid=8389 comm="syz.0.677" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.632690][ T40] audit: type=1400 audit(2000000002.899:4990): avc: denied { read write } for pid=8389 comm="syz.0.677" name="file0" dev="9p" ino=72614177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 253.695868][ T8400] fuse: Bad value for 'fd' [ 253.783850][ T8411] (syz.0.679,8411,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 253.787872][ T8411] (syz.0.679,8411,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 253.790315][ T8411] (syz.0.679,8411,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 253.793364][ T8411] (syz.0.679,8411,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 253.828276][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 253.828293][ T40] audit: type=1400 audit(2000000003.109:4992): avc: denied { setopt } for pid=8415 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.877608][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 253.944984][ T40] audit: type=1400 audit(2000000003.219:4993): avc: denied { map } for pid=8423 comm="syz.2.687" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 254.029906][ T8427] overlay: Bad value for 'workdir' [ 254.246327][ T1456] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 254.249689][ T59] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.286352][ T40] audit: type=1400 audit(2000000003.559:4994): avc: denied { ioctl } for pid=8445 comm="syz.3.693" path="socket:[19200]" dev="sockfs" ino=19200 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.349592][ T8446] pim6reg99999999: entered allmulticast mode [ 254.352987][ T8451] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 254.381047][ T8453] tipc: Cannot configure node identity twice [ 254.384476][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 254.414321][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 254.417464][ T1456] usb 7-1: Using ep0 maxpacket: 16 [ 254.422947][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 48732, setting to 1024 [ 254.426545][ T59] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 254.429773][ T59] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.435201][ T1456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.440608][ T1456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.443815][ T1456] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.449531][ T1456] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 254.452426][ T1456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.455429][ T59] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.459835][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.463504][ T59] usb 5-1: Product: syz [ 254.465357][ T59] usb 5-1: Manufacturer: syz [ 254.467956][ T59] usb 5-1: SerialNumber: syz [ 254.469980][ T1456] usb 7-1: config 0 descriptor?? [ 254.477804][ T8429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.482311][ T59] hub 5-1:1.0: bad descriptor, ignoring hub [ 254.484926][ T59] hub 5-1:1.0: probe with driver hub failed with error -5 [ 254.693362][ T59] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.878036][ T1456] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 254.880968][ T1456] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 254.883164][ T1456] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 254.885397][ T1456] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 254.888192][ T1456] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 254.897037][ T40] audit: type=1400 audit(2000000004.169:4995): avc: denied { read write } for pid=8428 comm="syz.0.688" name="lp0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 254.901935][ T1456] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 254.909661][ T40] audit: type=1400 audit(2000000004.169:4996): avc: denied { open } for pid=8428 comm="syz.0.688" path="/dev/usb/lp0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 254.929935][ T40] audit: type=1400 audit(2000000004.209:4997): avc: denied { listen } for pid=8466 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.943770][ T1456] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 254.944375][ T1456] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 254.947222][ T40] audit: type=1400 audit(2000000004.209:4998): avc: denied { accept } for pid=8466 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.962305][ T40] audit: type=1400 audit(2000000004.239:4999): avc: denied { listen } for pid=8470 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.970564][ T40] audit: type=1400 audit(2000000004.239:5000): avc: denied { accept } for pid=8470 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.037597][ T8474] overlay: ./file0 is not a directory [ 255.077760][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.080690][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.084592][ T8048] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.088416][ T59] usb 7-1: USB disconnect, device number 5 [ 255.091297][ T8048] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.097886][ T8048] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.103827][ T8048] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.123558][ T8481] overlayfs: upper fs does not support file handles, falling back to index=off. [ 255.235229][ T8485] fuse: Unknown parameter 'grOup_' [ 255.462856][ T8498] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 255.468232][ T40] audit: type=1400 audit(2000000004.749:5001): avc: denied { relabelto } for pid=8497 comm="syz.1.710" name="mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 255.627625][ T8429] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 255.801824][ T8472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.027970][ T59] usb 5-1: USB disconnect, device number 9 [ 256.033006][ T59] usblp0: removed [ 256.168072][ T8524] bridge4: entered promiscuous mode [ 256.287296][ T5965] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 256.292299][ T8498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.298871][ T8498] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 256.309036][ T8498] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 256.314245][ T8498] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.316445][ T8498] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 256.320772][ T8498] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 256.323845][ T8498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.326024][ T8498] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.329811][ T8498] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.334095][ T8498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.336303][ T8498] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 256.339778][ T8498] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 256.545661][ T8554] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 256.690797][ T8566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.990228][ T8592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.992907][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.995667][ T8592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.999183][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.005034][ T8592] bridge0: port 3(batadv0) entered disabled state [ 257.037623][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 257.061144][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 257.398708][ T8618] mkiss: ax0: crc mode is auto. [ 257.412535][ T8618] loop5: detected capacity change from 0 to 7 [ 257.415694][ T8618] Dev loop5: unable to read RDB block 7 [ 257.419235][ T8618] loop5: AHDI p1 [ 257.420543][ T8618] loop5: partition table partially beyond EOD, truncated [ 257.457094][ T8620] openvswitch: netlink: Missing valid actions attribute. [ 257.459411][ T8620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.523286][ T8623] xt_CT: No such helper "pptp" [ 257.586324][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.091586][ T8629] cgroup: fork rejected by pids controller in /syz0 [ 258.110581][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 258.245790][ T8746] netlink: 'syz.3.757': attribute type 21 has an invalid length. [ 258.249361][ T8746] netlink: 128 bytes leftover after parsing attributes in process `syz.3.757'. [ 258.270804][ T8746] netlink: 3 bytes leftover after parsing attributes in process `syz.3.757'. [ 258.274349][ T8746] netlink: 'syz.3.757': attribute type 21 has an invalid length. [ 258.278812][ T8746] netlink: 128 bytes leftover after parsing attributes in process `syz.3.757'. [ 258.282669][ T8746] netlink: 3 bytes leftover after parsing attributes in process `syz.3.757'. [ 258.376380][ T5965] Bluetooth: hci2: command 0x0c1a tx timeout [ 258.376405][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.412627][ T8755] kvm: pic: single mode not supported [ 258.412696][ T8755] kvm: pic: level sensitive irq not supported [ 258.642263][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.648188][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.651191][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.654053][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.657356][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.727512][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.732128][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.896865][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.900248][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.908234][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 258.908244][ T40] audit: type=1400 audit(2000000008.189:5015): avc: denied { ioctl } for pid=8783 comm="syz.3.765" path="socket:[21929]" dev="sockfs" ino=21929 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 259.007465][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.011620][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.083923][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 259.129955][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.133738][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.167894][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.171464][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.173815][ T8772] bridge_slave_0: entered allmulticast mode [ 259.178050][ T8772] bridge_slave_0: entered promiscuous mode [ 259.181530][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.183868][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.186357][ T8772] bridge_slave_1: entered allmulticast mode [ 259.189780][ T8772] bridge_slave_1: entered promiscuous mode [ 259.209303][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.213902][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.232707][ T8772] team0: Port device team_slave_0 added [ 259.236178][ T8772] team0: Port device team_slave_1 added [ 259.252918][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.255222][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.263812][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.268372][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.270575][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.280253][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.331048][ T8772] hsr_slave_0: entered promiscuous mode [ 259.333564][ T8772] hsr_slave_1: entered promiscuous mode [ 259.373694][ T61] bridge_slave_1: left allmulticast mode [ 259.375511][ T61] bridge_slave_1: left promiscuous mode [ 259.377630][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.380938][ T61] bridge_slave_0: left allmulticast mode [ 259.382749][ T61] bridge_slave_0: left promiscuous mode [ 259.385773][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.652299][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.656425][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.673905][ T40] audit: type=1400 audit(2000000008.949:5016): avc: denied { append } for pid=8824 comm="syz.2.777" name="file0" dev="9p" ino=72614177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.689642][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.710528][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 259.714229][ T8825] netlink: 'syz.2.777': attribute type 7 has an invalid length. [ 259.718318][ T61] bond0 (unregistering): Released all slaves [ 259.724623][ T61] bond1 (unregistering): Released all slaves [ 259.742806][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 259.745938][ T8825] netlink: 'syz.2.777': attribute type 7 has an invalid length. [ 259.768894][ T8825] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 259.768894][ T8825] program syz.2.777 not setting count and/or reply_len properly [ 259.990671][ T8835] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 260.189810][ T8853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.255426][ T40] audit: type=1400 audit(2000000009.529:5017): avc: denied { execute } for pid=8855 comm="syz.2.782" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 260.340899][ T61] veth1_macvtap: left promiscuous mode [ 260.342753][ T61] veth0_macvtap: left promiscuous mode [ 260.344687][ T61] veth1_vlan: left promiscuous mode [ 260.347521][ T61] veth0_vlan: left promiscuous mode [ 260.459303][ T5965] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.466339][ T5965] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.472939][ T40] audit: type=1400 audit(2000000009.749:5018): avc: denied { setopt } for pid=8874 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.532559][ T40] audit: type=1400 audit(2000000009.809:5019): avc: denied { lock } for pid=8874 comm="syz.2.786" path="socket:[22106]" dev="sockfs" ino=22106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.634766][ T8878] vxcan1: entered promiscuous mode [ 260.696377][ T5965] Bluetooth: hci3: command tx timeout [ 260.698632][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.783223][ T8772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.795130][ T8772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.803531][ T8772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.810850][ T8772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.870094][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.881984][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.888873][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.891442][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.902765][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.905825][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.048845][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.049854][ T8916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.795'. [ 261.148626][ T8772] veth0_vlan: entered promiscuous mode [ 261.155763][ T8772] veth1_vlan: entered promiscuous mode [ 261.172272][ T8772] veth0_macvtap: entered promiscuous mode [ 261.176783][ T8772] veth1_macvtap: entered promiscuous mode [ 261.188029][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.194140][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.232519][ T1185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.235997][ T1185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.240733][ T1185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.243670][ T1185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.306948][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.310356][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.335135][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.339355][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.361459][ T40] audit: type=1400 audit(2000000010.639:5020): avc: denied { mounton } for pid=8772 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 261.370861][ T40] audit: type=1400 audit(2000000010.639:5021): avc: denied { mounton } for pid=8772 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 261.736363][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.738972][ T8953] overlay: Unknown parameter '' [ 261.774205][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 261.788547][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'. [ 261.792175][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 261.838350][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.803'. [ 261.852290][ T29] hid-generic 0005:0006:5508.0004: item fetching failed at offset 0/1 [ 261.855136][ T29] hid-generic 0005:0006:5508.0004: probe with driver hid-generic failed with error -22 [ 261.908791][ T40] audit: type=1400 audit(2000000011.189:5022): avc: denied { mounton } for pid=8965 comm="syz.2.808" path="/196/bus" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 261.911395][ T8966] Mount JFS Failure: -22 [ 261.943975][ T40] audit: type=1400 audit(2000000011.219:5023): avc: denied { listen } for pid=8968 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.017930][ T8974] ucma_write: process 589 (syz.2.811) changed security contexts after opening file descriptor, this is not allowed. [ 262.025282][ T40] audit: type=1400 audit(2000000011.299:5024): avc: denied { setattr } for pid=8973 comm="syz.2.811" name="/" dev="9p" ino=72614171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.487979][ T8991] random: crng reseeded on system resumption [ 262.498154][ T8991] PM: hibernation: Image mismatch: memory size [ 262.546295][ T5965] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.548882][ T5965] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.690597][ T9009] 8021q: VLANs not supported on gre0 [ 262.746182][ T9021] overlayfs: failed to clone lowerpath [ 262.750213][ T9021] overlayfs: failed to clone lowerpath [ 262.753520][ T9021] netlink: zone id is out of range [ 262.755560][ T9021] netlink: get zone limit has 4 unknown bytes [ 262.776348][ T5967] Bluetooth: hci3: command tx timeout [ 262.816776][ T9026] 9p: Bad value for 'rfdno' [ 262.948691][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 263.096399][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 263.100279][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.103858][ T29] usb 6-1: config 0 has no interfaces? [ 263.105703][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 263.109775][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.114300][ T29] usb 6-1: config 0 descriptor?? [ 263.273802][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802940c000: rx timeout, send abort [ 263.277215][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802940c000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.422300][ T9041] __nla_validate_parse: 4 callbacks suppressed [ 263.422313][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 263.671010][ T9047] hfsplus: unable to find HFS+ superblock [ 264.060330][ T9057] mkiss: ax0: crc mode is auto. [ 264.245611][ T9060] Bluetooth: MGMT ver 1.23 [ 264.613566][ T9077] 9pnet_virtio: no channels available for device syz [ 264.616344][ T9077] 9pnet_virtio: no channels available for device syz [ 264.702211][ T9087] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.704661][ T9089] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 264.705672][ T9087] team0: Device ipvlan2 is already an upper device of the team interface [ 264.716851][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.721921][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.727475][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.732373][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.738506][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.743646][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.749264][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.753608][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9089 comm=syz.2.848 [ 264.800443][ T9089] syzkaller0: entered promiscuous mode [ 264.802765][ T9089] syzkaller0: entered allmulticast mode [ 264.866457][ T5967] Bluetooth: hci3: command tx timeout [ 265.313479][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 265.313496][ T40] audit: type=1400 audit(2000000014.589:5030): avc: denied { bind } for pid=9103 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.726525][ T9] usb 6-1: USB disconnect, device number 10 [ 266.125387][ T9129] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 266.179258][ T9135] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.181497][ T40] audit: type=1400 audit(2000000015.459:5031): avc: denied { write } for pid=9133 comm="syz.0.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.186729][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 266.356295][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 266.381272][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 266.399490][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.403204][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.407320][ T9] usb 6-1: Product: syz [ 266.409138][ T9] usb 6-1: Manufacturer: syz [ 266.411164][ T9] usb 6-1: SerialNumber: syz [ 266.428310][ T9] usb 6-1: config 0 descriptor?? [ 266.438449][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.445144][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 266.452868][ T9157] cgroup: subsys name conflicts with all [ 266.453600][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 266.458942][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 266.463631][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 266.469811][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 266.548806][ T40] audit: type=1400 audit(2000000015.829:5032): avc: denied { bind } for pid=9163 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.561946][ T9168] netlink: 'syz.0.868': attribute type 15 has an invalid length. [ 266.566334][ T40] audit: type=1400 audit(2000000015.829:5033): avc: denied { connect } for pid=9163 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.617183][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 266.624329][ T9171] netlink: 'syz.0.868': attribute type 20 has an invalid length. [ 266.673621][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 266.677250][ T7716] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.678644][ T9171] netlink: 'syz.0.868': attribute type 20 has an invalid length. [ 266.683679][ T7716] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.696648][ T7716] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.700456][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'. [ 266.709614][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.871'. [ 266.730514][ T7716] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.789122][ T40] audit: type=1400 audit(2000000016.069:5034): avc: denied { append } for pid=9181 comm="syz.2.872" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.799312][ T40] audit: type=1400 audit(2000000016.079:5035): avc: denied { execute } for pid=9181 comm="syz.2.872" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 266.842636][ T9192] binder: BINDER_SET_CONTEXT_MGR already set [ 266.845487][ T9192] binder: 9191:9192 ioctl 4018620d 200000000040 returned -16 [ 266.849930][ T9192] binder: 9191:9192 ioctl c0306201 2000000003c0 returned -14 [ 266.853480][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.874'. [ 266.904691][ T9203] binder: 9202:9203 unknown command 3 [ 266.908364][ T9203] binder: 9202:9203 ioctl c0306201 200000000180 returned -22 [ 266.936419][ T5967] Bluetooth: hci3: command tx timeout [ 267.039910][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 267.163606][ T9216] xt_hashlimit: size too large, truncated to 1048576 [ 267.227423][ T40] audit: type=1400 audit(2000000016.509:5036): avc: denied { setopt } for pid=9215 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.451476][ T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 267.455476][ T9] em28xx 6-1:0.0: board has no eeprom [ 267.571410][ T9233] nfs4: Unknown parameter '' [ 267.870883][ T9256] xt_socket: unknown flags 0x20 [ 268.182484][ T40] audit: type=1400 audit(2000000017.459:5037): avc: denied { map } for pid=9279 comm="syz.2.894" path="socket:[24453]" dev="sockfs" ino=24453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.191144][ T40] audit: type=1400 audit(2000000017.459:5038): avc: denied { accept } for pid=9279 comm="syz.2.894" path="socket:[24453]" dev="sockfs" ino=24453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.192702][ T9280] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 268.203796][ T9280] syzkaller1: linktype set to 769 [ 268.255576][ T9285] overlayfs: failed to clone upperpath [ 268.294273][ T9287] random: crng reseeded on system resumption [ 268.301471][ T40] audit: type=1400 audit(2000000017.579:5039): avc: denied { ioctl } for pid=9286 comm="syz.2.897" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 268.537636][ T9117] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 268.608635][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 268.614770][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 268.619635][ T67] em28xx 6-1:0.0: Binding DVB extension [ 268.634832][ T9] usb 6-1: USB disconnect, device number 11 [ 268.644794][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 268.664909][ T67] em28xx 6-1:0.0: Registering input extension [ 268.667995][ T9] em28xx 6-1:0.0: Closing input extension [ 268.698446][ T9] em28xx 6-1:0.0: Freeing device [ 268.919432][ T9298] __nla_validate_parse: 6 callbacks suppressed [ 268.919447][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 268.958498][ T9300] Cannot find del_set index 4 as target [ 269.006104][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 269.016671][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 269.022223][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 269.026718][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 269.031453][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 269.035758][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 269.091572][ T9313] ip6t_rpfilter: unknown options [ 269.141955][ T8048] libceph: connect (1)[c::]:6789 error -101 [ 269.144172][ T8048] libceph: mon0 (1)[c::]:6789 connect error [ 269.188609][ T9] libceph: connect (1)[c::]:6789 error -101 [ 269.193457][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 269.199978][ T9] libceph: connect (1)[c::]:6789 error -101 [ 269.202031][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 269.240297][ T9326] netlink: 220 bytes leftover after parsing attributes in process `syz.3.905'. [ 269.282295][ T9328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.908'. [ 269.285558][ T9328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.908'. [ 269.319951][ T9332] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 269.408168][ T8048] libceph: connect (1)[c::]:6789 error -101 [ 269.411253][ T8048] libceph: mon0 (1)[c::]:6789 connect error [ 269.457652][ T9] libceph: connect (1)[c::]:6789 error -101 [ 269.460391][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 269.586436][ T8048] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 269.756309][ T8048] usb 5-1: Using ep0 maxpacket: 8 [ 269.759273][ T8048] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 269.762103][ T8048] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.766003][ T8048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.769651][ T8048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.772823][ T8048] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.777238][ T8048] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.780305][ T8048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.916667][ T59] libceph: connect (1)[c::]:6789 error -101 [ 269.918888][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 269.961871][ T9315] ceph: No mds server is up or the cluster is laggy [ 269.962150][ T9321] ceph: No mds server is up or the cluster is laggy [ 269.968667][ T67] libceph: connect (1)[c::]:6789 error -101 [ 269.972599][ T67] libceph: mon0 (1)[c::]:6789 connect error [ 269.999811][ T8048] usb 5-1: GET_CAPABILITIES returned 0 [ 270.001839][ T8048] usbtmc 5-1:16.0: can't read capabilities [ 270.045803][ T9339] fuse: Unknown parameter 'rootmo}F[7ӹ000000000000040' [ 270.197703][ T8048] usb 5-1: USB disconnect, device number 10 [ 270.276525][ T9348] : renamed from vlan0 (while UP) [ 270.306392][ T9357] netlink: 'syz.1.917': attribute type 2 has an invalid length. [ 270.470810][ T9368] overlayfs: missing 'workdir' [ 270.768824][ T9395] Cannot find add_set index 0 as target [ 270.795655][ T9395] : entered promiscuous mode [ 270.901555][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 270.901567][ T40] audit: type=1400 audit(2000000020.179:5043): avc: denied { ioctl } for pid=9400 comm="syz.0.932" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 270.916929][ T40] audit: type=1400 audit(2000000020.189:5044): avc: denied { listen } for pid=9396 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.930415][ T40] audit: type=1400 audit(2000000020.209:5045): avc: denied { ioctl } for pid=9405 comm="syz.2.934" path="socket:[27666]" dev="sockfs" ino=27666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.952294][ T9407] batadv_slave_1: entered promiscuous mode [ 271.149256][ T5967] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 271.363007][ T9429] xt_bpf: check failed: parse error [ 271.451646][ T40] audit: type=1400 audit(2000000020.729:5046): avc: denied { setopt } for pid=9432 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 271.696090][ T9400] batadv_slave_1: left promiscuous mode [ 271.772889][ T9438] sctp: [Deprecated]: syz.0.945 (pid 9438) Use of int in max_burst socket option. [ 271.772889][ T9438] Use struct sctp_assoc_value instead [ 272.059024][ T9467] CIFS mount error: No usable UNC path provided in device string! [ 272.059024][ T9467] [ 272.062122][ T9467] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 272.169186][ T9477] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 272.171976][ T9477] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.179846][ T9477] vhci_hcd vhci_hcd.0: Device attached [ 272.187880][ T9477] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 272.190604][ T9477] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.193772][ T9477] vhci_hcd vhci_hcd.0: Device attached [ 272.197520][ T9482] vhci_hcd: connection closed [ 272.197726][ T9478] vhci_hcd: connection closed [ 272.202732][ T7732] vhci_hcd vhci_hcd.0: stop threads [ 272.207551][ T7732] vhci_hcd vhci_hcd.0: release socket [ 272.215650][ T7732] vhci_hcd vhci_hcd.0: disconnect device [ 272.219349][ T7732] vhci_hcd vhci_hcd.0: stop threads [ 272.221548][ T7732] vhci_hcd vhci_hcd.0: release socket [ 272.223722][ T7732] vhci_hcd vhci_hcd.0: disconnect device [ 272.268580][ T40] audit: type=1400 audit(2000000021.549:5047): avc: denied { read } for pid=9484 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.338290][ T9472] xt_NFQUEUE: number of total queues is 0 [ 272.458609][ T40] audit: type=1400 audit(2000000021.739:5048): avc: denied { accept } for pid=9491 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.522541][ T9492] can0: slcan on pty24. [ 272.691978][ T9491] can0 (unregistered): slcan off pty24. [ 272.692098][ T40] audit: type=1400 audit(2000000021.969:5049): avc: denied { perfmon } for pid=9503 comm="syz.3.961" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.707099][ T40] audit: type=1400 audit(2000000021.969:5050): avc: denied { bpf } for pid=9503 comm="syz.3.961" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.733510][ T9509] tmpfs: Unknown parameter '6pv)K}P' [ 272.736125][ T9509] nfs4: Bad value for 'source' [ 272.736290][ T40] audit: type=1400 audit(2000000022.009:5051): avc: denied { getopt } for pid=9508 comm="syz.3.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 272.755863][ T9509] fuse: Bad value for 'fd' [ 272.758217][ T9509] 9p: Bad value for 'wfdno' [ 272.838742][ T9525] xt_hashlimit: size too large, truncated to 1048576 [ 273.250679][ T9547] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64545 sclass=netlink_xfrm_socket pid=9547 comm=syz.2.971 [ 273.305855][ T40] audit: type=1800 audit(2000000022.579:5052): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.960" name="file0" dev="fuse" ino=5 res=0 errno=0 [ 273.354031][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 273.497407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.865362][ T9596] program syz.0.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.979217][ T5967] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 274.182303][ T9613] __nla_validate_parse: 14 callbacks suppressed [ 274.182322][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 274.207136][ T9613] bond0: entered promiscuous mode [ 274.209318][ T9613] bond_slave_0: entered promiscuous mode [ 274.211964][ T9613] bond_slave_1: entered promiscuous mode [ 274.214948][ T9613] batadv0: entered promiscuous mode [ 274.219380][ T9613] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 274.224154][ T9613] bond0: left promiscuous mode [ 274.225836][ T9613] bond_slave_0: left promiscuous mode [ 274.228297][ T9613] bond_slave_1: left promiscuous mode [ 274.231498][ T9613] batadv0: left promiscuous mode [ 274.306391][ T67] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 274.453738][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 274.460658][ T67] usb 7-1: unable to get BOS descriptor or descriptor too short [ 274.464258][ T67] usb 7-1: not running at top speed; connect to a high speed hub [ 274.474551][ T67] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.480202][ T67] usb 7-1: config 1 interface 0 has no altsetting 0 [ 274.483926][ T67] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.487533][ T67] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.490250][ T67] usb 7-1: Product: syz [ 274.491633][ T67] usb 7-1: Manufacturer: syz [ 274.493137][ T67] usb 7-1: SerialNumber: syz [ 274.713229][ T67] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 274.725053][ T67] usb 7-1: USB disconnect, device number 6 [ 275.150167][ T9642] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 275.152324][ T9642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.156008][ T9642] vhci_hcd vhci_hcd.0: Device attached [ 275.162140][ T9642] vhci_hcd vhci_hcd.0: port 0 already used [ 275.175565][ T9643] vhci_hcd: connection closed [ 275.175924][ T7716] vhci_hcd vhci_hcd.0: stop threads [ 275.181165][ T7716] vhci_hcd vhci_hcd.0: release socket [ 275.184056][ T7716] vhci_hcd vhci_hcd.0: disconnect device [ 275.801488][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 275.847006][ T9660] delete_channel: no stack [ 276.240847][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 276.240858][ T40] audit: type=1400 audit(2000524313.523:5058): avc: denied { map } for pid=9689 comm="syz.1.1012" path="socket:[28795]" dev="sockfs" ino=28795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 276.290996][ T40] audit: type=1400 audit(2000524313.573:5059): avc: denied { connect } for pid=9691 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.397469][ T9698] pim6reg1: entered promiscuous mode [ 276.399688][ T9698] pim6reg1: entered allmulticast mode [ 276.423405][ T40] audit: type=1400 audit(2000524313.703:5060): avc: denied { create } for pid=9704 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 276.498309][ T9709] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 276.501620][ T9709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 276.532953][ T9709] vxcan1: entered allmulticast mode [ 276.549785][ T9714] usb usb9: usbfs: process 9714 (syz.2.1019) did not claim interface 0 before use [ 276.777897][ T40] audit: type=1400 audit(2000524314.052:5061): avc: denied { set_context_mgr } for pid=9734 comm="syz.0.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 276.779411][ T9735] binder: 9734:9735 ioctl c0205865 200000000240 returned -22 [ 276.789623][ T40] audit: type=1400 audit(2000524314.061:5062): avc: denied { call } for pid=9734 comm="syz.0.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 276.789737][ T9735] binder: 9734:9735 ioctl c0306201 200000000680 returned -14 [ 276.796649][ T40] audit: type=1400 audit(2000524314.061:5063): avc: denied { transfer } for pid=9734 comm="syz.0.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 276.923015][ T5929] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 277.001299][ T9745] tmpfs: Bad value for 'mpol' [ 277.032351][ T9742] sp0: Synchronizing with TNC [ 277.110318][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.114179][ T5929] usb 6-1: not running at top speed; connect to a high speed hub [ 277.118401][ T5929] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.124105][ T5929] usb 6-1: config 1 interface 0 has no altsetting 0 [ 277.128737][ T5929] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.139480][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.142798][ T5929] usb 6-1: Product: syz [ 277.144570][ T5929] usb 6-1: Manufacturer: syz [ 277.146516][ T5929] usb 6-1: SerialNumber: syz [ 277.253853][ T40] audit: type=1400 audit(2000524314.526:5064): avc: denied { mounton } for pid=9750 comm="syz.0.1032" path="/58/file0/file0" dev="9p" ino=72614177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 277.253992][ T9751] fuse: Bad value for 'group_id' [ 277.266071][ T9751] fuse: Bad value for 'group_id' [ 277.280077][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 277.282363][ T40] audit: type=1800 audit(2000524314.546:5065): pid=9751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1032" name="file0" dev="9p" ino=72614177 res=0 errno=0 [ 277.408690][ T40] audit: type=1400 audit(2000524314.672:5066): avc: denied { create } for pid=9764 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.419625][ T40] audit: type=1400 audit(2000524314.672:5067): avc: denied { connect } for pid=9764 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.647161][ T9782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 277.734108][ T9784] fuse: Unknown parameter 'bהV00000000000000000003' [ 277.740186][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 277.850980][ T9803] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1045'. [ 277.999321][ T5929] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 278.018442][ T5929] usb 6-1: USB disconnect, device number 12 [ 278.066606][ T9818] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 278.072937][ T9818] bond3 (unregistering): Released all slaves [ 278.155685][ T9826] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 278.315971][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1055'. [ 278.327063][ T9840] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 278.399882][ T9847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.493739][ T9853] nfs4: Unknown parameter '0x0000000000000004' [ 278.496290][ T9854] nfs4: Unknown parameter '0x0000000000000004' [ 278.668495][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1069'. [ 278.733489][ T9877] gretap2: entered allmulticast mode [ 278.740079][ T9873] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 278.767374][ T9873] netlink: 'syz.2.1071': attribute type 3 has an invalid length. [ 278.770394][ T9873] netlink: 'syz.2.1071': attribute type 3 has an invalid length. [ 278.803509][ T9882] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 278.807515][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 278.815152][ T9882] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 279.975608][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1084'. [ 280.048983][ T9931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1086'. [ 280.209898][ T9943] new mount options do not match the existing superblock, will be ignored [ 280.216239][ T9942] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 280.312998][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 280.315903][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 280.856481][ T9971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2665071234 (85282279488 ns) > initial count (83970453792 ns). Using initial count to start timer. [ 280.870353][ T9980] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 280.873153][ T9980] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 281.008744][ T9991] Device name not specified. [ 281.008744][ T9991] [ 281.023155][ T9994] xt_hashlimit: size too large, truncated to 1048576 [ 281.054089][ T9996] qnx6: unable to set blocksize [ 281.269303][ T5967] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 281.306140][T10026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1811 sclass=netlink_route_socket pid=10026 comm=syz.2.1113 [ 281.364584][T10038] can0: slcan on ttyS3. [ 281.373449][T10040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10040 comm=syz.3.1119 [ 281.388475][T10040] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 281.437005][T10048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.448958][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 281.448970][ T40] audit: type=1400 audit(2000524318.601:5084): avc: denied { map } for pid=10037 comm="syz.1.1118" path="socket:[30299]" dev="sockfs" ino=30299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.455221][T10046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1120'. [ 281.459781][ T40] audit: type=1400 audit(2000524318.601:5085): avc: denied { getopt } for pid=10044 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 281.462179][T10040] bond3: (slave bridge5): making interface the new active one [ 281.462691][T10040] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 281.470364][ T40] audit: type=1400 audit(2000524318.601:5086): avc: denied { wake_alarm } for pid=10044 comm="syz.0.1120" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.536382][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 281.545890][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1123'. [ 281.599419][T10061] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.625543][T10041] can0 (unregistered): slcan off ttyS3. [ 281.651304][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 281.654588][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 281.657683][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 282.172100][ T40] audit: type=1400 audit(2000524319.304:5087): avc: denied { name_bind } for pid=10114 comm="syz.0.1142" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 282.211377][T10117] cgroup: none used incorrectly [ 282.259533][T10122] bridge_slave_1: default FDB implementation only supports local addresses [ 282.401700][T10133] netlink: 'syz.0.1149': attribute type 1 has an invalid length. [ 282.489861][T10133] bond1: (slave geneve3): making interface the new active one [ 282.493748][T10133] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 282.497534][ T226] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.513945][ T226] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.517715][ T226] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.533827][ T226] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.996227][T10164] netlink: 'syz.2.1158': attribute type 2 has an invalid length. [ 283.002039][T10164] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 283.008203][T10166] netlink: 'syz.2.1158': attribute type 2 has an invalid length. [ 283.011324][T10166] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 283.285327][T10171] dns_resolver: Unsupported server list version (0) [ 283.285851][ T40] audit: type=1400 audit(2000524320.390:5088): avc: denied { connect } for pid=10170 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.657961][ T67] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 283.790589][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 283.821264][ T67] usb 6-1: Using ep0 maxpacket: 8 [ 283.825768][ T67] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 283.829213][ T67] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.842016][ T67] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.846166][ T67] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.850133][ T67] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.862988][ T67] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.866825][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.908415][ T40] audit: type=1326 audit(2000524321.006:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.0.1166" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358359c629 code=0x0 [ 283.945723][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.949586][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.953066][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.958202][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.961137][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.965924][ T29] usb 7-1: config 0 descriptor?? [ 284.025253][T10188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.045240][T10188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.047842][T10188] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 284.051819][T10188] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 284.091199][ T67] usb 6-1: GET_CAPABILITIES returned 0 [ 284.092966][ T67] usbtmc 6-1:16.0: can't read capabilities [ 284.160007][T10191] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 284.164721][ T40] audit: type=1400 audit(2000524321.251:5090): avc: denied { relabelto } for pid=10190 comm="syz.3.1167" name="/" dev="ramfs" ino=29136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 284.175668][ T40] audit: type=1400 audit(2000524321.251:5091): avc: denied { associate } for pid=10190 comm="syz.3.1167" name="/" dev="ramfs" ino=29136 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 284.177604][T10191] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 284.188049][T10191] overlayfs: failed to set xattr on upper [ 284.190843][T10191] overlayfs: ...falling back to redirect_dir=nofollow. [ 284.193850][T10191] overlayfs: ...falling back to metacopy=off. [ 284.196208][T10191] overlayfs: ...falling back to index=off. [ 284.198111][T10191] overlayfs: ...falling back to uuid=null. [ 284.302099][T10174] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 284.306481][ T67] usb 6-1: USB disconnect, device number 13 [ 284.415377][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 284.625512][ T40] audit: type=1400 audit(2000524321.702:5092): avc: denied { create } for pid=10213 comm="syz.3.1173" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.633935][ T40] audit: type=1400 audit(2000524321.702:5093): avc: denied { map } for pid=10213 comm="syz.3.1173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 285.171120][T10241] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 285.314292][T10250] __nla_validate_parse: 86 callbacks suppressed [ 285.314305][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 285.390495][T10250] syzkaller0: entered promiscuous mode [ 285.397381][T10250] syzkaller0: entered allmulticast mode [ 285.458953][T10258] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 285.545464][T10267] fuse: Unknown parameter 'xW [ 285.545464][T10267] 3 [w%$/*2 y*'W' [ 285.545512][T10266] fuse: Unknown parameter 'group_id?D R˼c ' [ 285.631404][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.687611][T10275] libceph: secret too big 289 [ 285.851155][ T29] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 285.901528][ T6041] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 285.983076][ T29] usb 7-1: device descriptor read/64, error -32 [ 286.064548][ T6041] usb 5-1: Using ep0 maxpacket: 8 [ 286.067843][ T6041] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 286.071225][ T6041] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.074767][ T6041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.079333][ T6041] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.083211][ T6041] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.088655][ T6041] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.092956][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.106231][ T6041] usbtmc 5-1:16.0: bulk endpoints not found [ 286.227341][ T29] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 286.359614][ T29] usb 7-1: device descriptor read/64, error -32 [ 286.495568][T10301] overlayfs: failed to clone lowerpath [ 286.603850][ T29] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 286.638892][ T29] usb 7-1: device descriptor read/8, error -32 [ 286.925110][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 286.925126][ T40] audit: type=1400 audit(2000524323.960:5103): avc: denied { read write } for pid=10306 comm="syz.2.1204" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 286.928127][T10307] sd 0:0:0:0: PR command failed: 1026 [ 286.937528][ T40] audit: type=1400 audit(2000524323.960:5104): avc: denied { open } for pid=10306 comm="syz.2.1204" path="/291/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 286.940217][T10307] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 286.948773][ T40] audit: type=1400 audit(2000524323.960:5105): avc: denied { ioctl } for pid=10306 comm="syz.2.1204" path="/291/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 286.952201][T10307] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 287.063095][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 287.116794][ T40] audit: type=1400 audit(2000524324.147:5106): avc: denied { bind } for pid=10314 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 287.125195][ T40] audit: type=1400 audit(2000524324.167:5107): avc: denied { lock } for pid=10314 comm="syz.2.1206" path="socket:[30569]" dev="sockfs" ino=30569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 287.541322][T10319] netlink: 'syz.3.1208': attribute type 3 has an invalid length. [ 287.543729][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 287.544318][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 287.553864][ T5959] usb 7-1: USB disconnect, device number 7 [ 287.579024][T10322] sp0: Synchronizing with TNC [ 287.688195][ T40] audit: type=1400 audit(2000524324.708:5108): avc: denied { read write } for pid=10333 comm="syz.2.1212" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 287.696983][T10328] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1210'. [ 287.701134][T10328] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.708108][ T40] audit: type=1400 audit(2000524324.708:5109): avc: denied { open } for pid=10333 comm="syz.2.1212" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 287.925770][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.935800][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.946003][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.956222][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.966296][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.976492][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.986653][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 287.996790][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 288.007001][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 288.017116][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1215 [ 288.727732][ T34] usb 5-1: USB disconnect, device number 11 [ 288.736201][T10358] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 288.736201][T10358] The task syz.3.1217 (10358) triggered the difference, watch for misbehavior. [ 288.771979][T10360] loop4: detected capacity change from 0 to 524287999 [ 288.777666][T10360] wireguard: wg2: Could not create IPv4 socket [ 288.787982][ T5973] buffer_io_error: 27 callbacks suppressed [ 288.787995][ T5973] Buffer I/O error on dev loop4, logical block 65535998, async page read [ 288.812751][T10362] bad cache= option: nonw [ 288.812751][T10362] [ 288.815054][T10362] CIFS: VFS: bad cache= option: nonw [ 288.901629][ T40] audit: type=1400 audit(2000524325.909:5110): avc: denied { load_policy } for pid=10364 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 288.901905][T10365] SELinux: policydb version -1130091936 does not match my version range 15-35 [ 288.913624][T10365] SELinux: failed to load policy [ 288.963168][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 289.023626][T10369] delete_channel: no stack [ 289.206738][T10390] xt_l2tp: v2 tid > 0xffff: 2031748 [ 289.368771][T10400] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 289.371499][T10400] syzkaller0: group set to 0 [ 290.778678][T10409] trusted_key: encrypted_key: insufficient parameters specified [ 290.783586][T10409] trusted_key: encrypted_key: master key parameter 'def' is invalid [ 290.854674][T10409] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.857553][T10409] overlayfs: missing 'lowerdir' [ 291.091038][T10421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1234'. [ 291.354964][ T39] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 291.496752][ T39] usb 7-1: device descriptor read/64, error -71 [ 291.739907][ T39] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 291.871492][ T39] usb 7-1: device descriptor read/64, error -71 [ 291.983083][ T39] usb usb7-port1: attempt power cycle [ 292.174047][T10380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.252600][T10429] syz_tun: entered promiscuous mode [ 292.254498][T10429] syz_tun: entered allmulticast mode [ 292.258954][T10429] overlay: filesystem on ./bus is read-only [ 292.306522][T10437] xt_hashlimit: size too large, truncated to 1048576 [ 292.309458][T10438] xt_hashlimit: size too large, truncated to 1048576 [ 292.337158][ T39] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 292.366503][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 292.366670][ T39] usb 7-1: device descriptor read/8, error -71 [ 292.374709][T10442] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1240'. [ 292.379662][T10442] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1240'. [ 292.384457][T10437] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1240'. [ 292.391675][T10437] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1240'. [ 292.392334][ T40] audit: type=1400 audit(2000524329.352:5111): avc: denied { setattr } for pid=10443 comm="syz.3.1242" name="RAWv6" dev="sockfs" ino=31703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.450183][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 292.463439][T10450] bond3: entered promiscuous mode [ 292.465283][T10450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.483224][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 292.486059][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 292.489390][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1244'. [ 292.500022][T10450] bond3: (slave sit1): refused to change device type [ 292.507689][ T5967] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 292.622353][ T39] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 292.651471][ T39] usb 7-1: device descriptor read/8, error -71 [ 292.762558][ T39] usb usb7-port1: unable to enumerate USB device [ 292.775249][ T40] audit: type=1326 audit(2000524329.727:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.1255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ad439c629 code=0x0 [ 293.066208][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 293.198162][ T34] usb 5-1: device descriptor read/64, error -71 [ 293.460278][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.490504][ T8048] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 293.601779][ T34] usb 5-1: device descriptor read/64, error -71 [ 293.643725][ T8048] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.647776][ T8048] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.651009][ T8048] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.654252][ T8048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.659223][T10525] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 293.668665][ T8048] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.713320][ T34] usb usb5-port1: attempt power cycle [ 293.962554][ T8048] usb 6-1: USB disconnect, device number 14 [ 294.057497][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 294.077768][ T34] usb 5-1: device descriptor read/8, error -71 [ 294.329869][ T34] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 294.360744][ T34] usb 5-1: device descriptor read/8, error -71 [ 294.476629][ T34] usb usb5-port1: unable to enumerate USB device [ 294.666143][ T40] audit: type=1400 audit(2000524331.606:5113): avc: denied { lock } for pid=10563 comm="syz.1.1277" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 294.667783][T10564] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 294.754121][ T40] audit: type=1400 audit(2000524331.695:5114): avc: denied { ioctl } for pid=10566 comm="syz.1.1278" path="socket:[33805]" dev="sockfs" ino=33805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 294.817230][T10569] overlay: Bad value for 'workdir' [ 294.896859][T10577] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 295.228972][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 295.314204][ T40] audit: type=1400 audit(2000524332.240:5115): avc: denied { remount } for pid=10591 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 295.363927][ T5967] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 295.367720][ T5967] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 295.386856][T10592] hsr_slave_1 (unregistering): left promiscuous mode [ 295.390515][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 295.396527][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 295.400087][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.404628][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.408585][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.413586][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.418980][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.422174][T10594] netlink: 'syz.2.1287': attribute type 13 has an invalid length. [ 295.423486][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.604086][ T40] audit: type=1400 audit(2000524332.527:5116): avc: denied { read } for pid=10597 comm="syz.2.1289" name="mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 295.619578][ T40] audit: type=1400 audit(2000524332.527:5117): avc: denied { open } for pid=10597 comm="syz.2.1289" path="/dev/mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 295.632571][ T40] audit: type=1400 audit(2000524332.547:5118): avc: denied { ioctl } for pid=10597 comm="syz.2.1289" path="/dev/mixer" dev="devtmpfs" ino=1319 ioctlcmd=0xd07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 295.645846][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 295.648283][ T34] usbtmc 6-1:16.0: can't read capabilities [ 295.863398][ T34] usb 6-1: USB disconnect, device number 15 [ 295.934529][T10618] cgroup: Name too long [ 296.191440][T10651] geneve2: entered promiscuous mode [ 296.193619][T10651] geneve2: entered allmulticast mode [ 296.207213][T10654] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 296.344243][T10670] syz.1.1307: attempt to access beyond end of device [ 296.344243][T10670] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 296.351603][T10670] gfs2: error -5 reading superblock [ 296.404499][T10684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.574430][T10696] netlink: 'syz.1.1313': attribute type 9 has an invalid length. [ 296.718452][ T40] audit: type=1400 audit(2000524333.636:5119): avc: denied { getopt } for pid=10706 comm="syz.1.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 296.740202][T10702] dlm: no local IP address has been set [ 296.744128][T10702] dlm: cannot start dlm midcomms -107 [ 296.749999][T10702] program syz.2.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.789172][T10713] syzkaller0: entered promiscuous mode [ 296.791068][T10713] syzkaller0: entered allmulticast mode [ 296.798999][ T40] audit: type=1400 audit(2000524333.716:5120): avc: denied { create } for pid=10712 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 296.820966][T10713] __nla_validate_parse: 8 callbacks suppressed [ 296.820983][T10713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1319'. [ 296.997375][ T1185] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 297.001103][ T1185] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 297.003735][ T1185] CPU: 1 UID: 0 PID: 1185 Comm: kworker/u32:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.007539][ T1185] Tainted: [L]=SOFTLOCKUP [ 297.009107][ T1185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.013141][ T1185] Workqueue: krdsd rds_tcp_accept_worker [ 297.015294][ T1185] RIP: 0010:rds_tcp_accept_one+0x9aa/0xd90 [ 297.017664][ T1185] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b1 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 12 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 76 03 00 00 [ 297.025523][ T1185] RSP: 0018:ffffc90006697b68 EFLAGS: 00010202 [ 297.028027][ T1185] RAX: dffffc0000000000 RBX: ffff88803b553a00 RCX: 0000000000000000 [ 297.030987][ T1185] RDX: 0000000000000002 RSI: ffffffff8adb987a RDI: 0000000000000012 [ 297.034130][ T1185] RBP: ffff888013a8a140 R08: 0000000000000001 R09: 0000000000000000 [ 297.037315][ T1185] R10: 0000000000000001 R11: 1ffffffff1cfe929 R12: 0000000000000000 [ 297.040554][ T1185] R13: ffff8880366ed840 R14: ffff888037604000 R15: ffff8880366ed860 [ 297.043855][ T1185] FS: 0000000000000000(0000) GS:ffff8880d6448000(0000) knlGS:0000000000000000 [ 297.047550][ T1185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.050189][ T1185] CR2: 00007f358364e9d3 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 297.053340][ T1185] Call Trace: [ 297.054751][ T1185] [ 297.055946][ T1185] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 297.058165][ T1185] rds_tcp_accept_worker+0x41/0x60 [ 297.060258][ T1185] process_one_work+0x9d7/0x1920 [ 297.062283][ T1185] ? __pfx_process_one_work+0x10/0x10 [ 297.064434][ T1185] ? __pfx_rds_tcp_accept_worker+0x10/0x10 [ 297.066789][ T1185] worker_thread+0x5da/0xe40 [ 297.068651][ T1185] ? __pfx_worker_thread+0x10/0x10 [ 297.070735][ T1185] ? kthread+0x13a/0x450 [ 297.072457][ T1185] ? __pfx_worker_thread+0x10/0x10 [ 297.074272][ T1185] kthread+0x370/0x450 [ 297.075590][ T1185] ? __pfx_kthread+0x10/0x10 [ 297.077081][ T1185] ret_from_fork+0x754/0xd80 [ 297.078695][ T1185] ? __pfx_ret_from_fork+0x10/0x10 [ 297.080581][ T1185] ? __switch_to+0x7b4/0x1120 [ 297.082376][ T1185] ? __pfx_kthread+0x10/0x10 [ 297.084036][ T1185] ret_from_fork_asm+0x1a/0x30 [ 297.085616][ T1185] [ 297.086644][ T1185] Modules linked in: [ 297.088895][ T1185] ---[ end trace 0000000000000000 ]--- [ 297.092217][ T1185] RIP: 0010:rds_tcp_accept_one+0x9aa/0xd90 [ 297.094155][ T1185] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b1 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 12 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 76 03 00 00 [ 297.100672][ T1185] RSP: 0018:ffffc90006697b68 EFLAGS: 00010202 [ 297.102662][ T1185] RAX: dffffc0000000000 RBX: ffff88803b553a00 RCX: 0000000000000000 [ 297.111111][ T1185] RDX: 0000000000000002 RSI: ffffffff8adb987a RDI: 0000000000000012 [ 297.113675][ T1185] RBP: ffff888013a8a140 R08: 0000000000000001 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.126743][ T1185] R10: 0000000000000001 R11: 1ffffffff1cfe929 R12: 0000000000000000 [ 297.129362][ T1185] R13: ffff8880366ed840 R14: ffff888037604000 R15: ffff8880366ed860 [ 297.131927][ T1185] FS: 0000000000000000(0000) GS:ffff8880d6348000(0000) knlGS:0000000000000000 [ 297.134785][ T1185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.136958][ T1185] CR2: 00005555844cc7e0 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 297.139464][ T1185] Kernel panic - not syncing: Fatal exception [ 297.141989][ T1185] Kernel Offset: disabled [ 297.143334][ T1185] Rebooting in 86400 seconds..